Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft
File:                     66F999D364628A7CC2634117B086F1A07B01449C.mft (raw, json)
Hash identifier:          EW0yp6WN3urEDHM+/Lr/3tqeMMb287QayJAwWhpp6Kk=
Subject key identifier:   AF:89:CB:65:3A:D3:07:C2:AF:73:9D:96:E5:F9:16:B5:E9:89:75:3B
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Certificate issuer:       /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial:       0A999264210CD88E9C47F75E20F9CAF278B849F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft
Manifest number:          3B
Signing time:             Fri 28 Mar 2025 20:22:17 +0000
Manifest this update:     Fri 28 Mar 2025 20:17:16 +0000
Manifest next update:     Sat 29 Mar 2025 20:42:16 +0000
Files and hashes:         1: 3138312e3232342e31322e302f32332d3233203d3e20323731343638.roa (hash: dljiuCYXhhg6lLx6CT5BQpZIGReFYNyF6s4GTKceh30=)
                          2: 66F999D364628A7CC2634117B086F1A07B01449C.crl (hash: M0unvtnUeKi418Avt4ktmWiVZEHfcYuv63LzKCdyVJo=)
                          3: 3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa (hash: sIS9RY1ecTdvD3cP11ae//pbbo4bG/pCUxJovNsXfxE=)
                          4: 3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa (hash: GSqvt1e/X0nWj5mGfcI0mGHDvzcmKPnM08bWy6uTz5Q=)
                          5: 323830343a376266633a3a2f33322d3332203d3e20323731343638.roa (hash: UNSh3PLdpS0vX/ZzsNECa4NWSe1eJR2NAsea8g3rVU4=)
                          6: 3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa (hash: 3/vCP1xkuTw5BMGrf8ogQ2COZbgYr74Zv2VMlu/0A6E=)
                          7: 3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa (hash: c7A7o/Gw8UO1NElQqJButgFjMm7EWHXY7OaE2mhX6qM=)
                          8: 3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa (hash: Zm28+mTGmRsiJ+nnrq+BHy6pf5akOA83SIj0F3/9EXk=)
                          9: 3138312e3232342e31322e302f32322d3232203d3e20323731343638.roa (hash: wiQUuX7z10wbf5NZdqGmlSfoxzSuSOHbC9mxJxKJRds=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:99:92:64:21:0c:d8:8e:9c:47:f7:5e:20:f9:ca:f2:78:b8:49:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
        Validity
            Not Before: Mar 28 20:17:16 2025 GMT
            Not After : Mar 29 20:42:16 2025 GMT
        Subject: CN=AF89CB653AD307C2AF739D96E5F916B5E989753B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:82:66:ea:e7:4c:81:e2:38:03:52:15:b6:
                    b3:e3:dd:4b:bb:ea:9f:a3:0b:ca:a9:ad:0d:0c:d3:
                    7f:fb:ca:f4:b8:55:72:38:d0:23:67:69:b4:d4:d1:
                    e0:c3:1d:03:fc:55:2f:0b:44:bf:73:a1:75:de:62:
                    fa:68:53:fc:20:00:7c:3d:b3:a0:06:80:36:5a:c3:
                    c8:f7:8f:b0:91:42:84:9b:79:de:72:b8:f5:c8:c8:
                    3e:c3:cb:38:49:42:7f:1f:04:b4:e4:66:6f:da:14:
                    01:06:bd:c3:f7:55:8d:99:22:be:a0:36:65:da:42:
                    62:25:ee:6f:fa:45:0f:78:3d:df:c5:da:94:f2:24:
                    80:63:dd:18:33:f2:0a:43:66:28:4a:a2:f6:98:e5:
                    99:25:6f:a9:09:cf:67:0c:b5:10:e1:80:4e:b0:2e:
                    16:29:da:ef:73:56:39:9d:f1:4e:e0:c0:5f:c5:ea:
                    85:89:e6:0f:ea:ac:bc:1e:9b:b7:d2:4b:98:2d:1d:
                    82:eb:b2:5e:2d:34:02:bd:f3:f4:b0:18:ca:92:5b:
                    c8:41:08:0a:c7:5e:0a:ec:4a:75:7d:2f:cd:0e:fa:
                    a0:06:52:4b:20:02:d5:76:54:4e:0a:81:23:20:45:
                    00:1f:25:d9:08:c9:b6:05:97:92:af:b0:5e:3b:5d:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:89:CB:65:3A:D3:07:C2:AF:73:9D:96:E5:F9:16:B5:E9:89:75:3B
            X509v3 Authority Key Identifier:
                keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:93:1d:75:48:2f:53:c3:0e:b9:3e:a5:11:1f:b9:6f:3d:ad:
         d9:92:19:ec:36:e4:35:8a:a7:1f:a4:ae:79:20:7c:b0:15:5d:
         c6:ba:a1:80:a6:8a:e0:12:d9:af:92:85:63:f0:26:95:b5:8f:
         c2:e4:25:56:05:df:9a:7b:bb:5f:a4:9d:36:aa:b6:9a:1b:33:
         4f:b9:c8:b1:1a:d0:be:60:39:1c:b6:56:e2:e9:35:cf:7c:70:
         41:96:21:eb:77:a5:42:2f:fc:d6:b0:f3:e2:31:ba:14:e0:dd:
         aa:dd:b8:b2:77:d9:f1:db:f3:f9:5d:44:bb:ed:9b:e8:f6:da:
         dd:0e:03:34:ec:64:6e:4a:fa:74:c7:60:5d:21:ec:d4:01:85:
         54:e6:a9:c9:95:a6:23:30:3a:54:5d:78:5c:99:2f:e7:35:55:
         70:8b:9b:bb:9c:71:c7:d3:6b:2d:9c:4f:cb:d7:f6:19:7f:89:
         3e:0d:de:f5:ae:08:83:a6:ac:2c:94:c6:81:97:72:fa:4e:d9:
         40:c5:24:3d:b7:56:9e:70:7c:fe:1b:f3:9d:ca:b3:f4:d2:f7:
         77:2f:dd:5a:cc:10:4d:bb:37:00:c3:99:12:11:8c:b6:06:1b:
         46:f9:e6:de:53:05:83:5d:62:a8:e9:da:6a:81:e7:b7:7e:b5:
         40:0b:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:52 2025 by rpki-client