Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
File:                     BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft (raw, json)
Hash identifier:          fqPIx3RrnVQ8IWgUk7BeNXIWeXrsxcemobdKFBnfw1E=
Subject key identifier:   16:8A:DE:17:36:8A:00:78:D3:3A:AE:38:38:16:95:4D:E2:38:FE:09
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       197D7EAD1634A9FDC5C020F518F36683DDBA2AFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
Manifest number:          01BE
Signing time:             Fri 28 Mar 2025 21:36:01 +0000
Manifest this update:     Fri 28 Mar 2025 21:31:01 +0000
Manifest next update:     Sat 29 Mar 2025 23:02:01 +0000
Files and hashes:         1: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: TVIsp7msjVaA5/vW7mRXbBvDjo7kJVR/gXsXDZAA3sc=)
                          2: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: GwKw3Fk6ZW5JU5P+3J72OpyfN/+3PwFUS/Dpz9xFeU8=)
                          3: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: MZrIkZ4yOa3j1Y/4Ssqj7CFPeOOhg51yB+qdu8fLrIY=)
                          4: 323830343a6131383a383030303a3a2f33332d3334203d3e20323633303232.roa (hash: g2G67ufeop6TzLj8bz5NkpBU2ApyMKCoqz/NfsR154w=)
                          5: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: ITF5gnc06umZurt990pa1EEUxUmVJ+eYkNyBvnF2Khg=)
                          6: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: 68r6IPemCaYD7QJtNH9ACyKI86qAUiv5lvnjQIum+ts=)
                          7: BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl (hash: iZj5geLZTP2jXYDZepSu9ye3jiV78sYrVQKWPSl0kU8=)
                          8: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: 13xbZlPPrc37T73p03YsbhNRwz3s6hgRg8R6wKGVKyU=)
                          9: 323830343a6131383a3a2f33332d3334203d3e20323633303232.roa (hash: QGn1e741uH3SxLWvJiXHqYPk6n/umppkhESLNY0qUs8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7d:7e:ad:16:34:a9:fd:c5:c0:20:f5:18:f3:66:83:dd:ba:2a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Mar 28 21:31:01 2025 GMT
            Not After : Mar 29 23:02:01 2025 GMT
        Subject: CN=168ADE17368A0078D33AAE383816954DE238FE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:c3:ae:33:21:2d:4a:ce:36:11:29:a9:3b:
                    45:61:a4:c9:07:65:0a:61:8b:54:fe:3a:3e:ae:51:
                    9c:2e:7c:d4:54:e3:72:cb:1b:c4:17:4c:60:4a:af:
                    44:b8:23:ee:49:d2:92:ab:2b:64:d3:0e:54:7f:ac:
                    68:b2:ea:12:2b:0f:76:8c:61:6c:1c:81:6f:c9:d2:
                    63:55:3c:6a:7a:55:bc:a5:ae:60:67:d3:23:7d:8f:
                    2a:5a:dd:e1:17:54:86:65:dc:a2:43:f4:e6:3f:59:
                    0e:24:f2:43:73:97:6a:cf:d8:78:a5:f0:b2:6d:fa:
                    7f:f2:ef:2a:86:53:fb:25:3d:5f:29:ae:c8:15:13:
                    92:c3:51:2d:f2:6c:e1:6e:86:92:fc:a3:ed:34:fa:
                    32:97:57:72:d1:f7:de:07:0c:88:6a:a6:d7:00:50:
                    26:05:ea:6d:3c:b2:55:cf:c9:26:5b:4b:b9:ea:a7:
                    d0:6a:dc:de:f8:1b:7a:a8:28:13:2a:5e:94:ae:e5:
                    19:6b:e7:12:94:92:6c:fa:d8:98:11:26:66:2d:29:
                    99:6f:25:02:43:b3:2f:11:57:f9:f9:bb:ab:8b:42:
                    ae:41:30:55:4d:bd:08:58:f5:a9:e1:ed:b8:fa:40:
                    f6:0c:01:bc:e5:28:62:79:c8:21:06:5e:77:59:2a:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8A:DE:17:36:8A:00:78:D3:3A:AE:38:38:16:95:4D:E2:38:FE:09
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:42:ec:20:9e:a4:4b:e0:79:74:c7:f7:5e:b7:11:f1:b3:e3:
         54:5a:e0:99:c0:a8:79:d1:03:f8:ac:b4:8e:da:22:80:2f:35:
         dd:39:cc:ee:01:d8:07:ce:ef:75:a9:de:eb:14:a6:5e:15:43:
         ae:2d:79:1a:f8:27:ec:f5:b0:46:2c:81:36:c5:8b:4b:50:6d:
         76:e6:8c:d8:4b:a6:eb:39:33:38:14:6d:a0:82:e6:68:4c:59:
         c9:9c:52:79:2d:48:77:08:c8:57:4e:df:93:50:be:1e:36:fc:
         5a:7d:35:50:ca:25:c6:ed:91:00:0b:c6:e0:02:3a:18:f8:94:
         3e:10:a1:91:b4:f1:fc:3f:25:e1:e7:6c:ec:4e:46:15:7f:bd:
         fd:f7:8f:75:93:e4:6a:e2:c4:1c:a2:3c:20:c9:bd:54:c6:0a:
         8f:ea:78:53:61:69:3e:07:11:76:53:47:13:a2:0e:16:b5:3a:
         6a:dc:54:24:ea:1d:f6:00:c8:7e:be:99:b5:14:e0:21:15:c2:
         73:57:80:0e:1b:fc:74:10:65:c0:c1:e7:6d:6f:29:09:85:83:
         ed:d0:1a:3a:e2:f7:b8:c7:2a:b6:af:7d:c5:09:87:c0:11:4c:
         6a:0b:e3:62:6b:31:a5:3f:c9:f5:96:45:19:e3:24:92:85:d5:
         7b:3e:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:29 2025 by rpki-client