Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
File:                     2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft (raw, json)
Hash identifier:          OJfNdXol22wwPi/+u7ijAJ5IttSw1j4NXxQZ+PbezgE=
Subject key identifier:   14:54:CC:D9:E2:4A:B1:7C:35:DE:26:4A:AC:D0:95:68:25:0D:5C:0F
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       19DEA64634BBF8EA036B43DBE4ECB688A4056143
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
Manifest number:          01DD
Signing time:             Sat 29 Mar 2025 04:59:24 +0000
Manifest this update:     Sat 29 Mar 2025 04:54:24 +0000
Manifest next update:     Sun 30 Mar 2025 06:41:24 +0000
Files and hashes:         1: 2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl (hash: 2ZuPdf56nv74nFtpd66e91O3cWpUKso6zc7vgF+EVYo=)
                          2: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: 3sxZs3Y6zVNNgLScctDhTTFNDQdOZLcuEzMOUREzMRw=)
                          3: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (hash: tCfqS8UfvI979KF3Vff43TGrFJXiZp8XAjbb1Wo4ZPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:de:a6:46:34:bb:f8:ea:03:6b:43:db:e4:ec:b6:88:a4:05:61:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Mar 29 04:54:24 2025 GMT
            Not After : Mar 30 06:41:24 2025 GMT
        Subject: CN=1454CCD9E24AB17C35DE264AACD09568250D5C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:e5:94:0a:7b:65:7e:5b:24:3b:5e:7c:cb:
                    1a:56:d7:aa:b9:97:97:e0:b1:38:7e:13:ee:08:f3:
                    60:60:fc:35:81:74:d7:54:f1:29:7c:4f:93:10:38:
                    ee:06:ed:6a:2d:26:48:2b:9a:34:da:e8:53:c0:b9:
                    cf:f7:27:91:b4:ad:da:2d:7b:ea:59:31:a6:32:c7:
                    23:5a:16:2b:de:a2:33:7f:73:fc:17:d2:97:eb:42:
                    ce:2d:e5:cb:a0:5e:71:c2:29:29:13:79:d6:99:c6:
                    39:b1:f5:79:04:ae:51:c0:37:2e:cb:4f:82:e0:94:
                    3c:12:f4:22:f7:c4:9d:97:cf:bb:65:07:dc:db:46:
                    ab:b9:bf:7e:d1:ff:1c:34:67:2e:2a:14:70:32:ba:
                    7c:b0:3b:f0:6b:50:02:b8:59:e6:77:ab:54:94:0e:
                    4e:4c:2c:31:58:75:6b:e9:6c:ae:55:58:89:21:8e:
                    03:09:8a:6d:e3:9a:70:10:cf:0e:ef:c7:39:49:ca:
                    bc:77:e8:84:bd:cc:27:72:80:f6:6e:cc:66:db:c7:
                    a4:fd:4b:4d:07:41:f6:ea:94:d3:4f:c4:c2:6d:62:
                    0a:1f:a6:68:39:d2:3f:5c:fd:c7:8e:1a:c7:97:fe:
                    2b:ce:3a:c7:55:78:a6:f7:b1:2e:3a:83:67:47:94:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:54:CC:D9:E2:4A:B1:7C:35:DE:26:4A:AC:D0:95:68:25:0D:5C:0F
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:ea:93:04:08:8d:90:3e:91:b3:7d:cb:91:e0:ee:1d:2f:
         a9:f4:4a:6d:44:6c:e9:48:5e:28:91:5b:5a:0f:09:6f:93:db:
         f1:c9:5a:82:77:5c:7b:41:08:a1:fe:53:ce:91:c0:92:08:81:
         38:d3:9e:10:49:7a:cc:b8:40:48:39:b0:53:0d:7b:70:23:11:
         86:dc:c9:66:9d:39:8a:67:49:87:f0:da:4a:3f:8f:e0:00:83:
         db:04:c2:23:b3:fb:77:53:d6:1c:9b:f5:aa:0d:b4:74:8d:7b:
         71:e8:05:3b:c6:93:37:3b:81:a6:74:1b:75:ef:c5:cb:cc:aa:
         00:20:51:cf:b8:16:9f:30:86:5e:e4:bf:eb:0e:57:33:34:ae:
         4d:5f:38:5a:37:ac:00:3f:78:f7:07:e5:a6:45:ed:6a:05:34:
         df:40:74:e0:6e:8f:41:df:63:de:66:d4:72:56:18:19:aa:cb:
         e1:f2:32:be:d7:81:b2:d2:03:60:a2:88:bf:cf:7a:ec:e1:06:
         44:d3:37:ab:37:b8:41:f1:c9:79:96:5b:8c:ba:0a:06:90:96:
         fe:0a:3c:5c:c5:95:3b:a1:43:56:88:5b:52:72:70:fe:58:5d:
         d5:ce:b5:cc:d1:0d:16:1b:5e:7b:6d:d0:06:3c:b1:19:ff:a0:
         e1:64:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:12 2025 by rpki-client