Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
File:                     8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft (raw, json)
Hash identifier:          T9KVfVDG7wMOR7WGI/2PZOOhkSJuPP2KSEKPq2rqu9k=
Subject key identifier:   3B:F5:F2:66:64:CB:F1:8E:7C:AC:6A:05:D7:2D:9E:AD:87:A2:B8:19
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       08F63A1DB697E3B5DDE6228E98E8C02CD5B60887
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
Manifest number:          0161
Signing time:             Fri 28 Mar 2025 23:23:13 +0000
Manifest this update:     Fri 28 Mar 2025 23:18:13 +0000
Manifest next update:     Sun 30 Mar 2025 01:34:13 +0000
Files and hashes:         1: 3230302e37312e37322e302f32322d3234203d3e20323636323136.roa (hash: cmJxvHZtV8PuPYG/iAqlecJfSj+3Vw9jiCCKrj8tUwk=)
                          2: 323830343a336338303a3a2f33322d3438203d3e20323636323136.roa (hash: mYI9A/vht/YRbpoanygLB9lBhstFWDPzXkP4I0DAoTU=)
                          3: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl (hash: ZNSM33k1GClBt7Hruo6xRlsqmMT9jiZiiRd16xJWdos=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f6:3a:1d:b6:97:e3:b5:dd:e6:22:8e:98:e8:c0:2c:d5:b6:08:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: Mar 28 23:18:13 2025 GMT
            Not After : Mar 30 01:34:13 2025 GMT
        Subject: CN=3BF5F26664CBF18E7CAC6A05D72D9EAD87A2B819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:66:5a:bf:02:e4:d0:16:ed:ba:4b:f7:76:
                    6f:f5:c2:bc:82:a8:e7:5b:1d:87:66:30:da:20:fb:
                    39:a7:cb:53:e6:b2:c1:1c:b1:2c:40:c9:88:09:e7:
                    4a:5e:bd:01:77:38:60:92:f3:96:2c:f3:d8:95:d6:
                    7b:80:ff:9d:2a:f5:6f:95:cc:4a:ab:9c:c7:90:78:
                    a8:0f:f1:d4:b1:78:af:3e:df:a3:1d:04:d0:47:2b:
                    fd:3a:b7:be:7c:db:77:35:29:3c:74:5a:94:c0:e5:
                    33:3c:c4:7d:73:af:53:d8:02:c8:25:61:c9:6a:23:
                    60:e7:14:81:3b:31:3d:36:a6:32:27:c2:16:cc:36:
                    be:5a:cd:6b:a7:32:f7:eb:b0:27:b1:05:ea:2d:17:
                    d6:cf:62:85:b2:56:d2:95:f4:f9:1a:31:31:a0:bc:
                    2e:27:31:a3:40:c2:d3:89:27:6b:ba:74:70:26:e4:
                    32:07:a7:ea:bd:28:49:dd:00:91:14:96:40:79:1e:
                    21:84:71:79:64:93:cd:57:34:7c:7c:6a:a5:58:d2:
                    43:93:8d:5c:b9:0c:5b:d2:2a:d4:de:31:3d:ea:22:
                    f6:5f:2e:ff:5d:3c:75:ad:73:85:6f:5c:59:ce:11:
                    0c:27:6a:b1:8f:02:85:c7:1e:75:85:c7:dd:52:9d:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F5:F2:66:64:CB:F1:8E:7C:AC:6A:05:D7:2D:9E:AD:87:A2:B8:19
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d0:d0:bb:38:a9:ff:18:78:27:b7:64:ef:a6:c8:14:21:69:
         3a:e3:b3:97:5f:72:4e:94:ac:ff:3d:32:af:d4:74:fc:ba:31:
         a2:10:02:0e:78:dc:85:65:cb:a0:2c:55:cb:66:b5:bf:49:a0:
         00:95:cc:90:f9:fd:02:8c:fc:9c:5b:f3:07:bb:35:9d:2c:f9:
         b1:76:55:6c:fd:02:e5:8d:6e:05:04:aa:90:d2:ff:48:d8:8e:
         ff:c1:98:b3:ed:59:34:7a:78:ae:9c:02:f9:a3:9f:dc:5d:d1:
         c8:1f:8b:16:b2:c6:0e:15:7a:a2:84:1d:d3:c4:04:dc:f3:19:
         07:a2:c0:f2:88:cc:53:b1:4b:ea:de:60:61:3d:b1:e6:8a:e9:
         df:26:19:08:70:f3:77:9f:84:60:23:df:0d:b9:af:6f:eb:53:
         14:70:e2:8a:de:50:3e:f4:bd:ee:1a:5f:ce:82:23:b5:98:67:
         c6:da:b2:ee:6b:21:a2:3f:84:a4:e3:33:af:c4:ba:ae:33:02:
         38:d1:a1:23:33:6a:5f:d3:7a:6a:3a:d4:39:53:0d:ad:f1:5d:
         81:6b:da:97:56:46:9c:54:9e:42:65:dd:91:ba:6f:d0:21:c8:
         ac:43:03:1a:bc:cd:a5:7e:09:4d:c8:5a:5d:53:4b:53:3d:f2:
         60:5f:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:14 2025 by rpki-client