Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.mft
File:                     CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.mft (raw, json)
Hash identifier:          l8GjQDllMoJE6FjFIVplkjA/kuS6p7LZdRIn7SP/5qE=
Subject key identifier:   F6:4D:C8:A9:36:4C:B9:12:18:BB:4E:63:70:CD:09:49:C6:FE:AB:78
Authority key identifier: CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E
Certificate issuer:       /CN=CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E
Certificate serial:       1EF6CD7062C0A1D6446A0B6481CBAFAA7264FFC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.mft
Manifest number:          07
Signing time:             Sun 06 Apr 2025 17:38:06 +0000
Manifest this update:     Sun 06 Apr 2025 17:33:06 +0000
Manifest next update:     Mon 07 Apr 2025 18:25:06 +0000
Files and hashes:         1: 3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa (hash: FQUvjkPllxyH4BKrzECdySkIMFhwrBhbrZ0TYNWJ8ag=)
                          2: 3138362e3231362e3232342e302f32342d3234203d3e203238323338.roa (hash: 0nDkgnZtvk1nx2BZAje/cg32sAC1oNko6YGTgIVWvf8=)
                          3: CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.crl (hash: ESFdtO6aljTLygX6/CC85BmJQ4iMOG828RvFXILzBdw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f6:cd:70:62:c0:a1:d6:44:6a:0b:64:81:cb:af:aa:72:64:ff:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E
        Validity
            Not Before: Apr  6 17:33:06 2025 GMT
            Not After : Apr  7 18:25:06 2025 GMT
        Subject: CN=F64DC8A9364CB91218BB4E6370CD0949C6FEAB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:bf:3f:b2:cc:d7:02:54:fd:5c:df:ca:49:
                    da:48:7a:19:cc:96:6c:11:16:1f:46:2c:8d:bd:f6:
                    c1:18:93:82:2c:1e:3f:9a:81:22:f8:ab:fa:f4:12:
                    23:e7:7d:fe:63:52:8c:3c:0d:56:16:a8:46:99:62:
                    14:60:d5:02:6f:0b:02:e7:ac:ce:13:f4:bd:dd:40:
                    dc:b0:a0:fa:df:29:6a:2e:a5:6d:58:b9:0e:2e:3c:
                    91:16:4e:c0:1b:c0:f9:82:eb:1c:40:aa:96:83:be:
                    53:08:3a:ae:21:e2:2f:bc:db:4d:8e:ea:9f:14:6c:
                    af:6c:4e:4d:1b:a5:32:09:de:7c:bf:17:6c:1f:45:
                    07:99:cc:14:3b:f5:dc:96:60:66:bf:f1:88:49:c8:
                    75:65:b1:b3:36:f8:b8:f6:b1:fc:93:9c:29:ae:ed:
                    d9:17:bf:2d:fb:a5:3b:db:4d:09:17:18:16:e8:87:
                    3e:84:e0:59:cf:3b:09:55:ce:63:b2:2c:62:22:71:
                    2b:a6:c3:7d:ab:3c:69:5d:ee:3e:03:11:a7:f3:c0:
                    38:f9:fa:69:8d:dd:d4:86:66:75:18:ea:a9:10:63:
                    ab:80:dd:ac:87:98:84:a5:58:5b:35:25:9c:b0:55:
                    ea:d6:58:10:d0:85:9c:ce:ea:d5:70:eb:9e:00:27:
                    00:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4D:C8:A9:36:4C:B9:12:18:BB:4E:63:70:CD:09:49:C6:FE:AB:78
            X509v3 Authority Key Identifier:
                keyid:CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:89:c9:41:26:34:94:fb:e0:b2:d1:e9:4e:a3:27:30:3b:c9:
         b7:ec:fb:34:fe:a4:17:88:52:8b:9c:11:0a:37:39:76:02:03:
         8c:59:aa:e4:9e:80:3f:73:38:15:55:df:75:49:b9:57:b1:c8:
         fd:54:24:00:12:cd:ba:2c:8d:1a:65:f9:60:4d:3e:66:c2:ee:
         06:af:a7:7a:9c:de:ac:81:24:6f:4e:d8:c1:41:73:58:8a:d5:
         d1:79:8b:13:42:f9:c0:93:7c:e2:bb:b0:c9:93:22:3b:46:43:
         60:0f:bc:70:1b:e8:ac:fd:7d:4c:f9:ed:bd:17:81:88:d0:ca:
         68:3f:d3:e5:70:55:d2:fe:8e:00:7d:79:e4:d9:0d:2d:b2:dd:
         7e:59:01:f5:8c:10:4a:98:03:3c:41:85:61:db:70:84:cf:4f:
         8d:5e:dd:16:c7:ac:41:c2:fb:69:5a:25:ac:5b:07:f8:8d:3f:
         99:f8:e3:a0:9f:6c:e3:0b:60:13:5e:69:36:92:54:2b:de:88:
         09:6e:d1:86:de:3c:7f:47:9d:48:ef:56:08:3f:ef:44:47:92:
         5c:f0:94:12:6b:d8:48:76:a7:4d:1e:6c:90:ff:40:54:f5:48:
         2e:9c:96:54:4f:4f:9c:12:f7:e9:0d:db:82:88:46:88:9a:ee:
         18:9a:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:50 2025 by rpki-client