Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
File:                     3929491D59EC78DBDEC7423B04D06034C1A59303.mft (raw, json)
Hash identifier:          RI6RtoMYuEtpFxUMX64H3q5mP9ZQ6JhYr4+z0Q+HW7A=
Subject key identifier:   D8:62:81:89:07:96:B5:81:CB:40:AF:51:64:B6:9C:D8:16:74:5B:83
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       283F1CBF4721153A887F602E0BA9093F3A7376EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
Manifest number:          01E3
Signing time:             Sat 29 Mar 2025 02:58:08 +0000
Manifest this update:     Sat 29 Mar 2025 02:53:08 +0000
Manifest next update:     Sun 30 Mar 2025 04:59:08 +0000
Files and hashes:         1: 3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (hash: 5worlU83AAVZHAiq+9hKj0B+5yQI8olkprzeRgIP3pI=)
                          2: 3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (hash: FfS5AdltD+bYy6tMSQEon9HbbkIAv8M2kl+4KD/wENk=)
                          3: 3929491D59EC78DBDEC7423B04D06034C1A59303.crl (hash: dADVeAuCdKoV8EDR2PSPAj49NLzKjHXeqKCxbDTb8WM=)
                          4: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (hash: yjTkMcDk4CLMzQBlzrsAYIcrdcAzSw6jBr5IYfZdehI=)
                          5: 3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (hash: 4oN8ZtLbU8xuNa0RF+vyGH0ConKe1xPJNJNTpNJOuJ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3f:1c:bf:47:21:15:3a:88:7f:60:2e:0b:a9:09:3f:3a:73:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Mar 29 02:53:08 2025 GMT
            Not After : Mar 30 04:59:08 2025 GMT
        Subject: CN=D86281890796B581CB40AF5164B69CD816745B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:46:86:42:57:f2:4f:6d:d4:b6:e3:53:7b:
                    27:c6:8d:01:57:1c:a8:33:61:50:10:40:54:4d:c3:
                    6f:39:16:e4:d2:5a:c0:b3:fc:6d:86:e3:79:f7:13:
                    f8:89:54:79:d7:31:8d:ca:af:3d:e5:2d:13:b0:34:
                    a4:18:f4:55:f5:23:13:aa:7f:c1:86:a7:75:71:e5:
                    e6:b4:80:78:c2:2a:55:4c:71:e5:d3:87:96:b6:2a:
                    a8:c9:52:f2:1f:95:fa:34:8d:41:ef:a3:82:80:b1:
                    fa:2f:88:c8:84:74:6d:6b:48:73:bc:6a:e5:12:9d:
                    04:7a:56:e5:55:1e:19:31:8e:e7:6e:0d:b6:51:00:
                    a1:99:85:aa:fe:3a:b8:e4:53:02:f5:03:d4:34:17:
                    68:59:16:15:49:c1:5f:21:48:3b:eb:11:fb:cf:a3:
                    30:0f:e3:1f:dc:94:bb:84:3c:db:16:30:43:4a:c4:
                    73:10:4c:ce:91:41:8a:1a:6b:2f:93:b0:6c:e1:a3:
                    53:c0:b4:fb:16:9b:03:de:f4:a5:5a:25:e2:2a:be:
                    31:2d:68:1d:75:ac:be:1b:b8:c6:08:77:8f:bc:8e:
                    0b:0a:dd:ac:d7:3d:23:5c:d9:fd:fe:0e:3a:4a:4a:
                    ed:b5:52:46:08:7c:4a:97:2a:ed:98:59:d7:cb:34:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:62:81:89:07:96:B5:81:CB:40:AF:51:64:B6:9C:D8:16:74:5B:83
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:08:ff:6d:54:84:1b:5b:bd:4d:02:ee:4f:98:08:c2:dd:eb:
         f5:28:0e:2f:9f:f8:a4:55:47:08:c8:57:22:87:86:ec:2a:dc:
         f2:63:a4:08:bf:ec:58:64:06:d5:02:ae:98:98:ec:f8:fc:d7:
         23:9c:39:69:17:35:e9:5b:9f:a4:50:4e:96:78:39:5c:b3:a0:
         70:66:27:68:03:59:74:ab:65:d5:a4:5d:80:49:b4:0c:e0:4e:
         7b:72:cd:82:a9:d3:0c:1b:59:28:e1:12:bb:d6:b1:af:9b:3c:
         5e:40:2b:b4:4f:a9:af:4d:3b:3d:8c:37:66:e4:20:c0:60:b7:
         90:d9:ae:7b:fe:5f:e9:87:52:19:4c:d3:e8:d9:ed:5d:21:f7:
         3f:ee:de:9b:fc:d4:1a:2f:00:b0:4b:f0:ad:ff:c2:ad:e3:7c:
         1f:fb:e4:e6:80:29:35:49:c8:02:89:71:46:38:bf:3f:51:95:
         e2:31:03:0a:8f:be:ef:57:55:6d:f7:f2:d9:d5:1a:fa:fc:90:
         24:86:80:b3:e4:23:db:d7:ff:4f:ac:26:19:3b:02:dc:46:36:
         8b:43:03:7a:a6:62:29:2f:68:ec:5c:a0:60:a8:9b:1a:73:b7:
         ed:f1:61:7a:31:64:c1:d2:fa:ac:78:6a:a9:e2:3b:ed:58:7f:
         04:85:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:33:06 2025 by rpki-client