Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/ACA736284F223A02D4ACC8E1719FA88F00BA3404.mft
File:                     ACA736284F223A02D4ACC8E1719FA88F00BA3404.mft (raw, json)
Hash identifier:          Lxo0fXWL9WUnj/gkt0htgcQx0wzTYERj/F3BHPnX/+k=
Subject key identifier:   5F:3D:99:68:5E:A5:9E:F3:D6:AA:DC:A3:95:93:7C:45:F6:B1:EC:0E
Authority key identifier: AC:A7:36:28:4F:22:3A:02:D4:AC:C8:E1:71:9F:A8:8F:00:BA:34:04
Certificate issuer:       /CN=ACA736284F223A02D4ACC8E1719FA88F00BA3404
Certificate serial:       5A8E19F520F438AA811762AF3ADABD7E784C8393
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA736284F223A02D4ACC8E1719FA88F00BA3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/ACA736284F223A02D4ACC8E1719FA88F00BA3404.mft
Manifest number:          43
Signing time:             Wed 23 Apr 2025 08:01:19 +0000
Manifest this update:     Wed 23 Apr 2025 07:56:19 +0000
Manifest next update:     Thu 24 Apr 2025 11:36:19 +0000
Files and hashes:         1: 3137302e3234342e36382e302f32322d3332203d3e20323636353137.roa (hash: TBK0ch2u8FZYjYSfnUoCs/YNQ8c1MuSTw0A729Xn00w=)
                          2: ACA736284F223A02D4ACC8E1719FA88F00BA3404.crl (hash: togkPKC68Rju5JNEYapuOwUdExwBfrPtAUT/tFzjQtM=)
                          3: 323830343a333930303a3a2f33322d313238203d3e20323636353137.roa (hash: V40XfFznDh4zxu5FPLvH4oZEoGcs7zwFK8RWqCB7/YI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8e:19:f5:20:f4:38:aa:81:17:62:af:3a:da:bd:7e:78:4c:83:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACA736284F223A02D4ACC8E1719FA88F00BA3404
        Validity
            Not Before: Apr 23 07:56:19 2025 GMT
            Not After : Apr 24 11:36:19 2025 GMT
        Subject: CN=5F3D99685EA59EF3D6AADCA395937C45F6B1EC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:ce:f7:73:4d:71:3a:32:81:97:c7:4a:38:
                    d1:5b:f2:56:22:f1:fb:a4:7e:47:89:ed:ca:65:59:
                    70:50:37:f5:39:e8:1c:02:37:56:93:96:9a:9f:41:
                    61:2a:38:04:6b:49:80:df:3a:c8:df:5d:5d:53:2a:
                    15:43:3a:cf:ab:37:01:a1:37:12:11:08:68:4d:19:
                    df:31:56:03:09:22:ae:a5:84:7f:00:e0:a5:a8:79:
                    f4:c7:58:b5:d1:0f:85:6e:a0:8d:bf:34:05:50:43:
                    20:da:e2:13:b8:76:60:0c:25:65:70:a7:29:c4:a2:
                    04:3c:53:6a:51:d0:44:f4:48:04:48:b6:65:ac:34:
                    49:3a:1f:33:bb:f4:84:b4:6d:da:9c:2b:fb:80:83:
                    8f:4f:b2:f4:32:c9:ca:8a:4b:88:12:74:fd:aa:8d:
                    e1:42:64:15:d8:00:83:02:50:fd:f9:07:9b:e2:c7:
                    28:c5:35:72:8c:3d:2a:8b:98:5a:60:88:3a:41:1c:
                    9a:9e:a8:b2:bd:da:2a:12:f0:9b:2f:37:df:bf:01:
                    3b:41:04:4c:6c:06:a8:13:6a:8e:11:ff:1d:4e:ec:
                    c8:f9:4d:8c:24:89:44:63:f3:70:cb:51:54:d5:66:
                    37:2c:d6:47:12:2a:77:8e:00:3f:70:af:57:dc:cf:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:99:68:5E:A5:9E:F3:D6:AA:DC:A3:95:93:7C:45:F6:B1:EC:0E
            X509v3 Authority Key Identifier:
                keyid:AC:A7:36:28:4F:22:3A:02:D4:AC:C8:E1:71:9F:A8:8F:00:BA:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/ACA736284F223A02D4ACC8E1719FA88F00BA3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA736284F223A02D4ACC8E1719FA88F00BA3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/ACA736284F223A02D4ACC8E1719FA88F00BA3404.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:b5:91:56:4d:07:97:e7:4d:0d:ba:4c:d3:6d:00:21:6b:
         9a:26:8c:e7:dc:e4:f5:cb:05:b9:e2:22:14:1e:f7:86:c9:2f:
         ea:c1:ad:5f:dd:79:b8:6a:b6:3c:ba:b0:0e:54:f0:a2:53:5c:
         a1:f6:0b:05:e8:92:81:0f:f6:ff:91:5a:86:fc:54:0e:e6:b4:
         52:50:eb:3e:98:a6:25:d8:d9:c4:72:ce:58:17:1a:51:db:ec:
         b9:3f:c0:2c:01:e2:a7:87:0a:d8:15:59:c0:0c:70:fe:dc:69:
         58:3d:e0:fb:28:a5:d8:6d:e0:db:96:c0:45:76:e8:1b:5e:f1:
         0b:a7:df:b8:12:89:62:68:83:6c:41:da:78:f8:23:63:6d:db:
         76:2b:34:a8:d8:47:1a:a9:2c:53:5a:86:84:5f:93:bb:45:1c:
         8b:b1:5d:57:24:91:4a:53:3f:2b:4f:24:bf:90:03:13:55:a7:
         e0:1d:6b:b7:95:cb:fd:31:5a:7a:f9:58:92:ea:a7:84:93:7a:
         0b:1e:24:e1:13:d5:c3:10:9e:b4:3c:8b:e5:e8:54:73:ca:ef:
         58:f2:ee:ec:bc:e9:ec:3c:c9:73:a0:53:a1:66:a4:3c:9d:25:
         d9:95:7b:3c:69:43:a9:85:ad:fb:86:05:5e:e7:9a:cd:52:28:
         db:fd:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:17:37 2025 by rpki-client