Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.mft
File:                     0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.mft (raw, json)
Hash identifier:          9bWJe/A6ApqAK5XtOcCaGpMh2Q/B9e0qsQfFG2yHHMs=
Subject key identifier:   A4:29:59:E8:B0:EE:CB:35:97:23:43:6C:F3:C9:FE:02:40:10:E3:1D
Authority key identifier: 0F:6E:39:9F:AF:99:1F:B9:E9:BB:70:47:67:C6:D7:3A:B1:D9:F2:4C
Certificate issuer:       /CN=0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C
Certificate serial:       37D41B295B94369E0156BB474E7B9C485366D9D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.mft
Manifest number:          01C3
Signing time:             Wed 12 Mar 2025 08:05:58 +0000
Manifest this update:     Wed 12 Mar 2025 08:00:58 +0000
Manifest next update:     Thu 13 Mar 2025 11:07:58 +0000
Files and hashes:         1: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: YOxc2ckHcKG0kBqxuGdWnztwWoa5iUVJUFymkZZl+Tk=)
                          2: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: hH1lR1VnR2pI7sdKw4Pw/d4zLX2pU1+Jduop/vgJyjQ=)
                          3: 0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.crl (hash: h3Z3N1Ike/5lbjtbkYFnAschhq5UI8LdLNAbTb0MZ8c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d4:1b:29:5b:94:36:9e:01:56:bb:47:4e:7b:9c:48:53:66:d9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C
        Validity
            Not Before: Mar 12 08:00:58 2025 GMT
            Not After : Mar 13 11:07:58 2025 GMT
        Subject: CN=A42959E8B0EECB359723436CF3C9FE024010E31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:87:32:fc:32:65:8f:8c:13:f3:5e:10:63:
                    98:5f:f8:c0:9c:b2:4a:7d:41:c6:c5:0d:7f:00:ab:
                    f3:88:23:d5:59:c0:96:2a:05:65:e8:bb:21:02:0d:
                    52:d7:7f:7b:2f:12:20:e0:8b:87:30:3b:26:63:a4:
                    c5:90:3f:95:94:38:0b:c9:76:43:36:38:14:c9:d6:
                    e6:8b:20:ec:9b:9c:9c:d5:2d:50:66:65:97:50:3f:
                    99:bc:47:22:0b:8f:e9:ba:68:8e:0f:60:e4:58:ee:
                    a1:63:0e:96:d9:ac:b9:a5:3b:c1:03:4c:4f:33:da:
                    09:74:f7:1f:0a:bc:ed:4c:90:2a:ee:34:b2:0d:31:
                    dc:23:a8:09:8e:a8:57:6d:b0:d9:3d:d3:af:81:cf:
                    1c:62:63:6d:2b:b7:92:7e:b8:88:7e:1b:29:0a:5a:
                    11:cc:f3:8a:04:f2:8b:94:33:e3:84:7c:b2:e9:84:
                    73:01:71:6a:ac:85:11:b6:2c:3e:45:2f:b6:7e:cb:
                    d7:93:22:ee:5d:a0:35:38:f6:7b:9f:bc:a7:e7:9e:
                    d6:8f:54:47:aa:09:ae:01:df:9c:95:37:af:f0:57:
                    8a:a3:18:96:63:57:0a:46:20:eb:3b:fe:df:6a:53:
                    56:c0:be:6f:13:8c:97:a0:72:ca:0f:3c:80:31:05:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:59:E8:B0:EE:CB:35:97:23:43:6C:F3:C9:FE:02:40:10:E3:1D
            X509v3 Authority Key Identifier:
                keyid:0F:6E:39:9F:AF:99:1F:B9:E9:BB:70:47:67:C6:D7:3A:B1:D9:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/1/0F6E399FAF991FB9E9BB704767C6D73AB1D9F24C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:f0:ab:25:eb:76:55:81:f0:da:ae:18:d8:42:3b:68:77:
         78:c9:1b:ad:79:d8:b7:71:0e:46:bb:4d:b7:c4:de:14:32:41:
         16:47:53:35:64:bc:04:1d:5f:5c:35:6f:58:ca:ad:2c:98:69:
         6a:1c:bc:bf:ba:af:96:f8:a8:56:9b:7a:57:3b:4f:8d:75:81:
         1e:5d:9f:e4:98:8e:df:94:65:41:24:6d:8a:88:c6:ae:21:f6:
         af:45:b3:fe:db:0f:5c:32:f8:6f:9e:be:26:0c:ab:50:51:8d:
         b9:7a:33:db:ca:c9:d4:c9:60:2a:e8:62:9e:f0:4a:83:39:d2:
         67:01:f7:8a:e9:15:7c:8a:0e:67:96:2a:41:0c:81:f2:05:69:
         02:b2:ff:5d:a1:54:ac:40:66:a7:0b:f4:20:40:6b:5c:e3:17:
         5b:35:7d:24:0a:d3:cb:5b:69:66:3e:9e:a3:81:0f:b4:98:41:
         2e:aa:c9:75:25:a1:39:f5:e4:00:de:28:1c:2d:5b:24:15:0d:
         0e:ae:d6:de:de:70:48:f5:4f:a9:5d:96:35:90:90:ed:e3:03:
         5b:9c:53:60:ec:3e:91:ab:28:fe:e4:9c:30:a6:d8:68:b1:c4:
         e7:61:16:63:9e:49:e9:79:8a:ce:5f:33:28:48:45:e3:61:5f:
         9d:e3:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:08 2025 by rpki-client