Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/E1BB6273C9386E6126440619E03EB12606AF6AD3.mft
File:                     E1BB6273C9386E6126440619E03EB12606AF6AD3.mft (raw, json)
Hash identifier:          HhZH09yjd1PE/tCqyRycoqKzlnj9Kq2Ga7tVno4TbEw=
Subject key identifier:   DD:7B:4A:D9:6A:5F:19:6C:F4:C8:D3:C4:34:F6:4E:6B:2C:68:D7:68
Authority key identifier: E1:BB:62:73:C9:38:6E:61:26:44:06:19:E0:3E:B1:26:06:AF:6A:D3
Certificate issuer:       /CN=E1BB6273C9386E6126440619E03EB12606AF6AD3
Certificate serial:       2FC7A4E78446430E250C4224E2B54DBB55B439D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BB6273C9386E6126440619E03EB12606AF6AD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/E1BB6273C9386E6126440619E03EB12606AF6AD3.mft
Manifest number:          19
Signing time:             Fri 28 Mar 2025 23:47:42 +0000
Manifest this update:     Fri 28 Mar 2025 23:42:42 +0000
Manifest next update:     Sun 30 Mar 2025 03:19:42 +0000
Files and hashes:         1: 323830343a346461303a3a2f33322d3438203d3e20323638323039.roa (hash: n2fsBgQvR3gAfRRQz4kBYZGX98eP70crxDGzSeWfPNE=)
                          2: E1BB6273C9386E6126440619E03EB12606AF6AD3.crl (hash: WYYcGmjTaZCeMv/96LpxSJR0ajnKzst+sxwDoQgpkig=)
                          3: 34352e3233352e36382e302f32322d3234203d3e20323638323039.roa (hash: W+4BQoT5R2/CyGjp6CVfDuR+PgUPPUemeKBQGG2d1IM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c7:a4:e7:84:46:43:0e:25:0c:42:24:e2:b5:4d:bb:55:b4:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BB6273C9386E6126440619E03EB12606AF6AD3
        Validity
            Not Before: Mar 28 23:42:42 2025 GMT
            Not After : Mar 30 03:19:42 2025 GMT
        Subject: CN=DD7B4AD96A5F196CF4C8D3C434F64E6B2C68D768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cc:58:00:3f:75:d5:81:e3:4e:dd:ac:7e:ff:
                    86:c6:a2:dd:f9:20:a5:5c:17:a8:8b:99:71:14:6d:
                    87:60:af:79:f7:f8:fd:fb:2b:03:7f:5b:17:94:d1:
                    de:7b:50:40:22:0a:91:10:86:bc:85:72:bd:66:4e:
                    5b:2c:20:b4:b8:21:b3:48:5f:2e:e4:46:9e:2f:19:
                    d5:dc:c1:6f:ed:85:92:5f:3d:d7:1e:24:55:e4:92:
                    b8:5c:83:d4:55:fe:5d:9c:e0:5d:5b:f4:0d:7e:be:
                    4e:9a:2f:1c:f7:84:12:27:7e:32:b8:7b:de:9d:ed:
                    b7:9a:f2:e6:4d:89:54:c7:33:5f:29:77:c1:be:68:
                    14:84:84:67:87:b7:c3:98:45:25:59:42:be:db:42:
                    13:a4:25:f3:be:cc:5d:71:22:e2:62:ae:f8:71:ef:
                    26:2a:ea:95:64:86:3f:69:89:7b:f8:8c:c5:a5:3c:
                    de:32:87:41:b1:24:f7:62:2c:de:28:43:46:1a:94:
                    9e:46:1d:55:2b:85:91:0b:7c:09:13:35:80:87:d6:
                    64:03:5b:3f:1c:28:27:91:4e:e9:02:09:98:07:92:
                    b3:42:1d:66:4b:d6:4f:0a:d0:2d:52:9d:f9:0a:a1:
                    2a:07:e8:c9:74:c8:b6:fd:dd:64:df:52:76:ad:51:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:4A:D9:6A:5F:19:6C:F4:C8:D3:C4:34:F6:4E:6B:2C:68:D7:68
            X509v3 Authority Key Identifier:
                keyid:E1:BB:62:73:C9:38:6E:61:26:44:06:19:E0:3E:B1:26:06:AF:6A:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/E1BB6273C9386E6126440619E03EB12606AF6AD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BB6273C9386E6126440619E03EB12606AF6AD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j8QYaGngiRBcUYbVijr9UswPK4pvVhVZcQvmoJHXURN/0/E1BB6273C9386E6126440619E03EB12606AF6AD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:6b:de:28:8b:2f:b8:a5:26:82:7e:eb:4f:87:bc:1e:db:
         00:6d:c0:d2:db:50:a8:e5:8f:16:b4:b2:02:6d:1e:85:b9:05:
         82:6e:f6:8f:a0:a0:e4:61:79:70:4b:06:ed:3d:fb:90:71:e5:
         61:74:18:94:85:01:58:3d:7b:c4:dd:2c:12:7a:dd:72:a3:8e:
         22:d3:22:b6:47:ce:27:d0:e9:55:ca:eb:13:c2:0a:6c:16:6a:
         39:cf:b7:94:3d:65:59:e1:85:c2:c7:33:a7:6b:8d:fb:0f:c5:
         a7:fd:ae:ba:8f:29:f4:05:60:b9:95:96:3e:09:00:40:86:ff:
         d5:a3:f0:be:d0:34:fc:15:7e:d0:00:ed:ed:d7:8f:8d:cc:20:
         d4:04:ea:e9:60:39:a3:37:de:e5:30:4a:8c:a3:d6:ce:f3:3b:
         5f:76:e1:da:7d:6e:90:b0:cf:40:19:7f:90:5d:7e:f3:66:fc:
         be:bb:ef:31:3c:82:8f:84:d5:ff:4c:9b:c5:84:4e:7d:ee:ea:
         e8:30:15:8d:5b:48:43:78:f9:b6:52:08:a9:0f:3e:1d:b7:e4:
         12:c0:63:b2:49:8a:1c:59:84:af:b8:3a:3d:14:7f:53:c6:5e:
         bf:a1:53:89:47:d8:07:b3:c8:6d:40:63:54:19:dd:9f:84:29:
         eb:cb:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:06:07 2025 by rpki-client