Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.mft
File:                     68896B9A803F401F71FCF845C4E94131201E4D39.mft (raw, json)
Hash identifier:          bJr5xTsc+MP7JR9PTbYy6nVP/gcFyqqfCjoE9cPDvZs=
Subject key identifier:   4C:42:AD:F6:92:5B:72:CC:5D:01:1A:38:9C:E7:07:9B:6F:61:73:CE
Authority key identifier: 68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
Certificate issuer:       /CN=68896B9A803F401F71FCF845C4E94131201E4D39
Certificate serial:       2E3202E4820282956042AB2DCC7C5F086B6CB23C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.mft
Manifest number:          06
Signing time:             Sun 16 Feb 2025 19:51:28 +0000
Manifest this update:     Sun 16 Feb 2025 19:46:28 +0000
Manifest next update:     Mon 17 Feb 2025 23:30:28 +0000
Files and hashes:         1: 323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (hash: uVDs/4om7r9bKNxADKrnj5t08DQPIvLTxuLK6xCgBCI=)
                          2: 34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (hash: f1uW4GPCHpaldFoPM4qfavI9QjIXYviM3ZcMRxmu1CE=)
                          3: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (hash: IgN7TC0m+ZIkf3cRY4s5b7OKdjr4hpK2rAPBqJgFY8c=)
                          4: 34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (hash: w/YPpzH7xJ0iDZn7qGeKkZaaEDPhp1V+VPZaVAqOK8E=)
                          5: 34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (hash: IiWTfynWM50LpepyIw8j8pqsskISL1ZHH3eOx/VwrTo=)
                          6: 68896B9A803F401F71FCF845C4E94131201E4D39.crl (hash: eWcM7KUeIVcDMVklyPd5YJBoTtkFLij6sp0bO1kjV3I=)
                          7: 34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (hash: i+yahRfUUNWhW3gwC370D4/ZL4mhnRozXBFj2pfkYtw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:32:02:e4:82:02:82:95:60:42:ab:2d:cc:7c:5f:08:6b:6c:b2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68896B9A803F401F71FCF845C4E94131201E4D39
        Validity
            Not Before: Feb 16 19:46:28 2025 GMT
            Not After : Feb 17 23:30:28 2025 GMT
        Subject: CN=4C42ADF6925B72CC5D011A389CE7079B6F6173CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:b5:c1:86:93:c3:32:58:93:78:41:a0:56:
                    77:c6:85:29:87:ff:21:bc:61:d2:0d:db:2f:8a:77:
                    27:8d:5e:14:f2:ad:84:37:65:33:df:73:d7:11:4e:
                    59:96:ff:7e:d4:6a:e8:ef:15:75:11:10:3b:69:c9:
                    40:43:00:fe:7d:af:4f:14:a8:e6:41:4d:5a:c7:49:
                    c9:4f:89:5f:17:d6:07:d7:8f:1a:aa:5c:ef:8d:50:
                    b1:3b:64:da:cb:3b:a0:07:49:0c:e1:3f:95:01:60:
                    cb:13:df:44:c0:29:04:61:81:98:6c:e3:41:84:80:
                    d4:5b:72:6f:cd:78:39:16:0b:c8:c5:19:30:f3:13:
                    37:63:e0:4f:1f:e2:ad:fb:20:28:1f:4b:7f:1d:75:
                    4c:3d:2e:c3:fa:97:25:01:60:5d:d3:a5:4a:7d:c4:
                    12:d7:ac:60:06:1c:40:0e:b9:df:57:26:9f:7f:36:
                    f3:7d:31:08:31:61:01:11:de:fe:91:3c:8c:58:84:
                    5e:fe:f2:ae:59:62:e3:dd:71:81:c2:e8:96:63:ad:
                    65:d0:e9:10:ea:4f:4f:2b:a3:26:d8:02:c2:68:b6:
                    6f:62:c5:7a:18:4d:9e:ac:78:27:33:8e:2c:2f:69:
                    bb:d1:dc:eb:5f:95:b8:01:c8:b2:a4:e5:b5:0e:ce:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:42:AD:F6:92:5B:72:CC:5D:01:1A:38:9C:E7:07:9B:6F:61:73:CE
            X509v3 Authority Key Identifier:
                keyid:68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:07:31:45:08:45:3f:b0:39:97:6e:33:94:ea:a9:f3:8a:cb:
         2b:e5:d5:fe:37:5f:04:4c:ee:4f:82:ea:16:1f:61:e1:04:d1:
         c2:16:8b:6f:97:ff:20:31:cb:dd:9e:ec:65:bc:e5:ba:c4:e2:
         4a:e7:82:01:88:1e:73:ce:e0:59:d9:1e:50:c8:a5:08:bc:95:
         71:20:da:24:e3:96:c2:6d:5f:b8:0d:76:30:51:3a:0f:d7:20:
         c9:74:d2:6b:58:98:42:9d:ad:d6:5d:54:72:50:5e:b1:f3:94:
         3b:f3:93:63:db:e0:fd:71:3d:7b:a1:cd:f9:38:a1:57:68:4d:
         7e:08:0f:cc:d2:9e:f4:b4:22:42:cc:d8:f7:29:41:ba:ac:fe:
         4a:bd:dd:75:1a:c1:02:6d:2a:50:72:cd:69:44:b9:1d:61:d9:
         80:c9:8f:53:82:d8:8d:18:64:71:93:0f:da:21:c1:76:37:99:
         ee:c2:0b:95:c2:9d:05:86:df:0b:27:5b:49:1c:f9:05:7b:20:
         48:fd:9a:9b:32:39:34:13:fa:f1:1b:ca:cc:b3:6d:b8:d9:d4:
         59:ee:58:ca:75:43:1b:88:30:96:a1:7e:d2:fa:40:c5:0e:d2:
         60:16:bb:d0:22:14:2c:6f:ea:7d:93:bd:ff:ba:53:f3:4f:eb:
         92:d1:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:25 2025 by rpki-client