Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft
File:                     9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft (raw, json)
Hash identifier:          xTnMulYOm7EilbFKUUUgVcbEWUxrZYHebcnlFpEiFS8=
Subject key identifier:   A8:8B:38:21:9D:FD:A4:B4:75:88:E2:69:43:6A:D1:F3:92:36:14:42
Authority key identifier: 9C:05:0C:4A:1C:62:1D:E7:91:F7:79:A0:F2:2E:B9:BC:65:B9:6C:C6
Certificate issuer:       /CN=9C050C4A1C621DE791F779A0F22EB9BC65B96CC6
Certificate serial:       6DE02E8EF7DF8EF31C0E962D7FF308E0DA4A4914
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft
Manifest number:          3C
Signing time:             Mon 03 Feb 2025 22:46:38 +0000
Manifest this update:     Mon 03 Feb 2025 22:41:38 +0000
Manifest next update:     Wed 05 Feb 2025 00:06:38 +0000
Files and hashes:         1: 323830343a383637383a3a2f33322d313238203d3e20323732363435.roa (hash: OGIYXHmyAfVyYcG0EfMx5VdOGi3aoyNoGsB72H/WKFc=)
                          2: 9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.crl (hash: oMSUCwuQqa6OxB7IipZsk+6YtHxPG7SuH5SJx+aLrEw=)
                          3: 3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa (hash: auk03NIomiU7IyBLRKg327Vt0oxhDqLW6Pu2/8MfffM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e0:2e:8e:f7:df:8e:f3:1c:0e:96:2d:7f:f3:08:e0:da:4a:49:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C050C4A1C621DE791F779A0F22EB9BC65B96CC6
        Validity
            Not Before: Feb  3 22:41:38 2025 GMT
            Not After : Feb  5 00:06:38 2025 GMT
        Subject: CN=A88B38219DFDA4B47588E269436AD1F392361442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:f9:94:68:8c:f9:13:c6:62:4b:fe:d8:99:
                    37:be:f7:f9:43:af:bf:98:f8:a0:f0:82:b4:c6:aa:
                    dc:c7:71:25:1c:0a:44:85:60:63:e4:8b:7d:cd:e5:
                    bd:39:e0:ae:bb:68:ed:99:8b:1c:8b:82:b7:47:fa:
                    ca:8c:1b:94:02:33:fa:3c:53:8d:5d:c0:68:51:b9:
                    eb:81:d7:15:3c:1d:a0:9d:0e:66:bd:97:a5:bc:ca:
                    a0:13:47:ca:94:ff:4b:0e:5d:89:55:94:87:8f:79:
                    d8:46:b7:74:3d:34:64:d7:e2:55:40:6b:6d:14:49:
                    97:4f:42:fd:0c:11:b0:ee:04:b9:35:cb:ba:2b:15:
                    3a:c5:cd:fa:d5:97:2f:c0:81:bb:48:f1:cd:0d:67:
                    13:80:8f:12:81:10:8a:f2:0b:d1:d5:9e:8d:ef:32:
                    bd:c4:5e:3a:fa:7c:6e:05:5f:63:72:72:0e:67:1e:
                    c7:a3:a8:84:39:25:1c:58:d8:77:65:34:bf:c3:32:
                    02:8c:7b:d4:01:05:32:38:78:38:0e:0a:2c:28:42:
                    c5:9e:f6:ed:29:f9:ac:88:1d:bf:bd:11:95:08:9d:
                    ff:59:e7:06:37:0b:52:fd:e2:b5:e4:de:d0:b1:b6:
                    8b:56:72:d4:68:c0:11:4e:14:45:c7:3c:a3:2a:26:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8B:38:21:9D:FD:A4:B4:75:88:E2:69:43:6A:D1:F3:92:36:14:42
            X509v3 Authority Key Identifier:
                keyid:9C:05:0C:4A:1C:62:1D:E7:91:F7:79:A0:F2:2E:B9:BC:65:B9:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/9C050C4A1C621DE791F779A0F22EB9BC65B96CC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:30:08:18:41:ee:19:f6:5d:6c:da:83:0b:0b:66:07:d8:
         e7:03:5f:b8:6e:7e:6c:1f:8b:d2:15:63:cf:67:b3:26:01:d2:
         20:4a:af:b5:7e:9f:27:eb:1e:05:60:af:db:06:4c:6b:1e:31:
         08:b8:07:ce:a4:0b:8e:8d:1c:1d:4e:70:5b:87:86:e5:67:9a:
         e4:bd:a7:4e:ba:7d:1b:4a:99:28:3b:9a:42:18:f6:d4:31:4f:
         63:6f:14:87:fe:59:25:34:a9:fc:f4:b4:e1:1e:99:cc:a5:79:
         08:96:52:75:14:94:14:57:31:94:d9:0f:c4:a6:c3:e9:db:5b:
         ab:13:f3:ed:2f:b4:f2:ce:96:79:9c:bd:73:45:ca:c4:cd:3c:
         c8:93:d4:93:e8:49:13:96:07:2a:c3:c7:85:2d:8a:a1:1b:ae:
         76:34:06:b3:1c:8b:00:c8:53:d4:4f:b7:1c:36:80:d1:85:65:
         0a:44:3d:e0:21:b0:5a:38:9a:86:ec:75:5a:8f:93:f2:47:99:
         da:51:cc:ba:c7:73:84:88:91:86:4a:25:0a:f0:19:40:3a:03:
         a8:92:11:d3:ae:8e:8e:b6:f6:4d:01:54:2b:bd:b0:26:ac:44:
         ca:61:74:83:d8:1e:34:89:0c:67:18:73:92:45:9f:65:aa:3d:
         f0:8a:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:03:43 2025 by rpki-client