Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft
File:                     E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft (raw, json)
Hash identifier:          vkPgLQLiPM8vkrlpSaC0BQNyXtzRklZWslSIREUMbWk=
Subject key identifier:   F2:18:FF:E0:53:53:1E:79:DB:B7:A1:82:A5:2B:04:DE:C0:1E:1B:B7
Authority key identifier: E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
Certificate issuer:       /CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
Certificate serial:       440A138DE301FF05FF4F53916D7C062AC1761891
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft
Manifest number:          01D0
Signing time:             Sat 29 Mar 2025 06:32:02 +0000
Manifest this update:     Sat 29 Mar 2025 06:27:02 +0000
Manifest next update:     Sun 30 Mar 2025 06:42:02 +0000
Files and hashes:         1: 34352e3136372e39362e302f32322d3332203d3e20323637393938.roa (hash: 5R1q6WzBBLUoRDJ69LG/38M8xfOpKYgGvdIaEoQZPeE=)
                          2: E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl (hash: AyAU+c1wGFLrgabK7UBPnH8fk000rngeiNNPumTMW0k=)
                          3: 323830343a353637303a3a2f33322d3438203d3e20323637393938.roa (hash: ZDLIBIhkomySjADXF/PYG2ZV4cMRuXw5TD1SmoiZX5c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0a:13:8d:e3:01:ff:05:ff:4f:53:91:6d:7c:06:2a:c1:76:18:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
        Validity
            Not Before: Mar 29 06:27:02 2025 GMT
            Not After : Mar 30 06:42:02 2025 GMT
        Subject: CN=F218FFE053531E79DBB7A182A52B04DEC01E1BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:8b:c5:1b:2a:8f:a0:d4:97:06:35:2a:98:
                    bf:7e:a9:e0:2a:8b:ba:3e:35:c5:ab:8d:d2:cc:09:
                    aa:89:f0:90:7e:db:3b:80:6f:4e:57:92:e8:b8:a9:
                    92:04:8d:c7:00:2f:6b:a0:23:15:86:a0:38:ed:70:
                    ce:40:d0:96:7d:cd:9e:a7:85:28:32:cf:b6:a5:58:
                    d2:24:72:76:7d:67:da:77:8e:bc:38:58:45:cc:10:
                    5a:94:18:2e:cc:f7:ae:a5:15:9a:29:90:80:be:23:
                    b3:cd:02:ce:d4:ab:c7:37:b6:57:3d:66:88:0c:9a:
                    36:9a:0b:0e:79:ca:36:8d:92:b0:ab:41:70:f6:80:
                    c2:9f:d6:23:ff:5f:2b:bd:82:b0:0d:5c:f9:e0:cd:
                    a1:e4:9c:31:02:e6:01:0d:68:c0:e3:29:d3:8d:f1:
                    68:5a:a3:4e:52:7c:d6:34:4a:20:c0:78:82:17:f9:
                    09:52:73:b8:d4:23:71:71:83:fd:13:96:c4:4f:07:
                    00:d2:07:13:39:ab:6c:c3:cf:92:5d:71:f1:42:13:
                    d8:ae:82:23:fc:cc:d8:c5:0f:c6:5e:e9:3d:9f:b7:
                    38:0b:55:71:53:b0:a1:73:da:bb:65:55:59:df:c1:
                    d2:f7:13:4b:12:2b:64:63:57:37:4d:ab:32:e0:33:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:18:FF:E0:53:53:1E:79:DB:B7:A1:82:A5:2B:04:DE:C0:1E:1B:B7
            X509v3 Authority Key Identifier:
                keyid:E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:03:a1:6d:1a:0c:34:43:61:a4:85:f3:d6:fd:e1:97:26:
         d0:b9:93:79:58:87:48:f4:ba:98:69:46:ae:ac:de:ae:67:15:
         87:fb:cc:1e:6a:55:21:8b:9f:d8:53:c1:cb:ad:bb:29:5e:37:
         e8:84:19:75:4b:22:c9:94:ed:10:d0:af:dd:40:c5:30:92:a7:
         7d:26:eb:f3:29:09:bb:76:c9:dd:84:95:1d:b2:dd:af:7c:09:
         5a:8b:77:f4:c2:08:83:f9:07:35:e9:d3:ac:72:7f:43:11:b6:
         ff:30:74:33:95:23:64:87:9c:40:74:9c:ed:a9:31:87:a0:25:
         33:31:2e:a1:04:33:45:bd:90:0b:47:99:84:b8:43:c5:46:4f:
         ce:cc:24:b7:27:30:f4:ea:8b:d4:40:fe:db:66:bb:61:76:51:
         8e:87:4a:9d:c2:ea:42:6e:81:4b:35:5a:08:2a:2c:ba:03:a7:
         aa:03:be:d0:64:93:81:06:93:e7:71:71:3c:5c:79:27:4c:b5:
         b7:0a:a7:06:64:7b:c2:07:70:c5:14:8d:20:ba:14:eb:df:a1:
         b1:24:11:e0:84:69:4b:87:b6:08:83:28:32:dd:1a:f5:40:d8:
         02:45:06:4f:31:d8:60:fa:76:a0:b3:41:d5:d7:be:44:29:e0:
         a3:cc:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:19 2025 by rpki-client