Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
File:                     C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft (raw, json)
Hash identifier:          yifX2LEdeUnYbcu+NTPzomgiC10ywVw7yiHFQqhlulM=
Subject key identifier:   91:9D:B6:96:07:AB:2E:89:BC:F6:2D:96:57:9F:C5:25:57:23:37:F1
Authority key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98
Certificate issuer:       /CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
Certificate serial:       396937C242A06C77BCA5711ED9F9FF365D9DFA91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
Manifest number:          C9
Signing time:             Fri 28 Mar 2025 19:04:21 +0000
Manifest this update:     Fri 28 Mar 2025 18:59:21 +0000
Manifest next update:     Sat 29 Mar 2025 21:41:21 +0000
Files and hashes:         1: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl (hash: 6oFFmHFtOVJjrOmg7dATQ5cwoTRIb/tI2SATtTMz7/M=)
                          2: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: ZOMpNQQFAOvKLXhCdW+85iyzxpwZ11NO+4/XyI4bgpw=)
                          3: 323830343a336561633a3a2f33322d3336203d3e20323636363134.roa (hash: A4ecR9vAgS5CiKSAYwfCotm8CVJBNgZvk5nFjxTh6Bs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:69:37:c2:42:a0:6c:77:bc:a5:71:1e:d9:f9:ff:36:5d:9d:fa:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
        Validity
            Not Before: Mar 28 18:59:21 2025 GMT
            Not After : Mar 29 21:41:21 2025 GMT
        Subject: CN=919DB69607AB2E89BCF62D96579FC525572337F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:6f:db:7b:79:91:76:5f:81:03:86:8d:79:
                    48:b1:e6:73:36:24:b3:d9:23:be:ad:79:59:48:a5:
                    18:aa:c2:d9:33:af:58:59:d4:be:f3:1a:16:a7:ca:
                    f4:59:fa:c5:a6:79:be:e9:08:3e:72:53:2f:6b:db:
                    b8:94:8e:61:b6:ee:fa:93:cb:67:bd:d9:c3:d6:82:
                    9c:eb:f1:7c:ea:a8:76:25:c5:60:be:7d:cd:1a:e8:
                    c0:a9:6c:5c:b9:a4:22:cb:3d:c6:a1:8a:06:3f:d0:
                    36:ea:ed:35:80:3d:9f:45:b6:53:37:f3:1c:91:0a:
                    db:05:66:ab:a0:e5:c0:91:e2:35:7f:b6:46:03:dd:
                    87:ee:a9:0d:36:23:d1:ae:38:73:eb:ee:59:c1:3f:
                    e3:62:18:cb:f6:fb:c4:55:14:44:49:da:bd:e8:d8:
                    47:ab:d7:70:77:76:bc:25:68:48:fe:38:31:42:bf:
                    69:6a:b7:41:31:fb:9d:10:48:ac:9f:2b:49:2c:ea:
                    02:d8:1a:92:21:7a:60:90:fe:e5:fa:b5:32:db:6a:
                    81:2e:4b:eb:8e:9e:75:c7:c1:0d:1c:ce:ab:b7:10:
                    11:24:81:47:93:04:5f:e2:34:3e:f0:6e:e0:aa:fd:
                    b9:fd:59:11:fe:0a:96:a7:3a:95:13:39:16:60:7b:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:B6:96:07:AB:2E:89:BC:F6:2D:96:57:9F:C5:25:57:23:37:F1
            X509v3 Authority Key Identifier:
                keyid:C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:40:dc:e2:3e:25:9a:24:9d:77:25:0e:ec:2c:6f:f4:d7:32:
         cf:7f:4c:3d:74:94:84:6d:a7:cb:98:33:d5:8c:ef:65:8a:9d:
         e3:90:66:57:79:1f:db:e2:3b:13:71:4d:60:0f:96:73:58:bb:
         34:f9:2c:77:cf:dc:19:ae:9c:a8:de:7f:7f:4d:78:c6:31:50:
         5b:c7:bb:18:45:63:fb:49:a0:6c:66:9d:af:72:65:25:d3:b3:
         cd:fc:34:26:7d:9f:d9:be:1d:b6:eb:31:72:d5:fd:35:d1:8b:
         2a:9b:74:cf:ec:c6:08:a8:17:bd:87:4e:4c:57:f1:39:b0:9c:
         4a:a1:18:52:39:7d:0d:49:8b:a5:0a:9e:18:e5:6a:88:68:59:
         fb:3d:bb:7e:49:eb:96:7d:a8:99:e7:cd:4a:28:96:69:f8:a2:
         97:06:39:1e:21:5c:72:58:94:32:65:1d:f3:0e:00:fe:aa:83:
         f2:06:ea:c9:27:ba:93:03:83:1e:a1:24:7b:b6:34:06:ec:ec:
         62:db:21:7f:95:9d:e8:c9:43:95:d9:93:f0:db:70:21:df:16:
         67:0e:da:30:b8:8e:f4:38:96:5e:b9:19:4d:00:6f:b2:6b:66:
         33:ae:dc:8f:3b:63:7f:b1:27:da:17:f4:2d:fa:52:75:11:a5:
         dd:03:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:36 2025 by rpki-client