Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft
File:                     5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft (raw, json)
Hash identifier:          FJ+Gk4X91ox612PMRX3OExgjcjrPVO+2q3bSLPl/g/w=
Subject key identifier:   D9:D0:FB:0A:7F:84:DC:D4:4C:FD:9B:1B:91:3A:90:87:58:8F:89:7C
Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78
Certificate issuer:       /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
Certificate serial:       1FECD2162A6F4CD80AE8C9F5A6E84D50AC9A982E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft
Manifest number:          01DD
Signing time:             Fri 28 Mar 2025 18:42:48 +0000
Manifest this update:     Fri 28 Mar 2025 18:37:48 +0000
Manifest next update:     Sat 29 Mar 2025 21:06:48 +0000
Files and hashes:         1: 3136382e3232372e3136302e302f32332d3233203d3e20323633383630.roa (hash: 6jjrc9ANoxOYfekdt2gt3T8n3TKcgTFRf6bm6lOugPk=)
                          2: 323830343a323664343a3a2f33322d3336203d3e20323633383630.roa (hash: v2yWHsPaNlJLIG8y876+IV1q25Ygv3vzGvi11vk81po=)
                          3: 5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl (hash: LnxZjcNkoxT8VmXxXaN/gVp45BNPzKR12met2UvZiZI=)
                          4: 3133382e3138362e3132382e302f32322d3234203d3e20323633383630.roa (hash: 0+4MSJiTqwW6Tt5GMzfLtVFYIRflx6jd0lLnLpGpLuo=)
                          5: 3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa (hash: VgMFMmaobaCEUsM022elo5PWrGNQARyRDi6zjqvG0rM=)
                          6: 3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa (hash: Yaf9Tvlff1xluQ+16g75/g79YRLhldpYdZFHzQTgR/M=)
                          7: 3136382e3232372e3136332e302f32342d3234203d3e20323633383630.roa (hash: rd/qH20HMvuyKb4wGa40zSXn8APSBslIR0By2zFuA58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ec:d2:16:2a:6f:4c:d8:0a:e8:c9:f5:a6:e8:4d:50:ac:9a:98:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
        Validity
            Not Before: Mar 28 18:37:48 2025 GMT
            Not After : Mar 29 21:06:48 2025 GMT
        Subject: CN=D9D0FB0A7F84DCD44CFD9B1B913A9087588F897C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:ab:b9:d1:48:35:8f:83:35:9c:0e:29:3b:
                    6f:01:fd:d9:a2:e2:ff:2f:ac:b9:f2:a2:13:90:43:
                    9a:3e:dd:87:3a:20:17:21:03:5d:fa:85:c2:8d:90:
                    9d:b0:e1:6b:ac:10:d7:95:2f:0c:6f:37:2f:a6:6b:
                    51:e3:7b:d0:5d:3f:b4:47:45:ed:fb:30:8a:fd:86:
                    24:d2:ed:08:2f:3e:8b:52:19:d7:39:59:65:fc:65:
                    a1:2e:03:b5:0f:d2:51:e1:1c:1c:22:1f:fa:7b:e0:
                    b6:e6:4e:82:be:ad:c2:19:b6:0e:29:8e:cd:f5:ce:
                    2c:0b:45:d2:55:36:16:7c:c7:f2:4c:cd:44:91:e0:
                    60:34:ca:8e:f1:c5:b5:54:08:4c:c7:77:97:45:c9:
                    36:95:7d:e7:ea:c9:ab:d0:82:af:e1:2d:c2:69:dc:
                    ef:a7:f8:77:38:f8:89:c3:7e:7f:27:56:de:7e:83:
                    90:59:d1:2d:8a:e7:8b:15:6f:4d:b5:af:05:ef:d4:
                    0e:08:6f:11:c2:ec:41:71:52:42:33:91:31:60:38:
                    34:41:5d:45:b4:98:87:16:41:8b:f0:3e:3b:d0:b8:
                    ea:ef:24:22:cd:68:c2:95:e1:69:0c:c6:1e:f7:57:
                    08:85:a1:a3:15:ec:c5:a6:a0:1d:18:63:81:17:c2:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:FB:0A:7F:84:DC:D4:4C:FD:9B:1B:91:3A:90:87:58:8F:89:7C
            X509v3 Authority Key Identifier:
                keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:74:04:8f:2f:15:b1:56:97:9c:1a:d5:9b:e0:7f:50:f0:42:
         a8:9c:fa:a8:2c:06:a3:58:b5:bd:ed:75:d5:4e:0e:dd:45:96:
         3c:83:28:13:78:16:34:3c:27:b0:86:db:da:3e:1c:02:8b:9e:
         f7:3a:ed:15:49:2c:cc:d1:46:b2:b1:dc:2c:e8:f2:f2:08:ca:
         2e:57:b6:5a:dc:82:68:f6:fd:a1:25:a2:fa:b1:43:cf:3e:bb:
         7a:00:98:7a:6b:88:76:c6:c3:07:66:dd:b2:54:ef:91:a2:87:
         2f:68:5c:ed:46:e8:36:17:6f:64:21:0a:c7:cb:05:ca:9c:39:
         d4:f6:bd:e3:45:81:80:bf:70:2d:d3:99:db:44:40:db:cf:61:
         50:47:cc:a4:24:85:13:d1:52:62:74:40:21:07:56:3b:e1:2f:
         2b:c2:52:e2:11:49:d0:b6:d7:c5:de:42:41:ab:ba:8b:1b:52:
         77:b4:61:d2:e2:5d:74:7e:5e:7e:04:ba:cd:10:63:94:24:37:
         87:81:f6:06:f0:e3:ff:53:6d:77:e7:71:3f:f4:2c:3c:13:87:
         ad:e3:9f:7a:4e:b8:03:16:de:2d:78:50:6a:b9:6c:07:b4:65:
         30:dd:5b:11:8f:e5:69:b3:a4:0d:b7:5c:39:a5:43:0a:95:b6:
         62:7f:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:59:52 2025 by rpki-client