Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.mft
File:                     319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.mft (raw, json)
Hash identifier:          ncBNImW2/aL0IKGOuG+vN+s6K3JI4nxs9jvVDoh8tDo=
Subject key identifier:   A4:4F:40:20:E6:E9:B6:49:EA:72:B8:D4:21:CC:38:68:BD:D1:C2:B0
Authority key identifier: 31:9A:2E:B3:BE:D8:FE:75:A1:29:0C:C3:92:DA:21:B2:69:F2:DF:8A
Certificate issuer:       /CN=319A2EB3BED8FE75A1290CC392DA21B269F2DF8A
Certificate serial:       251D7CBBAB3F05B5225E1C29F421615A20890BA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.mft
Manifest number:          011A
Signing time:             Fri 28 Mar 2025 20:29:42 +0000
Manifest this update:     Fri 28 Mar 2025 20:24:42 +0000
Manifest next update:     Sat 29 Mar 2025 20:35:42 +0000
Files and hashes:         1: 323830343a393030303a3a2f33322d313238203d3e20323733353237.roa (hash: aj2O7mGID1Rt0mMJ3l6xFx+MM+N+su2Ftl6z1+O3GwA=)
                          2: 34352e362e3234322e302f32332d3332203d3e20323733353237.roa (hash: ZXcGqU6pDmGsbscl/wuu0ngbgsCkIw+KknRNPr8nvik=)
                          3: 319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.crl (hash: Tc2kN/XRzFW7KXysKw0vX7AL+mtYB3RFFrPPgzAuy6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1d:7c:bb:ab:3f:05:b5:22:5e:1c:29:f4:21:61:5a:20:89:0b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319A2EB3BED8FE75A1290CC392DA21B269F2DF8A
        Validity
            Not Before: Mar 28 20:24:42 2025 GMT
            Not After : Mar 29 20:35:42 2025 GMT
        Subject: CN=A44F4020E6E9B649EA72B8D421CC3868BDD1C2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:97:76:23:54:8a:73:7e:82:b7:1f:12:bb:
                    12:1a:31:5f:54:76:95:82:ae:84:f9:94:55:6c:aa:
                    a0:8e:5f:ae:71:2d:7a:25:07:0f:36:62:80:5c:c3:
                    23:2c:65:1d:92:99:79:3d:9b:95:3c:66:73:22:4c:
                    d4:14:ca:f9:af:db:7d:6d:f1:b9:f4:f7:48:e6:01:
                    b4:61:69:1b:0e:e1:81:4e:06:e3:11:d9:bd:f8:9a:
                    ed:6d:c0:e2:d9:b0:b8:16:7f:06:ed:79:47:c2:f8:
                    92:7b:91:48:3c:1b:7c:82:4a:c7:20:69:8a:be:b5:
                    ef:0d:bd:78:02:12:0e:e3:61:c1:de:4d:ad:91:f3:
                    83:52:b9:a0:ec:76:b8:15:30:70:71:d5:98:e6:e6:
                    df:ff:be:c6:c2:31:9b:6d:a9:29:af:74:23:14:a4:
                    2d:98:4b:d6:41:d7:85:b1:ff:81:6c:47:e8:3f:4a:
                    73:76:6b:5b:57:df:84:2d:26:40:e7:12:d3:77:e9:
                    b9:db:cf:d2:7b:51:d2:60:12:29:60:5f:8a:0c:70:
                    fd:38:4c:db:b8:6b:29:15:9a:d3:dc:54:3d:cb:7d:
                    d7:16:8a:7f:6d:ed:02:7f:6f:0e:a0:d3:2d:9b:1b:
                    83:a7:ff:33:5f:0b:46:5d:b1:16:b2:8c:27:4f:6c:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4F:40:20:E6:E9:B6:49:EA:72:B8:D4:21:CC:38:68:BD:D1:C2:B0
            X509v3 Authority Key Identifier:
                keyid:31:9A:2E:B3:BE:D8:FE:75:A1:29:0C:C3:92:DA:21:B2:69:F2:DF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9CzC26mSbqqo15jAZ9q1P25Uiu3EyLfaem6RUsxYNj24/0/319A2EB3BED8FE75A1290CC392DA21B269F2DF8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f4:78:99:2b:5b:f2:b1:e4:70:6e:a0:99:5c:37:13:de:1a:
         e7:93:0f:83:38:fd:e8:2a:f1:4a:8c:1c:3d:e8:94:9f:e0:b2:
         c5:50:10:d4:c9:e9:8b:ef:02:c0:18:a1:25:79:64:cc:9e:51:
         91:5d:bd:37:e5:17:a5:33:d5:8d:f9:32:71:95:56:bf:d1:05:
         38:9b:58:b2:52:5d:76:94:51:bb:fb:c6:fd:f4:41:e3:76:91:
         5e:03:bb:44:cc:e0:32:a8:7a:c9:47:b3:45:4f:20:91:bb:32:
         82:e9:58:47:3f:75:2a:76:88:8a:7a:b1:d4:e3:8e:1b:72:69:
         6b:cd:22:d2:4f:86:8c:c2:91:ed:86:c0:c5:f2:a2:55:fa:fc:
         95:14:c1:61:b9:81:3c:8d:f9:0c:ed:5f:4a:3a:97:c1:ea:d0:
         ab:3d:ee:cf:ab:c7:6b:ca:fb:ac:59:a1:19:89:96:72:ec:fc:
         6c:e9:4c:26:a3:c7:f5:8f:a6:da:3f:d6:7e:3b:2b:64:6f:de:
         15:a9:1c:09:ea:c7:7c:69:a9:8a:2b:7a:14:3a:2a:6f:38:ff:
         40:1e:4a:7f:d9:eb:66:25:4c:66:0a:6a:92:be:5d:5e:fb:0b:
         a4:81:77:65:5a:e5:01:76:9b:4e:35:4d:0b:9b:86:9c:88:7d:
         95:29:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:50 2025 by rpki-client