Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
File:                     3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft (raw, json)
Hash identifier:          ccdq3jTEENtiGt1+RvpaMwpt7u/5qYu1EZ+menVaX2o=
Subject key identifier:   8C:67:C1:FA:EB:1A:A3:36:46:27:79:4B:B8:E1:F0:B2:C3:FA:22:4C
Authority key identifier: 3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95
Certificate issuer:       /CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
Certificate serial:       0BFF85A62A54D56E62D3B50DE1E61810EE7E4AE5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft
Manifest number:          022A
Signing time:             Thu 03 Apr 2025 14:35:32 +0000
Manifest this update:     Thu 03 Apr 2025 14:30:32 +0000
Manifest next update:     Fri 04 Apr 2025 14:35:32 +0000
Files and hashes:         1: AS28343.roa (hash: gWVRijMRcxfvVbwKZtGQR2zXL5OPOeIMVtyFJpxVdAg=)
                          2: 3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl (hash: mljir0wRvady0xZbPyquvBFkMGarihRhm2eaGgC1gi0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ff:85:a6:2a:54:d5:6e:62:d3:b5:0d:e1:e6:18:10:ee:7e:4a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BCE948E59955EF881BD1ECD2DE385FE7959F195
        Validity
            Not Before: Apr  3 14:30:32 2025 GMT
            Not After : Apr  4 14:35:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:f3:c5:b5:ee:08:91:85:5d:20:ad:06:ca:
                    4b:90:ec:e3:ad:60:75:6c:2f:bf:21:cc:e4:64:21:
                    c0:df:c1:08:00:57:bb:6d:ea:f1:d0:08:5d:14:b0:
                    d0:e9:4b:a7:8a:86:7d:f8:e4:4a:1d:34:e8:cb:31:
                    98:a7:50:a7:e5:c4:56:77:66:6a:29:0a:9a:72:75:
                    f1:c6:41:6b:2d:dd:4b:a1:dc:74:52:97:c7:5f:75:
                    87:dc:47:bf:6d:28:c2:3e:9a:b4:16:cb:79:e8:07:
                    62:e1:19:29:86:29:57:4f:b2:85:96:6a:eb:76:ea:
                    b3:70:70:59:9d:1b:13:d5:0c:ff:65:bc:a6:9f:5d:
                    af:7b:58:bf:52:d7:76:f2:23:0b:f9:d9:bd:09:1a:
                    ab:e7:b0:7b:35:6f:02:55:5c:c0:62:a5:fd:26:77:
                    ce:db:8f:00:36:cf:52:da:ca:2f:95:13:e9:fb:72:
                    11:d6:d0:26:a1:c8:cc:06:2c:61:18:13:2d:2f:e8:
                    31:13:8e:2e:02:5f:11:6d:4c:ed:00:e5:f3:52:38:
                    13:78:e0:6d:37:81:f2:12:87:59:ea:c0:5b:ca:66:
                    66:48:a0:19:e2:25:1c:5f:76:21:da:f3:ea:d1:b1:
                    5d:a3:18:01:bd:95:ac:00:37:a0:86:0e:61:ea:3c:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:C1:FA:EB:1A:A3:36:46:27:79:4B:B8:E1:F0:B2:C3:FA:22:4C
            X509v3 Authority Key Identifier:
                keyid:3B:CE:94:8E:59:95:5E:F8:81:BD:1E:CD:2D:E3:85:FE:79:59:F1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BCE948E59955EF881BD1ECD2DE385FE7959F195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/2/3BCE948E59955EF881BD1ECD2DE385FE7959F195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:eb:b1:5f:17:75:8d:25:45:22:f5:30:61:ef:b6:f4:3d:
         48:37:8c:25:a4:cf:d9:d7:4b:0f:0b:13:a7:19:5c:6a:06:f2:
         ef:ea:02:02:b4:bd:f2:45:04:9e:8c:6b:59:26:ed:28:30:00:
         10:66:c0:53:09:ba:15:c7:39:35:17:3b:86:71:f2:f2:3a:b0:
         8c:d3:83:9b:ff:26:2d:b2:13:b5:e8:e6:09:b8:99:58:d4:ac:
         cc:61:d8:c9:4e:30:cd:40:cc:dd:c1:92:01:22:c3:f8:cb:ff:
         5b:30:48:ad:03:69:82:c7:30:fc:da:d3:d8:6b:1e:22:15:ea:
         48:f0:60:89:13:70:f2:f6:9c:14:13:52:95:00:58:9e:6e:2a:
         e0:7a:97:c7:f1:fe:79:5b:dd:bd:10:96:8e:e6:4d:23:b0:61:
         0a:05:b4:32:d2:4c:cc:5a:b2:d7:f1:a5:35:bf:76:e8:20:6f:
         87:40:e1:ac:42:fe:e2:d0:6f:c8:c2:76:61:05:4b:9a:77:53:
         50:3b:8b:f6:62:fe:df:a0:21:c6:fb:3e:6e:70:75:36:8e:23:
         1d:5e:26:37:50:a2:80:1f:7e:cb:dd:f8:5a:d4:2a:3c:56:b0:
         17:d3:b6:d6:6c:fc:e9:74:65:81:bb:e7:c7:c8:2b:2d:e4:99:
         78:f7:a8:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:53:06 2025 by rpki-client