Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
File:                     A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft (raw, json)
Hash identifier:          b6/GmEPruynurJiXeRcjWD++fVySq5qkYZgRvn2HhgI=
Subject key identifier:   FB:6C:AC:66:A5:39:6C:2A:51:F2:9E:DD:91:4C:5C:37:59:7A:0F:46
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Certificate issuer:       /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial:       149B174392154DD52BE7F39A83961D36BB358EB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
Manifest number:          22
Signing time:             Sat 29 Mar 2025 00:25:54 +0000
Manifest this update:     Sat 29 Mar 2025 00:20:54 +0000
Manifest next update:     Sun 30 Mar 2025 02:55:54 +0000
Files and hashes:         1: 3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (hash: WFp5ouZqyi4R6iSNJYpOezrbdWX2n6wW5+yqBt7OJdw=)
                          2: 323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (hash: 0QDUz7mgwXXYCMaMIW1+WmkX6UwvgqibL0dHw0LvGGo=)
                          3: 323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa (hash: tgH6My1CkRYUdJGT2v7IxMu1Rb2TkttzGwudPQYo3jA=)
                          4: 323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (hash: YZzoZ85DoUHS4gCuVnehRhKWN58SdNn5GMrPCF6nUXU=)
                          5: 3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (hash: iMXPdJz/MKHCR1LlWHrwyT7SWpE1mySC2+OlBFwUNTY=)
                          6: 3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (hash: w3rmFF4TN44p+rvML5pylGI2fYuitq0TQ3EEeyZ/1Iw=)
                          7: 323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa (hash: W/pGYW8dCtFzSQW26ltx09IBak07ZGD6BeRj38r3r+A=)
                          8: 323830343a333336343a3a2f33322d3332203d3e20323635333933.roa (hash: NLY5mGtodqgQpFctNLAEh9BLUp/1qR1YihefpItuRJY=)
                          9: 323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa (hash: vnRH3TFykD0uFWGvO3y0PqvzLyHQGREcfGRcDPUkrg4=)
                          10: 323830343a333336343a3430303a3a2f34302d3430203d3e20323635333933.roa (hash: NAhil1P5rs5xhP7QJmU+Y8tCLlOhgAytRW06exI3NWQ=)
                          11: 3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa (hash: dfGbqA1abUYONZAtiskMoEacUE2wjcu8OzPrXHA1iHA=)
                          12: 3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (hash: DL8q8Acz2/pWkW4UXJ/YnIyAsFi34j7j+GHEOqplih4=)
                          13: 323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa (hash: GEZgWE1/bj4bzaJPDaidcMR5rnBXrtOWThLz0TFmcFw=)
                          14: A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl (hash: lx+E8MxsUgodfJMD4n4iWHcqqJ+JLnJTz/UxoKi7I9Q=)
                          15: 3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa (hash: HL1INbEJzD+h7/oHS8M2SYo5XiUE4XBWsRI8Wp9Ur7E=)
                          16: 323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa (hash: LL/cgQwSIeC9jnmNYYk/NWvo/nDocigHa6PFMRKoun4=)
                          17: 3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (hash: dtgyrItyp04icGUdjIa7lvHJ++n9NuZ4Q1WwdvLXwdM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9b:17:43:92:15:4d:d5:2b:e7:f3:9a:83:96:1d:36:bb:35:8e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
        Validity
            Not Before: Mar 29 00:20:54 2025 GMT
            Not After : Mar 30 02:55:54 2025 GMT
        Subject: CN=FB6CAC66A5396C2A51F29EDD914C5C37597A0F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:67:81:ca:ee:96:3b:09:0d:fd:f2:b8:04:
                    c1:a6:20:41:85:ec:cd:68:0d:b9:82:5f:2e:de:16:
                    2f:43:01:b5:b0:3a:15:44:77:9b:bc:75:b1:f7:2d:
                    89:e0:ba:fe:16:23:f4:39:31:fc:1e:05:15:9b:bb:
                    42:e1:24:46:1c:14:20:78:c6:31:c3:26:55:4a:70:
                    a4:c5:fd:00:fd:0c:1b:e8:a1:00:27:b3:3c:fc:18:
                    6e:b5:80:98:e6:4e:62:f5:23:99:38:42:fb:f8:a7:
                    cb:ab:fd:a5:76:4b:c3:78:38:d4:7e:16:ac:55:b0:
                    0f:d7:ed:44:7f:18:27:59:dd:0a:0e:4a:cd:6d:1a:
                    e7:53:c0:98:a2:16:a2:18:7d:86:25:40:89:28:a0:
                    3a:80:e5:2a:46:67:bc:41:79:94:cf:55:6f:5e:3d:
                    ac:50:1c:78:1f:28:a5:5e:c4:e9:f3:68:96:09:2d:
                    6d:0d:f3:d4:f3:31:40:94:7d:6f:83:f0:75:e7:eb:
                    38:90:f8:ca:e3:b1:7d:00:b9:36:6f:26:d1:29:e2:
                    2c:32:38:67:91:ee:23:34:bd:87:8b:e6:2c:08:74:
                    bd:1c:75:d6:26:cf:a8:a2:25:e5:4b:b4:5c:ee:3a:
                    04:39:f6:e8:fc:64:5c:57:14:bc:b6:85:3f:58:44:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:AC:66:A5:39:6C:2A:51:F2:9E:DD:91:4C:5C:37:59:7A:0F:46
            X509v3 Authority Key Identifier:
                keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:10:c3:40:c3:bc:25:83:b2:0e:39:f3:f4:7f:9c:f8:14:
         b5:23:ce:46:7d:1e:c5:27:b6:e4:74:e7:fe:d7:e3:86:8f:65:
         81:21:15:98:a6:07:7d:4a:95:93:0b:48:8f:aa:4c:93:a9:75:
         e3:c5:e7:28:6a:49:61:67:4d:0c:d8:d3:a7:c1:44:76:2b:f1:
         f0:cf:bd:36:f1:8d:df:95:85:ed:02:fc:0d:46:84:c9:ee:5e:
         7c:98:71:9d:64:b0:ac:11:74:46:ae:16:3e:5b:69:e0:d6:e6:
         87:30:ff:ee:be:ab:f0:45:84:28:25:01:33:79:98:dc:a3:50:
         aa:91:34:62:c5:35:76:b8:14:5d:3d:cb:f0:7b:5e:3e:fd:46:
         86:64:7f:e0:9f:8d:60:f5:58:5d:19:69:ae:44:6a:a8:97:90:
         3c:7d:f7:b9:58:b2:13:88:e6:7a:8b:14:e9:17:3a:7a:fe:37:
         1e:90:f1:4c:39:94:92:74:68:a9:95:92:be:ca:63:de:67:81:
         7f:a3:96:7d:67:f5:96:6b:c0:32:a0:70:a7:dc:62:52:3f:62:
         85:cf:92:37:c3:ba:3d:fa:a5:db:9e:a5:1a:87:73:89:50:9b:
         34:bc:17:09:84:6d:98:0c:dd:cc:c9:ba:74:88:24:27:44:0f:
         d4:2e:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:36:13 2025 by rpki-client