Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
File:                     433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft (raw, json)
Hash identifier:          P7GOlUjlWScwCrjLho8Xvvk49LUJgZUEHcaDKumnyQs=
Subject key identifier:   06:E2:7A:23:2C:AB:66:53:61:61:07:31:8A:BE:F7:B0:43:38:E5:6E
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Certificate issuer:       /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial:       24DA99438947C38A77A2B673F080AFD1E96801EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
Manifest number:          01DE
Signing time:             Fri 28 Mar 2025 17:43:02 +0000
Manifest this update:     Fri 28 Mar 2025 17:38:01 +0000
Manifest next update:     Sat 29 Mar 2025 21:25:01 +0000
Files and hashes:         1: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (hash: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=)
                          2: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (hash: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=)
                          3: 34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (hash: YImMQr+RMDsH/GDqY6kCVtep65OxcR2ekjIL8Y2gbew=)
                          4: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl (hash: jsk1I+bJiyVBmS52sHzLAdweE7el5JUafoIQEZ6L2Qc=)
                          5: 34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (hash: Nsf+Md4t/x2sYg0OO0lur7GyFGxQJtAf2WVPKyN2VSE=)
                          6: 34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (hash: UifxwEG7vJxx646ArwKrEjuPH/DVz2naB23cASE80ZE=)
                          7: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (hash: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=)
                          8: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (hash: KB81wjFs9ztD8dGkHE2D/VsScjjuO/L+1/K7dgHU48I=)
                          9: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (hash: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:da:99:43:89:47:c3:8a:77:a2:b6:73:f0:80:af:d1:e9:68:01:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
        Validity
            Not Before: Mar 28 17:38:01 2025 GMT
            Not After : Mar 29 21:25:01 2025 GMT
        Subject: CN=06E27A232CAB6653616107318ABEF7B04338E56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:41:75:76:c2:51:c2:e8:75:7d:53:d0:cb:
                    d2:01:27:0d:9e:6a:c0:ba:ec:97:ab:38:9f:56:84:
                    4d:fb:84:0c:d1:fa:ef:e2:f4:d9:55:08:ac:43:23:
                    03:69:b1:f8:b2:9b:29:6b:f6:9c:5d:7a:3b:bd:bc:
                    f7:a0:55:e2:15:d0:a9:83:d0:b2:59:61:ab:e3:1f:
                    e7:4b:cd:8c:73:c8:84:8f:e7:c2:eb:17:a2:47:5f:
                    64:bf:c3:e2:ae:05:74:a2:b1:71:f4:0c:29:6a:6d:
                    73:e5:7a:a0:dd:8e:6f:8a:37:ad:07:11:23:c5:e0:
                    9f:26:f7:45:a6:78:a3:76:9e:ab:97:03:21:4d:13:
                    c3:e1:28:99:b7:cc:ab:87:6f:51:5d:8f:3a:f8:a7:
                    52:63:89:7b:9c:59:70:9a:b1:cc:d4:90:93:d3:c4:
                    ca:d9:8d:b5:ab:e4:da:ac:9d:30:f9:e2:d5:a8:75:
                    a6:f4:d4:6b:57:e5:d7:ed:35:c9:a1:bf:9d:57:c3:
                    66:f3:44:1b:12:ca:91:76:9e:84:44:75:5f:9b:9c:
                    b4:38:65:b7:21:07:5e:64:dd:09:91:15:63:9a:16:
                    1b:59:35:5f:bb:96:fb:1d:5a:71:e0:75:b8:1c:71:
                    06:b5:1b:d7:d3:48:b9:b0:e2:97:8f:69:06:bd:6b:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E2:7A:23:2C:AB:66:53:61:61:07:31:8A:BE:F7:B0:43:38:E5:6E
            X509v3 Authority Key Identifier:
                keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e2:21:6d:25:3c:6e:12:6d:13:7a:6c:3b:f9:e0:43:23:4e:
         68:15:23:bd:79:7c:de:b4:7a:5f:d0:3f:ad:d1:10:3d:eb:5f:
         24:08:ef:e1:46:3c:14:c4:3f:c4:22:50:85:b5:60:80:aa:34:
         4d:93:8a:01:92:e5:d4:49:57:ab:bd:6f:cb:14:26:1a:cd:7b:
         6b:d2:6d:58:9d:de:1c:ac:fb:a3:c0:55:2d:4c:6d:b4:08:2e:
         2e:83:0d:2f:6e:a3:ed:d4:24:d4:71:3c:78:83:bf:c4:33:60:
         59:1d:fb:96:da:e3:30:bb:ef:32:40:a7:0a:92:d2:7f:fb:92:
         e4:78:97:28:28:3b:a0:92:ad:5b:43:a5:8c:bc:fc:b6:ce:8c:
         9f:63:81:bc:e6:90:47:e7:7e:a4:df:07:33:3b:32:e4:88:8e:
         ee:1b:23:55:84:51:1b:14:08:1c:85:7b:c4:fd:6e:77:4f:7b:
         4b:60:e4:23:45:1e:dc:83:13:c4:8f:6d:19:15:7d:60:a8:21:
         ac:85:f8:0a:69:e3:92:72:48:8a:61:d9:8d:e9:1a:31:35:fc:
         44:42:74:37:05:81:5c:9e:ae:88:16:2a:18:59:51:10:2c:28:
         a8:b2:da:43:d2:36:90:08:94:f3:37:6a:77:0d:48:61:ac:ae:
         f9:e9:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:08 2025 by rpki-client