Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
File:                     E2072C475E2925AB717FA25CB0C35668A240297C.mft (raw, json)
Hash identifier:          wsdIpAtuvHmwt4z7XUVEPTKVnEPRev3s+Yy0KQkA8Fw=
Subject key identifier:   8B:62:9C:35:AE:39:84:F6:08:45:5B:65:3F:E4:E6:F8:43:82:82:80
Authority key identifier: E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
Certificate issuer:       /CN=E2072C475E2925AB717FA25CB0C35668A240297C
Certificate serial:       01902600105249AD066587E05AF4B1E57296D390
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
Manifest number:          01DA
Signing time:             Sat 29 Mar 2025 06:52:34 +0000
Manifest this update:     Sat 29 Mar 2025 06:47:34 +0000
Manifest next update:     Sun 30 Mar 2025 10:20:34 +0000
Files and hashes:         1: 323830343a376138633a3a2f33322d3438203d3e20323731333738.roa (hash: JyqLpCC8e0HeiVYChWcbK1KJtOM+u27pO0ftJeI92MU=)
                          2: E2072C475E2925AB717FA25CB0C35668A240297C.crl (hash: 5ZYivo9Qehwr7nm/d9wjvg57swxsI5wW67yVgnPhi8c=)
                          3: 3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa (hash: EyCOoDDnrBhr0IlOwvWF2i6lbOe5Cr7rSleEYhRojY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:26:00:10:52:49:ad:06:65:87:e0:5a:f4:b1:e5:72:96:d3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2072C475E2925AB717FA25CB0C35668A240297C
        Validity
            Not Before: Mar 29 06:47:34 2025 GMT
            Not After : Mar 30 10:20:34 2025 GMT
        Subject: CN=8B629C35AE3984F608455B653FE4E6F843828280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:9e:54:a7:31:44:34:bc:81:19:e5:ca:49:
                    50:89:5a:1a:ee:a0:e5:a2:eb:51:79:84:27:c2:30:
                    18:3d:94:9b:ec:74:0e:c5:d5:47:18:4b:e4:29:5a:
                    cf:ab:5b:16:41:2a:00:b4:43:e5:19:df:1e:1c:eb:
                    f8:55:4d:f6:6c:e2:6c:bb:56:1b:7f:e8:49:7b:39:
                    ce:22:6b:7e:82:e1:9f:cd:a5:24:2a:72:3a:f6:a3:
                    4b:42:37:2f:14:90:92:95:a1:10:9b:de:e8:12:f3:
                    d3:aa:0c:67:fb:9a:ee:1e:83:bf:03:4f:0d:d2:94:
                    c9:f5:4e:58:06:1b:26:91:4b:bd:41:76:42:19:63:
                    10:45:c1:56:1e:8a:e7:81:1a:69:dc:41:cd:0b:75:
                    29:1f:24:1e:c2:33:36:3a:99:35:2e:43:f5:0b:60:
                    23:3f:5d:f9:34:d0:89:41:f8:2f:7d:05:f4:b7:34:
                    51:99:d4:7f:b0:ad:86:6c:70:2e:f2:5d:7a:8c:7d:
                    fb:ec:48:56:f4:58:68:73:81:8e:79:70:e8:a0:2f:
                    67:dd:f6:47:02:82:f0:90:f5:da:3f:b8:3c:1a:90:
                    f4:ab:d3:0f:ff:ba:e1:59:13:c5:d2:2c:59:dd:e7:
                    be:1c:5f:b8:8d:e0:e9:48:88:f7:00:37:fb:7d:36:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:62:9C:35:AE:39:84:F6:08:45:5B:65:3F:E4:E6:F8:43:82:82:80
            X509v3 Authority Key Identifier:
                keyid:E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6b:43:74:b2:80:ec:0e:d0:7d:09:4b:e9:6b:c9:0d:ff:a7:
         dd:72:6b:5d:cc:64:d7:5c:c2:6a:c1:c9:31:d3:e2:18:98:bf:
         f1:37:b8:d6:c9:fd:9e:6c:93:90:54:f5:18:9a:5c:72:e3:1b:
         cc:8e:7b:34:98:56:d7:d8:88:f8:8d:b2:76:fb:03:47:b1:91:
         9c:7b:e8:d5:8f:1a:3e:02:d5:69:65:5f:1a:a6:ef:c3:58:7b:
         2c:95:38:76:3e:d2:64:1f:e1:ac:e2:2f:51:ea:87:e4:5d:35:
         fe:fd:ce:ab:e3:39:9a:08:a9:40:1b:c6:98:81:e2:d2:a6:08:
         bc:41:f1:a8:66:3a:b3:94:55:55:ff:9d:4f:b9:71:46:33:3d:
         cf:49:8b:d8:78:f6:7d:5a:6a:70:b2:1c:66:c4:11:c8:2d:bf:
         0b:a9:c8:86:ca:7e:d9:fd:32:db:86:25:79:e4:74:b4:5e:4e:
         16:b6:23:69:4c:af:7b:a5:42:d0:67:1b:b3:2f:e8:12:5a:c6:
         79:61:1a:2a:e1:1d:ef:b8:9a:43:e2:30:7e:c8:c9:b9:95:68:
         f6:bf:9b:57:a8:06:68:b3:96:e0:82:33:8a:bf:bd:c9:b0:4e:
         e1:cc:2b:15:38:6a:d6:98:f4:43:2f:cf:7f:8a:87:0a:d8:82:
         8d:b7:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:15:06 2025 by rpki-client