Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft
File:                     BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft (raw, json)
Hash identifier:          F7yH3yHnIjHjQiFTYOw5Xj6j3DfD9ntKgZ/lJBadOgE=
Subject key identifier:   AA:11:5A:93:90:4F:33:8D:AE:4E:A9:B7:DB:01:F3:06:46:CC:C7:D8
Authority key identifier: BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66
Certificate issuer:       /CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66
Certificate serial:       5CB87DA1190960A8C6489EFD5434F8DF400AFC78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft
Manifest number:          01DC
Signing time:             Sat 29 Mar 2025 06:38:43 +0000
Manifest this update:     Sat 29 Mar 2025 06:33:43 +0000
Manifest next update:     Sun 30 Mar 2025 09:50:43 +0000
Files and hashes:         1: 34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa (hash: HLE+MVNufsUtJDxVF6iJdsGS+LXj5C2OrJx6teEXH4k=)
                          2: BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl (hash: h3KdXxXCJ56i+jzHnFXjQQIDbXvJn10ZCmAIqmSHoBs=)
                          3: 323830343a356537343a3a2f33322d3438203d3e20323639303334.roa (hash: W8jlJcG9NHblhLN/IuhKmcFz8ks5dqdngzusjBcRslM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b8:7d:a1:19:09:60:a8:c6:48:9e:fd:54:34:f8:df:40:0a:fc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66
        Validity
            Not Before: Mar 29 06:33:43 2025 GMT
            Not After : Mar 30 09:50:43 2025 GMT
        Subject: CN=AA115A93904F338DAE4EA9B7DB01F30646CCC7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:7c:b1:58:ec:5b:b0:9c:e9:67:44:e7:3f:
                    d9:ea:02:30:e4:bf:d6:34:3b:60:5a:c0:ca:bd:be:
                    a5:3a:95:b0:78:19:5c:df:d2:3f:d7:ac:68:33:74:
                    97:1a:bc:3a:b9:4b:01:1b:e9:51:16:87:63:75:70:
                    e6:e5:19:81:1e:54:b9:4c:91:1c:3f:06:1e:de:0d:
                    a3:c7:0f:1b:3d:56:f2:a6:6c:be:4e:b9:da:b5:9f:
                    2f:8f:43:84:eb:e0:3f:8c:11:2c:0b:7b:8a:2d:4d:
                    ea:03:26:89:88:65:c4:ac:7f:39:37:40:17:24:3f:
                    ec:67:ea:03:1d:bd:34:52:cc:b1:d0:40:ea:65:81:
                    d4:25:03:13:bd:96:c5:d4:a3:5c:72:24:9a:ec:79:
                    51:1e:3d:6e:b9:91:d1:03:7e:37:cf:58:a7:cf:39:
                    d7:92:ea:05:2c:69:a5:98:80:af:ca:84:f2:20:35:
                    89:20:51:21:f1:63:ed:e0:18:b8:a0:24:cd:81:19:
                    9e:8e:48:7b:15:58:46:ce:0d:3d:f3:e0:3b:84:8d:
                    e8:5d:6e:15:32:81:3e:23:aa:db:b6:71:ea:0d:cc:
                    b8:8e:9e:a6:7e:b7:b4:86:c2:06:b5:f4:b0:f5:24:
                    9c:d0:45:fa:5b:f5:7c:2f:74:1b:f1:b7:c0:19:82:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:11:5A:93:90:4F:33:8D:AE:4E:A9:B7:DB:01:F3:06:46:CC:C7:D8
            X509v3 Authority Key Identifier:
                keyid:BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:08:e1:69:92:2c:85:9a:4f:bc:83:4a:10:2b:5b:7c:63:99:
         63:ec:01:d4:b0:65:14:a9:f4:29:a1:43:8d:e1:82:93:57:a6:
         29:26:7e:28:43:90:41:63:66:54:b1:34:ea:c1:6c:d1:f3:19:
         58:56:81:aa:81:e6:5e:ac:da:bf:19:8c:50:1d:17:a6:05:4d:
         7f:cf:c3:f1:b8:07:e1:1f:f2:0b:ac:00:17:f0:45:ee:b8:36:
         91:fd:aa:5b:6b:6e:53:e3:71:82:9f:8b:81:06:87:45:7a:5a:
         89:c8:cb:e0:83:d2:93:51:66:10:cc:d0:d3:00:24:19:dd:8d:
         91:1d:bc:f0:35:42:47:e9:dc:53:3a:88:52:83:a8:c6:3f:7a:
         76:80:10:4b:16:91:e2:3f:d2:a8:34:1f:d6:76:80:32:6c:38:
         ae:44:33:b3:53:03:e5:bf:f8:5d:77:ac:01:72:75:64:af:ae:
         90:f5:26:b4:13:9c:03:5a:a1:4d:b5:49:4a:06:96:a4:58:76:
         fc:b4:65:f8:ea:77:a0:64:73:a8:3c:ed:ae:38:50:97:19:eb:
         c4:1c:4a:3c:7f:3b:09:0d:37:b4:b7:53:7c:43:0e:88:1e:3a:
         58:02:19:e3:7e:64:d9:ae:2b:80:81:7b:96:65:a9:2e:59:97:
         68:ca:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:07 2025 by rpki-client