Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/891DE37D11D1861D3136E0F4521059CA698EBF78.mft
File:                     891DE37D11D1861D3136E0F4521059CA698EBF78.mft (raw, json)
Hash identifier:          GKQlTJM1KHPE4N8fG40GqALWlYqT7x1ytKEL9IfNRoQ=
Subject key identifier:   E1:37:4C:87:C4:A5:6C:2A:FC:C0:11:09:B0:7A:17:A3:CE:74:B6:DE
Authority key identifier: 89:1D:E3:7D:11:D1:86:1D:31:36:E0:F4:52:10:59:CA:69:8E:BF:78
Certificate issuer:       /CN=891DE37D11D1861D3136E0F4521059CA698EBF78
Certificate serial:       678E0A570BC4AE91B4C7B09FB05B30CACAC303E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891DE37D11D1861D3136E0F4521059CA698EBF78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/891DE37D11D1861D3136E0F4521059CA698EBF78.mft
Manifest number:          06
Signing time:             Fri 21 Mar 2025 00:48:42 +0000
Manifest this update:     Fri 21 Mar 2025 00:43:42 +0000
Manifest next update:     Sat 22 Mar 2025 02:39:42 +0000
Files and hashes:         1: 323830343a373934303a3a2f33322d3334203d3e20323731323934.roa (hash: QU3/4Ti8mMvc9SujuzqbyRnkPv3zcx6SCJpWirjTR8A=)
                          2: 891DE37D11D1861D3136E0F4521059CA698EBF78.crl (hash: tOkve1ZMp7dnVlwLWyshV4Ph0q+/4t47gWKTwfbFDfg=)
                          3: 3230312e3232312e3131362e302f32322d3234203d3e20323731323934.roa (hash: DEREAVeZvjDvT5HcEuaG9GEWjThIZv6Mr+HooWvBXjY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8e:0a:57:0b:c4:ae:91:b4:c7:b0:9f:b0:5b:30:ca:ca:c3:03:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891DE37D11D1861D3136E0F4521059CA698EBF78
        Validity
            Not Before: Mar 21 00:43:42 2025 GMT
            Not After : Mar 22 02:39:42 2025 GMT
        Subject: CN=E1374C87C4A56C2AFCC01109B07A17A3CE74B6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:f4:eb:3d:52:44:fc:a5:81:6d:2b:f1:6d:
                    f6:5c:cd:c2:87:fc:da:8c:7f:79:71:20:2e:1f:26:
                    52:bb:d4:ba:c7:e5:a1:bd:d2:c7:a7:9d:1c:c8:7b:
                    80:4b:de:f9:4f:f7:87:b5:f2:10:ab:14:1f:7a:21:
                    49:db:ba:e5:e9:5c:97:ee:59:17:f0:ca:2b:d5:4d:
                    6d:a4:a6:c7:20:5c:98:8c:fc:15:9a:97:97:ef:68:
                    4b:b3:24:73:1b:ca:00:17:28:7f:d0:bb:64:ce:59:
                    58:28:84:7d:e5:f1:c2:04:57:1e:87:94:35:e6:86:
                    d0:52:b2:c8:c5:57:db:01:bd:30:71:9c:57:f5:f5:
                    a7:92:93:8a:7d:ed:57:06:01:f9:cb:cd:73:2f:dc:
                    79:bc:37:b5:50:f9:b6:9d:a8:4b:5e:85:f8:d0:2c:
                    38:f6:81:1b:88:58:50:58:a5:9d:06:1d:ce:29:e8:
                    dc:09:f9:e2:6f:04:8f:84:7c:7a:11:81:26:72:b5:
                    26:86:c6:b2:48:5e:07:16:fe:75:ff:68:4f:3f:50:
                    62:97:6f:bd:2e:40:1c:ec:6d:25:c4:93:81:9b:ce:
                    f8:af:eb:2f:a7:8f:b4:a9:d0:47:07:20:6a:b6:73:
                    32:e7:f5:84:8c:1a:16:4c:d6:ce:7d:71:da:16:59:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:37:4C:87:C4:A5:6C:2A:FC:C0:11:09:B0:7A:17:A3:CE:74:B6:DE
            X509v3 Authority Key Identifier:
                keyid:89:1D:E3:7D:11:D1:86:1D:31:36:E0:F4:52:10:59:CA:69:8E:BF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/891DE37D11D1861D3136E0F4521059CA698EBF78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891DE37D11D1861D3136E0F4521059CA698EBF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/891DE37D11D1861D3136E0F4521059CA698EBF78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cc:0b:2e:8f:43:85:46:c7:77:30:7b:75:01:1a:e1:d9:5e:
         a5:93:e2:8c:e0:4c:0a:4f:78:3c:11:9f:1e:f1:9a:60:ac:74:
         79:75:ab:37:a1:95:59:2d:20:80:09:0c:8f:96:f9:57:19:34:
         c0:41:79:d0:18:4d:c9:a2:47:fb:8d:cc:11:32:fe:01:f2:7e:
         59:db:ce:e9:44:39:ef:38:1e:9f:3c:2c:af:00:ea:6a:f8:fa:
         5e:c6:be:64:df:ea:36:7c:20:7a:eb:5a:97:67:dd:7e:68:f0:
         ef:5b:91:59:c7:e8:8d:11:88:36:34:f9:dc:42:a2:61:af:97:
         c6:76:c7:58:63:de:c1:07:3b:d4:77:ff:90:58:c9:48:6b:35:
         6f:61:0a:f6:50:5a:5e:6a:2c:46:38:60:77:04:61:b2:a3:f6:
         4a:16:00:d8:ae:4b:6d:5d:dd:21:6f:84:a5:9f:1e:94:ff:3c:
         cd:d8:b4:67:d4:7b:ba:19:74:1e:bb:35:cf:ea:bb:47:5c:4c:
         c2:d5:76:36:03:04:cc:78:09:4d:86:32:18:de:51:3c:72:d4:
         de:12:be:9b:6d:64:eb:f3:d3:87:b8:58:85:fa:1b:ff:bf:d2:
         08:9a:1d:89:e4:4c:12:2e:7d:1c:35:82:c5:f3:f6:f4:74:9a:
         86:6c:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:42 2025 by rpki-client