Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.mft
File:                     06349A469EC117DBF7704A58DBFDA72CD102D680.mft (raw, json)
Hash identifier:          JyHAiZkKBsRNTgPnb0LiScHmOeE+hLqhFpOjxHF2vSo=
Subject key identifier:   8C:57:DB:D1:B1:E4:D7:36:36:EB:78:E4:ED:6A:CD:82:E9:19:4E:EF
Authority key identifier: 06:34:9A:46:9E:C1:17:DB:F7:70:4A:58:DB:FD:A7:2C:D1:02:D6:80
Certificate issuer:       /CN=06349A469EC117DBF7704A58DBFDA72CD102D680
Certificate serial:       362243D45008324ADB5A9CC20B883E3F2A6A935B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06349A469EC117DBF7704A58DBFDA72CD102D680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.mft
Manifest number:          0D
Signing time:             Sat 29 Mar 2025 01:54:56 +0000
Manifest this update:     Sat 29 Mar 2025 01:49:56 +0000
Manifest next update:     Sun 30 Mar 2025 02:38:56 +0000
Files and hashes:         1: 3133382e3132322e3134382e302f32322d3234203d3e20323634333337.roa (hash: tYgvaSDMwtMTRn5WB0nOle1nZ2FwbubrayDXGQdosvM=)
                          2: 06349A469EC117DBF7704A58DBFDA72CD102D680.crl (hash: DsRAm7ganGgKBq5i5Ho3zJeC7A4bwn8Ioq+JPByD/TM=)
                          3: 323830343a323634383a3a2f33322d3438203d3e20323634333337.roa (hash: nfCalan+e4/d5v8efDIgRl7g41qh13V4JE3S6UeJpKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:22:43:d4:50:08:32:4a:db:5a:9c:c2:0b:88:3e:3f:2a:6a:93:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06349A469EC117DBF7704A58DBFDA72CD102D680
        Validity
            Not Before: Mar 29 01:49:56 2025 GMT
            Not After : Mar 30 02:38:56 2025 GMT
        Subject: CN=8C57DBD1B1E4D73636EB78E4ED6ACD82E9194EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:d7:89:4a:f3:50:5f:93:c5:ee:f5:d7:7d:
                    22:3c:a1:fe:5c:be:80:4d:98:e7:b0:64:7c:e0:26:
                    5e:9d:a6:96:37:7a:c3:e7:25:50:fa:db:b8:c4:35:
                    55:e9:2c:61:20:32:c7:5f:0f:05:de:1a:54:c5:f7:
                    79:d4:a4:47:89:cd:10:fc:05:d7:7a:80:07:cb:8f:
                    b1:08:ef:3e:49:89:3d:e5:73:39:9c:c8:b0:44:a7:
                    9c:60:89:2d:98:cc:07:eb:51:4c:a4:92:a1:95:9d:
                    c9:c8:77:06:7c:c2:7c:00:f1:86:02:13:05:8c:69:
                    cb:73:e8:e5:10:54:f4:96:b7:f8:89:6c:42:bb:d3:
                    fa:0e:83:e7:69:8b:41:40:b2:f0:60:ff:e9:3e:60:
                    df:76:6c:e8:86:7b:9c:ea:8c:75:51:55:d3:a2:a4:
                    64:3f:0d:9a:b1:df:af:2d:69:bb:8c:ff:ac:b4:3c:
                    6f:f2:5a:ee:c7:68:70:ab:9e:bb:67:a2:fd:ac:24:
                    a7:1d:c5:75:e7:bd:2b:a2:16:6b:c8:a7:f5:0c:39:
                    51:db:8c:47:23:bb:2c:6c:63:0d:af:d1:8a:44:de:
                    fb:d5:60:10:45:85:60:cf:8f:c8:4a:e0:e4:1d:6a:
                    e2:d6:c9:41:0a:82:a4:6d:9b:38:d1:ad:88:a5:6b:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:57:DB:D1:B1:E4:D7:36:36:EB:78:E4:ED:6A:CD:82:E9:19:4E:EF
            X509v3 Authority Key Identifier:
                keyid:06:34:9A:46:9E:C1:17:DB:F7:70:4A:58:DB:FD:A7:2C:D1:02:D6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06349A469EC117DBF7704A58DBFDA72CD102D680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:db:d3:26:6b:76:03:9f:ed:d4:a8:90:80:3f:47:35:7b:00:
         3c:84:93:b0:2e:fd:b3:a2:ed:bc:a1:35:07:99:17:24:d7:b9:
         0f:bf:e9:7f:ff:e9:f8:fa:4e:c9:0a:f8:79:16:c3:2c:8c:ef:
         2e:49:75:28:ba:cc:07:8d:f3:30:ff:74:5a:4c:aa:20:a5:45:
         23:e9:9f:52:e1:74:22:cb:2a:cd:19:39:df:f2:79:b0:f9:03:
         16:01:ad:95:3c:b6:76:55:e5:10:b5:8b:b7:1f:8c:33:56:e7:
         9b:bd:74:57:94:cb:13:94:0f:f7:2a:f4:1b:89:1e:41:e9:b9:
         32:f3:7c:8b:98:76:6b:31:af:bb:e4:0e:f1:8b:17:40:34:21:
         ae:c3:b3:1b:70:45:1b:86:fd:1b:52:c7:e0:0e:e0:dc:09:02:
         58:ff:cc:06:43:9f:f0:0c:15:32:4b:aa:70:06:f4:93:dd:23:
         30:c8:0d:60:ff:11:c2:90:6d:36:04:a2:53:3d:ae:d2:92:f8:
         87:08:f9:d7:9d:96:51:2f:a1:f9:25:fe:47:6c:14:75:15:89:
         5a:15:f4:20:4f:8d:8a:c4:39:69:0d:5a:f0:bc:59:7f:9b:f9:
         70:58:1d:b4:87:05:18:75:28:1c:3f:f9:b2:ee:96:1c:21:42:
         eb:64:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:00:34 2025 by rpki-client