Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft
File:                     CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft (raw, json)
Hash identifier:          rfdybB6ZS0iiDHO8HFSHoFWXPtrUjCpKzVAOPVQpCHk=
Subject key identifier:   E0:7B:20:72:05:74:72:95:0B:E4:EE:BF:F2:3A:9D:F7:43:19:57:86
Authority key identifier: CC:8A:9D:20:53:AF:F1:9B:22:25:1E:BD:60:5E:94:A3:AF:50:E2:81
Certificate issuer:       /CN=CC8A9D2053AFF19B22251EBD605E94A3AF50E281
Certificate serial:       5EB8C2EE0FA847B3A8446889D3ACE22D433A880A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft
Manifest number:          01E2
Signing time:             Fri 28 Mar 2025 21:59:42 +0000
Manifest this update:     Fri 28 Mar 2025 21:54:42 +0000
Manifest next update:     Sat 29 Mar 2025 22:36:42 +0000
Files and hashes:         1: 323830343a376232303a3a2f33322d313238203d3e20323731343132.roa (hash: 4CuAHBmdX9BkxgLTaapgSSneldTRonJAqWTGCmIBG+E=)
                          2: 3230372e3234382e31362e302f32322d3332203d3e20323731343132.roa (hash: jDQ0DlND8Rsr6n9YVKrhmmVPiw771hTZ4bf+xM35d3w=)
                          3: CC8A9D2053AFF19B22251EBD605E94A3AF50E281.crl (hash: /MrdMkijriYL5Rtk2MUWZsFIJkiiuSNWB8ImLxjrDYk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b8:c2:ee:0f:a8:47:b3:a8:44:68:89:d3:ac:e2:2d:43:3a:88:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC8A9D2053AFF19B22251EBD605E94A3AF50E281
        Validity
            Not Before: Mar 28 21:54:42 2025 GMT
            Not After : Mar 29 22:36:42 2025 GMT
        Subject: CN=E07B2072057472950BE4EEBFF23A9DF743195786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:07:1f:90:ea:2d:62:76:aa:4c:78:7d:dd:e7:
                    43:60:88:37:a7:e4:c7:38:4f:aa:86:e5:47:9f:b8:
                    a9:09:ea:9f:97:19:77:44:30:2f:31:57:da:b7:03:
                    7b:53:ec:cf:a1:d4:5c:5e:7f:57:ec:24:66:f5:e4:
                    b2:f0:f7:d8:62:c9:34:ff:f1:1f:4d:dd:0d:8c:83:
                    fc:80:1c:c1:f6:82:0d:8b:70:3a:4d:b8:67:6e:d8:
                    93:fd:93:1d:99:36:0f:9f:55:fb:ee:d5:9f:40:43:
                    f5:2c:9b:04:da:5d:62:8d:12:59:ec:ed:0d:53:cd:
                    c5:4e:a2:fa:60:cf:90:0d:f0:13:fe:13:4f:74:46:
                    35:b3:2e:42:28:fa:71:9c:d9:7b:d8:fa:2e:04:25:
                    33:48:70:3a:fd:67:94:f7:e0:70:34:15:9a:bc:ce:
                    86:94:fb:8e:c7:fb:30:44:3f:87:d0:c6:57:cb:72:
                    b0:82:2d:4c:25:d3:b6:e1:b7:63:50:8a:4a:13:d9:
                    dc:a2:1d:93:90:6b:d0:29:36:06:2a:b2:9c:0f:8e:
                    64:88:d8:b7:78:b9:64:51:4b:9d:b7:2d:b8:df:8b:
                    d8:be:e9:e0:83:52:9d:76:04:47:0a:7c:0c:6e:d4:
                    e0:e1:75:4b:54:31:f7:3a:9d:8f:eb:7e:32:e5:4c:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:20:72:05:74:72:95:0B:E4:EE:BF:F2:3A:9D:F7:43:19:57:86
            X509v3 Authority Key Identifier:
                keyid:CC:8A:9D:20:53:AF:F1:9B:22:25:1E:BD:60:5E:94:A3:AF:50:E2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:60:9b:6d:1b:dc:42:3a:56:4c:5e:9f:b3:28:5f:26:eb:fa:
         e3:76:46:d6:23:33:1b:39:8b:65:37:4e:e4:25:19:93:66:9b:
         bc:1a:2b:49:09:ce:a9:2e:a7:23:9d:6a:ca:5b:78:ff:93:fe:
         46:7e:cd:d2:1a:79:94:84:74:bf:a4:cd:8a:ef:fc:57:6e:5b:
         e2:58:db:23:4f:d7:2e:7e:71:1b:15:6a:07:cc:76:6b:e1:63:
         9a:fa:b9:cc:1c:ee:dd:ae:1a:8c:b4:fd:fe:22:7a:a1:fc:3d:
         ca:ae:27:0a:35:f8:8e:ed:a9:5d:2d:ee:c9:93:71:59:de:18:
         34:0e:eb:5c:79:de:ae:2b:f7:ea:51:4b:6a:96:df:56:fe:a7:
         b5:3b:e7:c2:06:be:39:3e:84:2c:e2:74:61:0e:fa:b5:5c:72:
         76:b6:9f:be:9e:5c:aa:b9:e7:d9:2f:2d:5e:44:ce:0e:92:c3:
         3f:35:da:85:b2:b1:b8:e3:7b:52:10:59:9e:19:dc:a5:54:cc:
         72:a7:13:18:cb:56:8a:44:ae:36:39:35:6a:c2:6e:f4:bc:9c:
         3f:24:55:a0:3d:c6:83:29:b3:be:7c:31:41:1d:7b:7d:ab:62:
         2e:3c:6c:d6:25:e3:16:69:92:b5:e4:41:24:9d:65:0d:a7:5f:
         f7:8b:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:22 2025 by rpki-client