Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
File:                     259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft (raw, json)
Hash identifier:          xfHyXvt1iOFDeDQInbXOmqBZmaYaE8i4m18wh+ylyzo=
Subject key identifier:   11:F9:60:D5:87:E1:AF:40:06:F0:F7:43:E0:A0:90:13:45:AF:6C:D3
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       42169C5684574B4A27B228966E2E47855F63C38D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
Manifest number:          01DE
Signing time:             Sat 29 Mar 2025 02:42:51 +0000
Manifest this update:     Sat 29 Mar 2025 02:37:51 +0000
Manifest next update:     Sun 30 Mar 2025 05:08:51 +0000
Files and hashes:         1: 323830343a373635343a3a2f33322d3332203d3e20323731313034.roa (hash: H4B234f35yYmeWnN9Qqkhm8R57/oBQeDUkd8DAmTnm8=)
                          2: 259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl (hash: NKJyprY8MPDAxGPMzNy5Enk/aaHCPFxSZ6zxswq/70c=)
                          3: 3137392e34322e342e302f32322d3234203d3e20323731313034.roa (hash: QxbbMTRzmfJBEg9C7YYavX6TGanwecZb4FAL7m2+Uvw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:9c:56:84:57:4b:4a:27:b2:28:96:6e:2e:47:85:5f:63:c3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Mar 29 02:37:51 2025 GMT
            Not After : Mar 30 05:08:51 2025 GMT
        Subject: CN=11F960D587E1AF4006F0F743E0A0901345AF6CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:33:25:2c:96:be:52:c2:fb:08:55:5e:34:
                    39:b1:84:0c:5a:4b:eb:6e:79:45:ca:3e:91:c9:3a:
                    d3:64:d6:f1:be:11:44:0d:f5:75:a3:76:7d:f6:50:
                    b1:f6:17:64:37:38:29:ed:5d:49:1d:be:ad:54:4c:
                    91:75:5a:c1:0d:82:78:17:79:65:25:ba:58:2b:be:
                    3a:2b:1d:58:19:05:ef:b8:4b:ef:5e:e4:82:57:f3:
                    ca:3f:c5:49:05:5b:21:ea:d3:7a:24:cb:25:a9:42:
                    29:b4:95:0c:06:4b:7a:4c:a4:82:5e:2a:50:09:46:
                    0a:b2:c3:db:6d:4b:75:59:34:73:77:81:28:04:b3:
                    43:9b:f8:b4:3c:55:82:e8:e7:a6:94:55:0a:44:b6:
                    12:f8:a9:fc:bf:1a:6d:31:a2:72:61:24:4b:98:39:
                    c1:0f:1a:1e:63:1b:da:42:cc:90:51:ee:a7:cb:c8:
                    54:2a:5f:03:bb:db:5c:06:cf:fa:8d:c5:54:25:4c:
                    d8:ea:48:2f:f2:ea:c1:a6:0b:bf:04:94:59:10:ce:
                    66:9b:fc:57:ec:d6:81:72:56:57:85:25:1d:2f:a3:
                    0c:71:6a:78:f0:20:02:75:0a:35:b3:b8:94:2f:c3:
                    1e:72:fb:e0:9c:83:42:77:dd:52:ac:09:84:b4:eb:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F9:60:D5:87:E1:AF:40:06:F0:F7:43:E0:A0:90:13:45:AF:6C:D3
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:d0:94:7b:71:94:78:21:8f:f8:f5:9d:59:43:23:72:6d:
         b6:af:a3:9c:e4:4c:98:7e:a5:58:b0:f4:b5:4c:84:ef:c7:fe:
         8b:2d:ea:e0:c7:90:26:da:fc:ea:02:7b:30:38:2a:19:ac:ff:
         34:c3:14:d8:a7:26:35:51:6d:83:99:24:a0:bc:60:78:03:f3:
         e1:26:d7:12:db:cd:09:f5:48:51:52:b5:9f:b0:f5:e9:50:25:
         4c:b3:cc:69:50:fd:a5:f1:d7:5e:e0:60:34:56:ee:e3:73:da:
         75:02:af:e9:fb:1a:6f:24:89:b0:2b:0e:18:44:cb:1c:38:42:
         74:dd:55:7f:c7:b0:12:f4:ef:b7:8b:c1:4c:25:cf:3c:bb:40:
         6c:bb:46:6d:b8:c0:a8:b1:94:c4:f3:e1:06:3e:61:01:94:4d:
         02:7d:8d:cc:e8:60:5c:3c:f4:48:88:a0:4c:a4:74:e8:91:1d:
         73:1a:ea:ae:24:30:46:70:f1:55:d1:d3:ab:1b:6f:34:78:65:
         97:f6:cf:3d:7a:c8:63:e6:d2:fa:d8:2c:ca:f3:ef:f7:4e:38:
         e5:a9:fa:f2:31:49:fc:e7:87:79:5e:5b:57:bc:de:52:bc:75:
         f6:71:8e:c1:5e:a0:67:fe:8d:9e:d6:ff:b3:b3:d4:77:50:ee:
         58:c0:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:30:53 2025 by rpki-client