Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.mft
File:                     D14EC644659D1E0D5F095439C95C32C828BB5478.mft (raw, json)
Hash identifier:          cxnmUkSyDTOZtMhrE7fTVITArCnN4NpRWboDxTKsRLQ=
Subject key identifier:   08:6F:D7:7D:89:DA:02:FD:67:7F:9E:65:28:D9:3D:8B:61:6F:54:5B
Authority key identifier: D1:4E:C6:44:65:9D:1E:0D:5F:09:54:39:C9:5C:32:C8:28:BB:54:78
Certificate issuer:       /CN=D14EC644659D1E0D5F095439C95C32C828BB5478
Certificate serial:       548475F173D6477A499C5A05E8F82C8B0DB51663
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14EC644659D1E0D5F095439C95C32C828BB5478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.mft
Manifest number:          5D
Signing time:             Sat 29 Mar 2025 02:27:15 +0000
Manifest this update:     Sat 29 Mar 2025 02:22:15 +0000
Manifest next update:     Sun 30 Mar 2025 02:52:15 +0000
Files and hashes:         1: 34352e3139302e35322e302f32322d3332203d3e20323639363237.roa (hash: y0JmpBQ0t1dmSS9usEDqJ02++4hjZQW9sJG/KxsoUmw=)
                          2: D14EC644659D1E0D5F095439C95C32C828BB5478.crl (hash: p5uRxkfJxtUnZokaWznrDfG8nqxz6t6ZxrYOV6tANIA=)
                          3: 323830343a363736633a3a2f33322d313238203d3e20323639363237.roa (hash: NhiemtXWUdGKvgpGqI+SGDr6cVNPzqXLUNmpYq3wpg8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:75:f1:73:d6:47:7a:49:9c:5a:05:e8:f8:2c:8b:0d:b5:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14EC644659D1E0D5F095439C95C32C828BB5478
        Validity
            Not Before: Mar 29 02:22:15 2025 GMT
            Not After : Mar 30 02:52:15 2025 GMT
        Subject: CN=086FD77D89DA02FD677F9E6528D93D8B616F545B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:bc:1d:c2:09:d7:a1:73:08:6a:e7:58:c6:
                    63:03:64:90:9e:c1:e6:29:cb:9e:e1:6f:ac:71:b2:
                    6d:e7:46:3f:6e:5e:94:20:79:dd:41:db:20:9e:07:
                    42:08:a8:0f:47:6f:5b:be:8a:40:0d:81:00:cf:84:
                    a6:af:3c:a0:b5:ac:0b:ce:be:cf:c8:e1:99:66:96:
                    10:63:32:0a:e6:3d:38:37:5a:06:e3:6c:fd:d1:40:
                    bd:d1:c6:eb:17:ae:f6:66:fd:0e:12:fa:91:2f:af:
                    10:55:9d:7c:fa:ad:14:af:02:97:b8:9a:3a:12:cd:
                    87:20:da:b8:7c:01:80:61:41:ec:f0:4b:46:3e:74:
                    a5:01:ec:a4:c4:7b:d8:9c:2c:75:a8:e9:8c:76:50:
                    96:91:0a:a7:90:07:07:88:f5:04:0c:ba:87:a4:d9:
                    b8:dc:96:62:81:5f:ec:55:20:5c:52:57:4b:53:dd:
                    3d:f1:25:d6:9e:4e:94:05:75:a7:bd:51:96:59:c1:
                    90:74:73:cb:e8:71:08:eb:a8:05:bf:b3:fd:26:17:
                    79:0a:46:d3:7a:95:c3:06:d7:a9:6a:f9:c7:56:a5:
                    87:c6:ca:23:ee:a5:6f:c7:a6:58:d8:76:ee:ea:1c:
                    be:1f:c2:0b:4a:c2:93:d4:65:7c:d0:63:19:2d:4b:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6F:D7:7D:89:DA:02:FD:67:7F:9E:65:28:D9:3D:8B:61:6F:54:5B
            X509v3 Authority Key Identifier:
                keyid:D1:4E:C6:44:65:9D:1E:0D:5F:09:54:39:C9:5C:32:C8:28:BB:54:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14EC644659D1E0D5F095439C95C32C828BB5478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:85:4d:fb:1e:23:ad:da:50:a0:55:91:eb:cb:19:d8:ff:99:
         bc:4b:b6:74:8a:ce:80:93:c5:8d:c3:fd:f0:f7:60:91:90:b3:
         5d:46:ad:f7:a7:cd:e5:bd:66:46:48:ac:9b:ef:27:7d:02:5e:
         40:0a:42:45:52:b0:80:c3:d2:49:af:39:c9:18:51:69:1a:63:
         10:3c:0e:49:70:ba:95:a2:ed:e5:a1:48:28:33:63:75:dd:c6:
         30:f8:dc:5a:c6:4b:57:a4:57:ef:ae:ba:66:df:40:2b:98:3d:
         e9:78:7d:9e:0d:69:e6:8f:b6:e4:55:37:3e:52:59:f1:b2:b4:
         0b:d6:90:85:f0:2f:82:be:d0:68:49:c4:c3:43:90:4c:be:b8:
         1d:ec:56:85:53:86:fa:f3:0b:cb:4a:38:7d:a6:57:9b:44:c5:
         f5:43:7d:66:96:cb:7e:4c:65:d5:d7:09:a5:13:ff:19:76:f7:
         27:24:8a:b5:78:bd:69:e2:0a:72:5c:fc:bb:7f:94:27:b5:51:
         5b:9a:29:05:87:b0:1b:06:cf:ce:eb:c3:62:9b:0f:5b:60:70:
         4f:f5:21:ec:6d:74:9e:e6:d8:98:dc:1d:ff:c5:07:91:d7:94:
         9d:f1:62:7e:3f:2e:b9:3b:00:cf:f2:7c:60:56:7a:d1:43:11:
         0f:ef:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:46:32 2025 by rpki-client