Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
File:                     CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft (raw, json)
Hash identifier:          FBYtBYHMv2nvGPyhbPutTSU7aE41CJgTEPOeKE3W3y0=
Subject key identifier:   38:B1:AE:88:97:28:D7:8F:63:84:96:77:A0:4A:5B:22:5B:A2:DD:4D
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       49ACE156671A5224E0818B7A4AA31475D9EBAF1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
Manifest number:          0148
Signing time:             Sat 29 Mar 2025 01:10:04 +0000
Manifest this update:     Sat 29 Mar 2025 01:05:04 +0000
Manifest next update:     Sun 30 Mar 2025 02:34:04 +0000
Files and hashes:         1: 3138372e38342e34342e302f32332d3233203d3e203533303532.roa (hash: hThbYJzfCExtNbGoSnemWW7UDWQuojnSpPPKNsIgnJ0=)
                          2: 3138372e38342e34332e302f32342d3234203d3e203533303532.roa (hash: tqRe0V3NKM/aOp1OJ2QjLxYdiXS5GnEBxzvmyWxLE7Y=)
                          3: 323830343a326634383a343030303a3a2f33362d3336203d3e203533303532.roa (hash: PO7DTRXZWozLLrAn/sp9Opb8UOzCT7vZXnOwCXCjBzU=)
                          4: 3138372e38342e34372e302f32342d3234203d3e203533303532.roa (hash: uSdSVEgD0TIlRQgZFzIbkqqF2QkHmz3kb16vA2W1ZlI=)
                          5: 323830343a326634383a343030313a3a2f34382d3438203d3e203533303532.roa (hash: iPRnRCuUMAw2BNtpesJWzBBYADO3S6wnCeJom2Yjnlo=)
                          6: 323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (hash: Fku8fSFSjTjgUrDTuLacXNvmZvcYQsU9Y2CMeXUU3VY=)
                          7: 323830343a326634383a3a2f33352d3335203d3e203533303532.roa (hash: cWep3WKKbBkUlHtkvsf/lyvND8777lSyvw2YixHgRto=)
                          8: 3138372e38342e33322e302f32342d3234203d3e203533303532.roa (hash: JReu8cGFxxLvA4Jdlc1SX2dVoJNJ3KsK3BHRHFp4m5I=)
                          9: 3138372e38342e34362e302f32342d3234203d3e203533303532.roa (hash: NfjM/7hoICZlhy9mx2DFMaNMzaD4fuAUTpt9Uygfdro=)
                          10: 3138372e38342e33322e302f32322d3232203d3e203533303532.roa (hash: WvMSp+GFpz1ZLnYoRXApOoLFeFsurLKwhA6gN9z3vso=)
                          11: 3138372e38342e33342e302f32342d3234203d3e203533303532.roa (hash: noEQjzdW/8jiORCDyVL0LyqpSGo5dn2blSGhjZcDy50=)
                          12: CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl (hash: JyQ61dq7kwGZAKCyh/mmntrDJ8rcWQC+wIaXbJElSxw=)
                          13: 3138372e38342e34342e302f32342d3234203d3e203533303532.roa (hash: L+rxTwttCc9G/xeahqHVR1FIB1sGzzbFLyP3YLlwdQw=)
                          14: 3138372e38342e34362e302f32332d3233203d3e203533303532.roa (hash: pdNX3V7fZ86iEo2ZYrWUJHQPqTU9WO7EigqfwsDL6Qg=)
                          15: 3138372e38342e34342e302f32322d3232203d3e203533303532.roa (hash: faDlgqPI4pMjEAj7gFBuoOJksRqVX6lo4BMGk6SksFA=)
                          16: 3138372e38342e34352e302f32342d3234203d3e203533303532.roa (hash: d1G7xvok+LynSW5EEbDK3hF5K0otI+lUOVfBvHi6Y4I=)
                          17: 3138372e38342e33342e302f32332d3233203d3e203533303532.roa (hash: cUPScbWs/N6RqYu4Dr4VNtJi1NWcmLGYi2vArlUWhNw=)
