Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/CF4F3244B4C4478154236189E948BC8868D07EF9.mft
File:                     CF4F3244B4C4478154236189E948BC8868D07EF9.mft (raw, json)
Hash identifier:          rhy6fJBziTGX/9gFSVsnBl8P0S1e67NJHTooT0pOOBg=
Subject key identifier:   82:36:1B:D9:CB:5A:D6:5B:34:B9:FC:30:A7:1A:87:BD:AA:89:06:71
Authority key identifier: CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9
Certificate issuer:       /CN=CF4F3244B4C4478154236189E948BC8868D07EF9
Certificate serial:       3F35E8DC6B90908B345B509E1C6192BE76F2499C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/CF4F3244B4C4478154236189E948BC8868D07EF9.mft
Manifest number:          94
Signing time:             Sat 29 Mar 2025 07:07:43 +0000
Manifest this update:     Sat 29 Mar 2025 07:02:43 +0000
Manifest next update:     Sun 30 Mar 2025 10:51:43 +0000
Files and hashes:         1: 323830343a343032633a3a2f33322d3332203d3e20323635393432.roa (hash: pbBKSA9i6HMgz5Nd/fcO90eB0Jc3QjvnIpYzdR99phQ=)
                          2: CF4F3244B4C4478154236189E948BC8868D07EF9.crl (hash: E0iWKUpJZosRtPjD1dOIZMbNuPbKdGHFpp5LQeV37XA=)
                          3: 3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (hash: GMJF4IeQiGDxFQSwCLlUAv0prhxqBjJf6HoTlXQbY+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:35:e8:dc:6b:90:90:8b:34:5b:50:9e:1c:61:92:be:76:f2:49:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF4F3244B4C4478154236189E948BC8868D07EF9
        Validity
            Not Before: Mar 29 07:02:43 2025 GMT
            Not After : Mar 30 10:51:43 2025 GMT
        Subject: CN=82361BD9CB5AD65B34B9FC30A71A87BDAA890671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:08:25:7e:6e:b5:72:04:c8:7d:11:0a:da:
                    2f:84:8c:cf:33:49:0f:ca:87:1e:52:dc:17:b1:c9:
                    93:56:78:ca:73:e3:51:12:18:f3:d7:5d:f4:52:67:
                    2d:3b:24:f8:f8:33:89:ed:d7:f8:92:8d:a3:8b:55:
                    68:d3:6d:2d:e2:ef:93:62:26:d3:22:aa:89:9c:6e:
                    23:2b:ff:49:6d:2b:7c:0a:de:43:27:26:ac:80:df:
                    0f:23:18:48:15:3e:dd:a6:f4:99:35:33:0e:c0:1e:
                    dc:94:18:eb:0f:da:6d:94:90:8b:4a:bd:09:d3:07:
                    60:98:39:47:ca:61:be:df:b8:4b:cc:35:0c:5a:ee:
                    fb:d1:0e:0e:a3:ae:d2:c7:79:87:7b:ba:45:96:8f:
                    4a:a6:1d:8e:df:91:18:b1:97:27:f7:49:d1:73:3c:
                    9f:eb:fa:f0:d4:6b:d0:3e:3e:75:7e:e4:b3:6b:85:
                    6e:12:ad:0e:7e:51:ae:a4:fb:3f:80:15:0b:b7:1f:
                    f9:98:b4:0f:61:4d:70:a2:b9:f1:55:80:97:e6:58:
                    95:84:a1:c3:9d:08:37:c7:0e:af:b8:a9:fc:b6:9e:
                    e7:e3:79:67:4f:93:78:ac:f5:91:99:60:25:8c:ef:
                    cb:58:3a:70:c4:10:a0:46:ed:e8:e1:e8:9e:0a:4c:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:36:1B:D9:CB:5A:D6:5B:34:B9:FC:30:A7:1A:87:BD:AA:89:06:71
            X509v3 Authority Key Identifier:
                keyid:CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/CF4F3244B4C4478154236189E948BC8868D07EF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/CF4F3244B4C4478154236189E948BC8868D07EF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:3a:6a:94:1d:ae:7d:8c:2f:21:1a:91:95:8f:1c:ad:96:
         4a:d0:21:50:77:0a:cb:1f:63:d3:b8:42:59:be:c9:d2:76:a7:
         76:d7:d9:bf:33:37:84:e4:81:ea:b9:e6:62:51:eb:09:f4:ed:
         c0:d6:25:71:56:69:0c:de:7c:e1:7a:84:fb:f0:d0:58:7f:34:
         99:ca:b7:59:d3:2c:73:27:b8:ad:94:7c:9c:47:b7:95:5b:23:
         59:36:4f:64:08:57:2a:1c:c8:2b:94:6e:79:32:0d:ef:09:d9:
         42:0d:87:dd:f1:f4:b1:19:6c:0f:c2:67:6f:20:8c:ac:a0:e1:
         70:ab:a2:7c:de:62:1c:8c:59:12:b5:fb:b5:6b:fb:c1:db:23:
         21:9a:4b:cf:d3:1b:e6:a4:b7:5f:a3:04:30:b2:17:90:f7:8a:
         7a:06:3e:f2:29:d8:e8:09:8e:bb:ee:ce:bc:75:8f:81:f0:5c:
         f2:b4:01:5e:94:b8:cc:86:a5:2b:d7:de:2d:db:54:e4:7d:17:
         36:20:37:7a:1c:85:d2:fb:5f:a6:21:d2:64:ac:ed:e7:b7:fd:
         d4:5c:69:8e:8e:e0:7a:6c:6d:4b:7e:42:3b:ae:04:43:00:63:
         c0:07:04:55:d1:d1:3b:01:93:12:5e:b7:56:a3:53:d9:a4:02:
         e8:b8:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:50:22 2025 by rpki-client