Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.mft
File:                     BAB424425130D4A907ADC474343110DD5B32F7B5.mft (raw, json)
Hash identifier:          9JhAIwf06vo66Qu+/mX4WpWbSdUpjHeB/2rXSZtbMeA=
Subject key identifier:   BB:2D:AB:EA:43:47:4E:C4:B4:76:77:74:1E:A3:B8:35:9E:33:96:EF
Authority key identifier: BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5
Certificate issuer:       /CN=BAB424425130D4A907ADC474343110DD5B32F7B5
Certificate serial:       320D7750A1B6CE86BC8DA5158D802F8B27A912EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAB424425130D4A907ADC474343110DD5B32F7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.mft
Manifest number:          1B
Signing time:             Sat 29 Mar 2025 05:51:47 +0000
Manifest this update:     Sat 29 Mar 2025 05:46:47 +0000
Manifest next update:     Sun 30 Mar 2025 06:56:47 +0000
Files and hashes:         1: 3137372e33362e37312e302f32342d3234203d3e20323730393531.roa (hash: J4mFly8AUL25Uro+WukEabna4R3nMOmEOWEymI63Czs=)
                          2: 3137372e33362e36382e302f32342d3234203d3e20323730393531.roa (hash: cF3XNQi5RowSjCmVJLHMbaeipRulmIdVf2q5d8mv1uY=)
                          3: BAB424425130D4A907ADC474343110DD5B32F7B5.crl (hash: OlfdYAWSBtD3iGJlaNC++fQeUMJADCeZr3tm3Y+Y4k4=)
                          4: 3137372e33362e37302e302f32332d3233203d3e20323730393531.roa (hash: pl2ssXu/qV58qjzU9oxW3LmdVlAeXbU0YOqq2io5osI=)
                          5: 3137372e33362e37302e302f32342d3234203d3e20323730393531.roa (hash: /AChxO3qVIPgEMCaDN7ZT6mSpKMzD4yz5MGL8m1exh0=)
                          6: 323830343a373430303a3a2f33322d3332203d3e20323730393531.roa (hash: Xq4TJSaiXADzBw5bD0JHM+fC1zuLpQ0jOsoWitwTgaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0d:77:50:a1:b6:ce:86:bc:8d:a5:15:8d:80:2f:8b:27:a9:12:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB424425130D4A907ADC474343110DD5B32F7B5
        Validity
            Not Before: Mar 29 05:46:47 2025 GMT
            Not After : Mar 30 06:56:47 2025 GMT
        Subject: CN=BB2DABEA43474EC4B47677741EA3B8359E3396EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:5d:34:3c:db:a4:ec:15:d0:33:2c:c8:81:
                    16:79:86:e5:c4:9a:d6:5c:20:89:5d:47:71:1e:85:
                    24:e4:ca:66:06:ec:67:09:30:4d:0d:3c:87:7b:4e:
                    83:69:fa:da:fd:a0:d5:44:f7:59:f7:13:b1:fa:dd:
                    e2:3c:85:8b:54:82:e8:7e:9b:cc:4f:22:a6:7f:33:
                    0d:ae:05:ba:dc:ae:0d:ce:a5:31:14:da:cd:78:33:
                    50:8c:70:bc:e8:66:93:d8:6f:a3:5e:4a:65:31:e8:
                    5c:32:d6:bc:ee:9b:c0:31:90:ff:e3:c7:2d:51:04:
                    02:0e:3d:d4:cc:a6:38:d0:88:a6:77:9f:37:f7:a8:
                    1e:d2:c7:5d:f1:4b:29:57:fb:e6:1c:4c:6e:ed:df:
                    6f:31:89:76:d4:15:c5:b0:0d:4d:af:18:78:3f:fe:
                    4b:58:3f:b1:48:35:5b:68:43:af:b7:68:b6:12:fd:
                    a5:73:49:8f:65:04:b9:7a:2f:bd:a0:7e:03:6c:92:
                    c7:6d:ee:50:cb:e6:f0:d9:ea:dc:e4:7a:4f:e8:b8:
                    b8:8c:2a:a1:35:40:6b:4a:c7:b8:c2:91:64:a9:8c:
                    d2:34:73:52:d6:0c:6b:79:b2:b9:67:f8:e3:87:e7:
                    e0:f6:3c:fd:52:11:33:3d:6e:53:4a:c9:0b:e3:2b:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2D:AB:EA:43:47:4E:C4:B4:76:77:74:1E:A3:B8:35:9E:33:96:EF
            X509v3 Authority Key Identifier:
                keyid:BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAB424425130D4A907ADC474343110DD5B32F7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:e6:67:db:6f:74:a3:53:94:c2:8a:46:c4:c3:64:47:c3:
         24:70:0b:82:8c:95:c1:60:52:06:ae:44:46:30:2f:e5:c5:39:
         9e:c1:60:5f:96:b3:4a:4b:6b:66:aa:03:56:52:2b:5d:67:3b:
         7d:c7:d7:01:4f:e0:e2:48:00:4e:9a:b1:d5:c3:92:ab:96:ea:
         68:6b:9e:31:f6:6a:01:31:c4:ff:70:08:64:37:cc:6a:95:5c:
         93:68:e1:94:c2:5f:28:3d:d8:3e:db:39:9c:a9:5b:6b:20:5b:
         a8:13:dc:ad:bd:b3:2b:7c:51:46:95:c1:32:44:2b:d3:32:ab:
         08:f7:26:36:03:a1:15:c0:1b:f3:fe:ca:e8:a0:15:c2:7a:d6:
         2f:52:0b:33:a8:56:8d:7c:e7:5a:ab:c9:6c:5a:5f:22:4e:58:
         8c:95:95:b6:44:f3:74:8c:22:9a:56:6a:37:8d:2a:2c:db:a7:
         87:98:8a:f6:4b:30:88:76:1d:ca:16:d9:df:77:c3:ad:a2:49:
         a9:4d:70:bb:db:fc:77:62:10:62:90:15:86:07:9a:74:05:27:
         70:16:d3:19:a2:b1:2f:e7:cf:a9:de:53:11:a0:66:53:04:46:
         7c:69:5d:83:72:f0:94:72:ab:2a:e0:4d:14:6d:c9:80:9f:0c:
         6f:6a:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:44:36 2025 by rpki-client