Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft
File:                     39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft (raw, json)
Hash identifier:          d6MtPQka0cpD1qLB0wmFD+DxhZdBSBPTK79mD1MKEvE=
Subject key identifier:   72:75:21:51:98:B3:DF:7A:1E:07:37:4F:F8:21:27:13:CB:4A:71:B3
Authority key identifier: 39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95
Certificate issuer:       /CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
Certificate serial:       79951163F539391C07F48216BFE139BD546AB549
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft
Manifest number:          18
Signing time:             Sat 29 Mar 2025 06:50:09 +0000
Manifest this update:     Sat 29 Mar 2025 06:45:09 +0000
Manifest next update:     Sun 30 Mar 2025 07:16:09 +0000
Files and hashes:         1: 323830343a356362343a3a2f33322d3438203d3e20323638393235.roa (hash: idBMTObHIUQXTWkbqJVFghsJUEL6M9oRWC2kEo3gZ8g=)
                          2: 39B45C4B950BA846649D6FB0A3CB544BA12A9D95.crl (hash: wPf6obSzfNK7/jNXpsiiIsXO20l74mgJcEDvml8qyFQ=)
                          3: 34352e3137362e342e302f32322d3234203d3e20323638393235.roa (hash: lTMFOvcm3PqeMFA2Yy8Sp/IjARUjjKFFHgo/M2i9Y2s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:95:11:63:f5:39:39:1c:07:f4:82:16:bf:e1:39:bd:54:6a:b5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
        Validity
            Not Before: Mar 29 06:45:09 2025 GMT
            Not After : Mar 30 07:16:09 2025 GMT
        Subject: CN=7275215198B3DF7A1E07374FF8212713CB4A71B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:9f:17:c1:f1:5a:9a:94:c0:0b:21:c4:8f:
                    c4:95:6d:9e:01:21:76:96:e0:be:27:9c:5e:3d:a2:
                    28:d1:c5:9b:c9:89:81:54:7a:a8:f3:2d:b0:45:51:
                    29:42:7c:f2:f8:75:4a:0a:4c:75:6a:4f:ba:2d:a3:
                    07:47:77:56:f0:cb:a8:ca:d6:b9:94:d0:49:66:06:
                    33:63:7b:ac:b5:86:16:d6:f9:7b:de:64:ba:61:a1:
                    6f:c4:4f:34:b3:25:01:db:5c:c0:ce:11:0b:76:a6:
                    bf:5d:68:b8:98:33:84:da:2a:52:e8:84:3c:f8:75:
                    2d:c9:be:cf:6b:9f:37:08:3a:1d:ce:77:95:61:4d:
                    89:be:52:82:2e:41:cb:ad:22:8a:33:fc:85:07:bc:
                    87:24:22:db:60:99:14:13:45:99:d2:e4:0a:26:4f:
                    cb:2b:23:32:d5:e4:c6:b4:51:9a:60:46:f9:ad:79:
                    6d:2c:96:42:cb:32:fd:cc:2c:29:91:07:63:4c:71:
                    fd:c3:a5:f3:be:3c:02:d5:7f:e9:95:07:89:99:c8:
                    b9:cb:a4:0e:6e:27:5a:07:5f:c1:bc:7a:50:aa:d0:
                    16:de:4b:0a:c7:ce:ac:d5:4b:6c:a2:7e:43:29:2b:
                    cd:ec:02:b8:3d:5d:8e:ac:e0:da:97:0d:60:84:21:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:21:51:98:B3:DF:7A:1E:07:37:4F:F8:21:27:13:CB:4A:71:B3
            X509v3 Authority Key Identifier:
                keyid:39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:40:df:6d:b2:92:c8:46:0b:6a:71:a5:2c:97:20:6e:49:ae:
         eb:6a:89:73:5d:5e:8d:6a:f3:e1:3b:0b:80:99:8f:57:6e:1b:
         8c:95:5d:01:c0:0f:22:97:ce:36:b0:ff:a8:fe:b5:bf:02:f6:
         dc:8f:e8:6a:53:ca:15:9a:8b:50:9d:ec:23:b2:6d:0f:f9:9d:
         b2:64:53:3c:06:93:05:5b:aa:2b:34:2d:4c:3f:e5:2d:3a:74:
         63:4b:d3:86:a7:0c:fd:c9:d4:25:13:85:4f:15:21:d9:ae:62:
         0c:da:b9:01:f0:1b:ab:82:e1:63:4b:e7:c8:da:ba:c2:e5:f4:
         c5:a8:86:bb:bf:68:e1:7d:2d:aa:63:60:1b:3f:c0:37:84:c5:
         c9:58:d6:30:6e:47:7b:fa:b5:36:9d:fb:50:42:77:d2:22:af:
         ba:27:a4:90:6d:ab:e8:5c:f0:b7:3e:0b:71:21:5a:42:61:96:
         17:78:72:93:8b:4d:f2:72:9e:de:49:5f:79:97:dd:c4:a0:3b:
         54:42:0f:a7:3d:2c:cc:42:6b:b9:d5:25:9b:f6:97:3c:54:d3:
         ea:dc:34:df:e4:db:86:87:91:0a:e8:86:59:fb:62:f8:19:f6:
         df:f9:a8:de:2a:b2:0f:9f:1b:bd:3c:6a:04:bf:85:be:72:c3:
         58:65:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:02:10 2025 by rpki-client