Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft
File:                     9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json)
Hash identifier:          MgzLDdIVIJ+8qr/CPrP18JBOJJVnfr263OplK7/fmP0=
Subject key identifier:   96:4C:C9:08:E8:C3:AD:7C:1F:7D:CA:3A:41:32:28:3A:2F:58:9C:E2
Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9
Certificate issuer:       /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
Certificate serial:       6A812BE62FDCC2223159F64EA8632D080A855289
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft
Manifest number:          0117
Signing time:             Fri 28 Mar 2025 22:23:33 +0000
Manifest this update:     Fri 28 Mar 2025 22:18:33 +0000
Manifest next update:     Sat 29 Mar 2025 22:30:33 +0000
Files and hashes:         1: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: B6daVyJaghirt79xvfIbfN4GpwDsvjw5NaxWiYZAtfI=)
                          2: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: GrklC+iJFrsRI0w34SWrbnIjXmvJwXpX2cd9jvwvrmw=)
                          3: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: 3Kf1Nz+u8xAUIZ98DKmv1e1MIQJN+MP/NzxrXVJqxCU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:81:2b:e6:2f:dc:c2:22:31:59:f6:4e:a8:63:2d:08:0a:85:52:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
        Validity
            Not Before: Mar 28 22:18:33 2025 GMT
            Not After : Mar 29 22:30:33 2025 GMT
        Subject: CN=964CC908E8C3AD7C1F7DCA3A4132283A2F589CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:dc:16:c2:7f:15:c6:ee:2c:e5:b7:aa:b9:
                    8b:60:48:94:81:3e:8e:4a:66:5f:bc:64:1a:af:bb:
                    53:74:62:3c:03:e2:76:b1:83:c5:e5:72:cf:29:16:
                    32:8a:ec:2e:10:0b:26:5e:9b:e9:a9:b8:c2:12:19:
                    b5:7a:3e:14:d5:d2:1b:14:e9:99:6b:46:e2:0b:74:
                    5f:a8:08:4b:20:9b:80:45:ce:b9:1e:d1:b8:5d:ab:
                    c1:73:db:21:0d:d9:40:3e:03:a0:08:00:46:eb:8c:
                    5a:ff:1f:ff:bc:66:05:d4:2a:9c:56:d5:8d:fd:52:
                    c5:30:a0:3b:4a:7c:79:ad:07:0e:ee:bf:e3:00:a2:
                    73:32:91:e2:91:05:b4:ee:6c:c6:af:35:c6:45:07:
                    73:94:4d:16:a4:7b:9c:3d:1b:c9:94:87:72:3a:15:
                    96:3c:85:06:13:85:79:bc:06:90:36:12:79:a2:04:
                    fd:4c:e1:f6:09:7d:ba:bf:29:2c:11:52:59:02:57:
                    be:86:2b:b0:ec:f4:9d:15:a4:97:dc:8e:f1:04:0c:
                    c9:df:29:61:07:67:86:36:4c:50:c2:9a:3d:56:fd:
                    b2:f2:d9:4b:8f:5d:61:f5:8e:d5:f2:4f:5d:6a:1d:
                    a1:c6:3e:94:e2:0e:ab:e8:59:78:20:86:5f:ad:23:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4C:C9:08:E8:C3:AD:7C:1F:7D:CA:3A:41:32:28:3A:2F:58:9C:E2
            X509v3 Authority Key Identifier:
                keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:b0:01:7f:71:08:f6:3a:dc:e2:5d:84:37:49:67:7a:6a:
         c3:40:46:4b:8d:b3:3f:9f:03:3d:2c:b6:37:fc:67:9d:ad:d9:
         8c:70:cd:d9:bf:08:2d:79:dc:23:37:3f:e9:e5:22:d1:27:ba:
         dd:e1:6b:31:96:fd:74:c0:ed:d4:12:d9:af:e3:24:ee:45:2d:
         2f:ca:da:ca:3e:29:4b:ec:5d:4a:78:99:8b:15:a1:8b:8c:77:
         b9:86:9c:e4:a8:17:e3:39:de:f9:02:8d:0b:92:4a:70:26:fd:
         62:6d:a2:a3:1a:2e:b0:71:dd:fa:1b:8f:d4:55:55:71:8e:57:
         9f:51:9d:04:37:02:06:3b:a5:84:59:39:a0:11:0f:5c:ac:8b:
         e6:4e:4a:ab:c6:27:cd:19:98:5c:a7:ff:f8:df:e8:4c:26:63:
         8e:25:85:57:0f:88:1c:bb:ae:b5:0e:40:71:40:22:8e:0d:70:
         0e:42:07:11:86:cb:d5:99:28:b8:a6:54:dc:16:35:7d:c6:91:
         c8:83:d2:a4:7b:28:2b:32:1c:70:4d:0d:68:48:e2:c2:ff:fa:
         27:4b:88:13:61:c2:78:19:10:1e:4c:5f:1a:a5:28:b9:f3:a8:
         39:ea:c1:1d:19:03:b0:bc:be:39:7a:a3:4f:59:a8:8b:36:55:
         41:56:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:43:52 2025 by rpki-client