Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          jTEm91GBgVzQopRF80QnyjImJPJrRcj4ZxozK67U1ZA=
Subject key identifier:   A5:E8:11:4D:8D:F0:38:0B:FB:6B:62:B9:0E:36:1D:B3:63:40:A2:BA
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       5EEEDB6C7EE36A41FBBF40F2B221CC76FA449D24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          01DD
Signing time:             Sat 29 Mar 2025 05:09:24 +0000
Manifest this update:     Sat 29 Mar 2025 05:04:24 +0000
Manifest next update:     Sun 30 Mar 2025 06:14:24 +0000
Files and hashes:         1: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: bhy0Ggxs7Q9qE4qZNpg8uAs+OrFbJQ4ei5mXgkeqwuI=)
                          2: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
                          3: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
                          4: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          5: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
                          6: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          7: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
                          8: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ee:db:6c:7e:e3:6a:41:fb:bf:40:f2:b2:21:cc:76:fa:44:9d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Mar 29 05:04:24 2025 GMT
            Not After : Mar 30 06:14:24 2025 GMT
        Subject: CN=A5E8114D8DF0380BFB6B62B90E361DB36340A2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:d7:a0:b2:94:26:89:5c:a7:58:de:7c:4c:
                    b3:68:ca:a4:14:a8:24:35:d7:50:78:a4:98:58:e7:
                    6b:d2:2c:2a:34:b4:e6:99:70:9b:0d:e3:88:27:95:
                    5e:45:ec:89:a1:c0:74:e1:da:e9:7d:86:ac:b0:eb:
                    b8:00:cc:9c:83:f0:a4:fc:a0:7d:5e:e8:4e:96:56:
                    ff:2e:51:d1:70:34:bc:97:ff:b3:83:d3:a7:81:b4:
                    a4:72:86:5f:1b:ce:41:7c:d9:18:09:f4:45:3b:22:
                    1f:48:a3:ac:e1:0e:3d:30:cb:31:a4:48:7c:32:1b:
                    26:85:35:a2:16:35:9b:70:a8:8a:d2:f5:0f:67:5e:
                    d4:f3:2d:ad:e9:0f:46:84:57:83:e3:07:f2:1e:99:
                    86:01:df:95:47:74:f2:3a:6b:48:5d:c0:22:ed:28:
                    3b:53:8d:84:a9:ce:c3:53:a6:16:cc:75:06:8f:0e:
                    af:0d:b2:c3:b9:25:06:eb:ee:3e:e9:21:7b:15:cb:
                    34:d7:4c:ad:00:8e:bd:cd:27:d4:89:0a:ef:a4:a6:
                    47:1a:a7:8a:c1:53:97:0a:72:9c:7c:b5:74:a3:2c:
                    20:28:a3:79:c0:02:b8:34:6b:ec:60:dc:a3:9f:0d:
                    60:12:61:2c:fb:f4:31:14:a9:a9:20:dc:a9:1c:9c:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E8:11:4D:8D:F0:38:0B:FB:6B:62:B9:0E:36:1D:B3:63:40:A2:BA
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:7e:5f:31:25:d0:b2:1c:bc:5f:11:32:57:b2:c9:17:53:
         54:20:6b:75:c5:81:ca:33:9f:05:a7:68:60:f6:2e:3a:bb:c3:
         4d:ef:54:ba:02:ac:bf:07:ca:04:51:4c:47:55:c7:ce:d5:11:
         11:bd:88:7c:9a:cd:c8:54:49:c0:54:c8:3d:29:2d:99:43:f1:
         e6:43:d3:65:07:ff:b5:25:73:fc:6a:5b:12:60:25:7c:07:af:
         58:dc:00:10:77:5b:bb:83:cb:e7:be:ff:d5:f7:01:f0:ca:66:
         ec:f2:21:49:d4:fa:8b:1d:ae:47:47:fe:79:0a:cb:62:b4:c6:
         e2:58:56:f0:18:2e:a5:43:e1:a2:c0:d9:fa:37:ee:ed:5b:2a:
         3e:24:d2:43:fa:3b:30:30:06:e9:66:1e:bb:ce:67:d0:17:66:
         22:a7:f0:1b:e7:a8:0b:9e:77:da:a8:9c:90:89:87:f6:93:c4:
         10:b7:c1:31:2c:de:70:a4:c2:18:24:9a:16:15:52:8a:25:e8:
         e8:1f:b0:46:a1:1e:02:94:17:e8:0a:ff:91:3c:36:9b:88:7a:
         b2:84:09:a2:b1:b0:e5:03:ac:c7:47:bc:2d:25:29:15:c1:4b:
         c3:c3:8b:44:e2:d7:35:15:b8:9b:cf:5f:69:8f:a5:c4:4f:db:
         ac:61:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:58:24 2025 by rpki-client