Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft
File:                     68E8FFC7C7187C981753E423319759DC084F69E3.mft (raw, json)
Hash identifier:          geH7byIAV1IUh/iULejbykHAaIv0kQ/fnfjRTKyNAto=
Subject key identifier:   F5:2A:5A:6C:35:FD:84:72:66:D9:55:16:B7:9D:7C:65:A1:F0:96:4F
Authority key identifier: 68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3
Certificate issuer:       /CN=68E8FFC7C7187C981753E423319759DC084F69E3
Certificate serial:       1363CA2122308D77590801194330A2BCB7638EE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft
Manifest number:          01E1
Signing time:             Fri 28 Mar 2025 18:39:20 +0000
Manifest this update:     Fri 28 Mar 2025 18:34:20 +0000
Manifest next update:     Sat 29 Mar 2025 19:45:20 +0000
Files and hashes:         1: 68E8FFC7C7187C981753E423319759DC084F69E3.crl (hash: HkrL3wuFyDcEojwMbmMq8Acf2ImjTr/+L/TcUYsX6D8=)
                          2: 323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (hash: MOvLM51hzFDCbQ2VwoPZsGNPsQP7XAsBwZ3GLqO2m1M=)
                          3: 34352e3232372e37362e302f32322d3234203d3e20323637303535.roa (hash: 0MiiXzeuKn8dSNnzVuikvgNZafQ+jvlK6hWi205kk94=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:63:ca:21:22:30:8d:77:59:08:01:19:43:30:a2:bc:b7:63:8e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E8FFC7C7187C981753E423319759DC084F69E3
        Validity
            Not Before: Mar 28 18:34:20 2025 GMT
            Not After : Mar 29 19:45:20 2025 GMT
        Subject: CN=F52A5A6C35FD847266D95516B79D7C65A1F0964F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:71:1e:0e:fa:2d:d2:52:f7:0c:0f:89:25:
                    b7:6f:9d:07:ba:6b:50:ba:36:c7:49:f3:79:9a:7f:
                    20:09:17:53:30:7d:dd:94:56:be:ca:82:11:25:a2:
                    c2:21:24:10:e8:cf:4e:ef:d3:bf:cf:3a:84:1e:a0:
                    32:d5:7b:13:9e:d8:24:8f:d3:6a:49:8e:dd:89:8d:
                    dd:7e:21:4a:35:9e:c0:cb:f3:36:75:37:c3:90:9a:
                    2a:2d:f2:59:dd:b3:f7:dc:7c:de:e2:38:2b:b8:d5:
                    a7:23:c0:5a:dd:77:f6:2d:10:f1:04:7d:3b:00:24:
                    b1:45:a5:2a:da:6e:2c:bf:92:53:6f:e6:19:de:d8:
                    01:fc:81:80:d9:63:7e:27:aa:6e:23:e1:b3:b4:c4:
                    26:09:7b:01:0f:b6:63:f0:2c:32:10:23:b6:0b:88:
                    64:fd:6b:78:a1:fa:a6:46:57:e9:90:25:f0:23:59:
                    ff:54:f3:93:43:57:4c:4a:a2:f4:40:ac:79:c4:bb:
                    14:1a:d2:17:c0:c4:4c:6a:60:8e:4b:48:fc:ec:c8:
                    c1:1d:45:4b:f9:23:ce:c5:ae:ee:d8:d9:4f:09:1d:
                    98:3c:22:13:d5:40:06:4f:64:d2:15:db:0c:a1:8f:
                    ab:25:5c:aa:99:13:bb:0e:3f:54:bf:5a:83:25:73:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:5A:6C:35:FD:84:72:66:D9:55:16:B7:9D:7C:65:A1:F0:96:4F
            X509v3 Authority Key Identifier:
                keyid:68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:7d:72:1c:8d:6e:ca:f0:53:b2:18:97:b9:ce:d0:09:66:03:
         cf:56:16:68:7c:b9:90:e4:b9:05:20:70:40:d4:a1:01:59:93:
         d9:a7:23:91:b1:e9:52:58:e0:66:bd:fa:90:90:fb:73:b0:b0:
         57:94:09:b7:08:64:a1:ee:d3:5a:86:17:72:be:8d:ac:74:8d:
         ea:e4:3e:60:27:41:36:47:0f:7f:aa:8d:ab:08:19:e6:62:b0:
         40:df:9c:e5:d5:b0:28:bd:7e:ba:56:a8:07:aa:12:41:90:b0:
         5a:21:de:6e:db:29:5b:8a:24:1f:e0:f5:98:3d:cf:60:da:48:
         92:65:04:38:96:2a:b2:92:9f:04:90:d3:f6:86:8d:77:fb:89:
         32:58:2b:a1:3c:c9:12:dd:80:88:3a:4d:06:37:93:2b:b5:65:
         0a:ce:ef:fd:27:bc:c9:ba:9a:f2:ec:e9:ac:a8:07:2e:ea:6e:
         b0:ec:81:e8:e9:17:b8:9c:6f:b4:0b:1b:66:ea:8e:98:af:3f:
         7d:db:af:5d:f8:a6:5e:73:be:fd:bb:87:ad:4c:c4:3e:d5:db:
         26:90:f8:3d:d5:55:73:25:0f:b3:0a:26:a5:aa:18:13:46:2a:
         de:cc:ec:69:da:33:25:e8:04:02:fe:a6:c6:45:59:62:5f:57:
         6a:45:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:55 2025 by rpki-client