                          18: 3138372e38342e33332e302f32342d3234203d3e203533303532.roa (hash: hnJkq8jD+W6hrd0tbXq5X0FM707zxRzsLbC49bvEZkE=)
                          19: 323830343a326634383a343030303a3a2f33352d3335203d3e203533303532.roa (hash: UkVsx1BvVdbnRgzXKxH7/B+2x83O9oE7YBalr6ORDsA=)
                          20: 3138372e38342e33322e302f32332d3233203d3e203533303532.roa (hash: HJmD5qUaMT1AgS6AUbX/55PhShz/3XuHcmcin8crVsg=)
                          21: 3138372e38342e33352e302f32342d3234203d3e203533303532.roa (hash: pEbvgNnsvOrr47ghz+0K3P5BHtqnIPiElMknDH3PouU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ac:e1:56:67:1a:52:24:e0:81:8b:7a:4a:a3:14:75:d9:eb:af:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Mar 29 01:05:04 2025 GMT
            Not After : Mar 30 02:34:04 2025 GMT
        Subject: CN=38B1AE889728D78F63849677A04A5B225BA2DD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:2e:91:29:a3:92:b8:0e:53:f6:cd:97:06:
                    fe:00:d0:41:9d:7a:f4:22:b3:66:f9:75:80:ff:14:
                    01:60:cf:e4:5d:a2:f8:d1:fa:f5:5b:8b:9e:6b:3b:
                    f6:af:2d:0d:2e:57:8d:93:70:d3:1d:42:5c:8c:a0:
                    31:fc:f1:1c:e6:b3:f3:4d:cb:dc:2f:8f:be:c6:db:
                    d0:04:d8:d6:a3:f3:41:fd:06:25:46:8c:57:99:e0:
                    40:3c:f5:c2:08:6a:35:00:b7:4b:21:57:2a:4b:4f:
                    81:c1:1d:e2:21:00:34:0b:ee:34:37:0e:a3:2a:60:
                    f3:b8:42:c5:f9:0b:e4:d7:fd:c1:5f:71:6a:f2:b0:
                    e9:72:09:71:f0:76:e0:d9:94:a7:3d:69:3b:d2:4c:
                    a8:3c:61:8a:eb:ca:9f:e5:99:53:2d:2d:13:98:09:
                    b3:54:f3:70:16:e0:05:8a:4f:64:13:ca:85:d2:eb:
                    1e:9b:de:38:1c:82:22:57:36:97:5d:d0:7a:4a:7c:
                    3b:02:6f:46:dc:4a:ab:66:93:77:2e:4c:5a:30:b9:
                    fd:ce:b6:c7:dd:bc:1b:e3:5b:09:75:b1:3a:49:9c:
                    f2:48:69:2f:76:f9:16:d2:12:ee:32:e2:8e:c5:70:
                    79:12:44:eb:b4:1f:a0:bf:5f:5d:41:a2:89:f2:9d:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B1:AE:88:97:28:D7:8F:63:84:96:77:A0:4A:5B:22:5B:A2:DD:4D
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:e7:72:36:c0:9b:d2:c6:eb:65:28:93:b6:ac:b6:a2:b8:
         d5:15:26:e6:95:f9:54:4e:51:1f:3a:72:01:be:50:f3:7b:49:
         7e:e9:01:2c:05:bb:ac:db:13:48:9b:2d:7d:48:ae:be:07:41:
         91:8e:33:1a:3e:f7:28:f3:03:c8:db:a9:bc:7a:47:45:93:d4:
         d6:4a:72:d3:22:78:8d:ab:fc:29:f1:16:da:db:38:ab:84:c8:
         84:32:fe:58:07:57:99:f1:2d:f0:78:a3:f4:48:8e:16:2d:2f:
         ff:1e:35:3c:33:d2:2e:37:7c:97:08:2b:dc:58:c1:30:be:36:
         57:48:ba:10:14:e4:d1:99:92:56:41:36:ec:9e:b6:aa:6f:db:
         fe:1a:32:c9:92:ce:2d:fa:e8:79:52:2f:5d:64:9d:68:a5:1c:
         cf:f8:00:e4:a7:e8:a2:d2:04:a0:b7:97:d8:a3:2e:da:7b:c3:
         8a:93:d2:cf:37:4b:31:70:14:07:49:44:e6:ac:02:6f:33:99:
         9f:b6:ad:de:e0:18:67:20:68:9e:1d:bc:97:33:9e:41:97:b9:
         e7:39:8c:2a:1e:f3:3c:45:1f:fa:46:b7:da:0a:ee:69:99:1a:
         a9:86:82:f5:61:89:2b:63:0c:12:d7:78:8a:eb:5b:93:23:29:
         f0:8b:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:16:27 2025 by rpki-client