Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
File:                     91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft (raw, json)
Hash identifier:          ourP6FFKk6H9S/qaj270VbCnJsujIn/XXUkGV/TXBN0=
Subject key identifier:   8D:54:92:D5:90:32:02:D5:8B:AB:5A:79:B5:9D:53:E5:CE:8A:F0:29
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       4B2829A7EFEF4D0854FA6A776AFA5C196BFE4480
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
Manifest number:          01E1
Signing time:             Fri 28 Mar 2025 17:25:56 +0000
Manifest this update:     Fri 28 Mar 2025 17:20:56 +0000
Manifest next update:     Sat 29 Mar 2025 19:05:56 +0000
Files and hashes:         1: 91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl (hash: R3Z+T5dj7ixl8Dz6B21mICHCLigl3/Hwc8b7pJazrpY=)
                          2: 3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa (hash: r3JRTZYV5KSnbu3PLYg3zGDylCuUIDLZLaLOpfzGMIA=)
                          3: 3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa (hash: whNNELiXGX17WIuP6N28zCH6hY578TR+z8IF7iiM+Xg=)
                          4: 3137372e31312e35362e302f32322d3234203d3e20323634333831.roa (hash: BNvxBpnJmmvxh+RAURZAKMQWXw9qY1UMFRSlWEP2N+s=)
                          5: 323830343a316439633a3a2f33322d3438203d3e20323634333831.roa (hash: vV5TK5fsIhyy6fExgeGclpDro4nHDU66ztWjs1ASkhY=)
                          6: 3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (hash: j0hQAUu+SL8l06Lkbf5E+dGKRSB4OZ8UGbJioiNVvgg=)
                          7: 3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa (hash: u48EbEQ/lSCeYe04IU/NtV4JNvW+Yne091vq6QJOja0=)
                          8: 3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa (hash: F4Tl9N8AJthDQdHIrizSZ6Sg+cFtmEFvjmLDH8YR8lQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:28:29:a7:ef:ef:4d:08:54:fa:6a:77:6a:fa:5c:19:6b:fe:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Mar 28 17:20:56 2025 GMT
            Not After : Mar 29 19:05:56 2025 GMT
        Subject: CN=8D5492D5903202D58BAB5A79B59D53E5CE8AF029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:15:ca:9e:5f:e4:95:13:a9:68:33:3d:c6:
                    08:fd:d3:90:e9:71:b0:6c:e4:8b:a6:c6:cb:37:ed:
                    fd:5f:fa:8c:0b:c2:7e:f3:a9:84:ff:e4:87:cb:8c:
                    70:cc:f9:fb:c4:0d:a4:98:1c:a7:33:a5:5b:3d:6a:
                    89:7e:d0:35:88:18:bb:cf:93:f7:cc:58:dc:f3:1f:
                    8f:c4:8f:2d:9f:ee:41:a9:a3:52:4d:7c:47:7c:af:
                    81:51:c0:ee:4f:30:d9:f9:97:fa:1a:e8:80:ba:0c:
                    8a:0c:7e:a4:b7:c3:78:dc:e0:fd:b4:61:87:2c:8a:
                    27:fb:d1:e4:37:8d:81:52:28:95:a1:c2:85:de:de:
                    5f:6c:82:83:ab:e6:45:06:0a:bc:2d:c5:c8:da:7a:
                    41:cc:ed:b1:32:52:81:7b:b9:c3:fa:6d:5a:93:aa:
                    ad:3e:85:37:6c:0c:41:87:ba:92:d0:2a:d7:a3:66:
                    27:fa:c6:56:2f:ac:16:4b:1f:a8:8c:af:47:42:52:
                    3c:fa:26:f0:1c:bd:ef:8d:0e:d8:44:26:70:d8:a1:
                    0f:0f:a6:7c:66:2d:76:48:a5:b7:d9:b8:c6:90:8d:
                    63:f9:9a:de:0e:01:df:7c:4a:ba:aa:d5:90:d9:80:
                    2a:60:42:39:ea:70:06:be:37:35:18:72:d1:03:c8:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:54:92:D5:90:32:02:D5:8B:AB:5A:79:B5:9D:53:E5:CE:8A:F0:29
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:42:4b:c0:b8:be:66:a8:2f:cf:76:b9:23:0b:d7:f5:09:5f:
         41:b8:55:61:7a:c8:40:3e:2f:01:ac:c2:5c:77:20:b9:8a:f6:
         64:f9:b7:e0:df:8d:fc:87:b7:1d:a1:0c:83:1d:65:81:71:cc:
         24:83:92:31:a4:31:ac:dc:3e:13:86:19:38:67:ec:dd:7c:fc:
         24:77:f0:e5:1d:23:c5:b6:f5:40:d1:92:d5:be:f1:93:20:85:
         86:55:f7:7b:2b:a1:de:e2:13:89:dd:56:22:74:4e:b2:49:11:
         46:24:54:8f:4c:d4:5b:0d:cc:0e:c3:d9:d7:3e:06:a5:f8:aa:
         b9:b5:9f:81:e7:4f:43:49:c9:5d:86:16:2c:3c:0f:ca:a4:b0:
         6d:d1:a3:29:d2:ce:54:b3:95:ef:13:70:95:12:d8:ae:96:32:
         6d:5c:e4:29:9c:16:05:31:7f:f3:80:bf:a8:db:45:de:68:32:
         a7:de:78:03:7b:47:67:ac:59:e5:be:75:d6:89:c9:8f:b6:67:
         b8:f8:9a:91:e2:0e:25:9f:47:73:95:4c:ac:17:fc:d2:08:63:
         63:c6:ec:76:db:a6:bd:dc:d0:38:82:a7:02:7d:28:ac:33:da:
         d2:80:7c:51:d4:fa:8a:69:36:0a:ab:eb:c4:e6:a2:df:4b:6c:
         7c:7a:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:24:27 2025 by rpki-client