Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft
File:                     DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft (raw, json)
Hash identifier:          ivE2dyewn74MpQzEPEP5rD0wfP+3VDmMBFto3wpTpQo=
Subject key identifier:   19:3E:E7:67:DA:4A:5F:11:EF:F6:8D:BA:FF:0C:5A:23:8E:9B:6C:0D
Authority key identifier: DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA
Certificate issuer:       /CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
Certificate serial:       0C8DC3AFCE42EADCEFB1ABD7843B7AFC2F15415B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft
Manifest number:          1D
Signing time:             Fri 30 May 2025 19:55:10 +0000
Manifest this update:     Fri 30 May 2025 19:50:10 +0000
Manifest next update:     Sat 31 May 2025 21:45:10 +0000
Files and hashes:         1: 323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (hash: iOYyO2C1e9u69gfJ9XxFj3ua/3PCauvHSVjH/O2Wr14=)
                          2: 3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (hash: MSyuY/Q9CljZU/PvVFUFbwW3lDkA2O4OOu/MO9mYCIU=)
                          3: DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl (hash: wTzam7tnCkQBs9rcM6uT7s/kFjUdRXfiJ0NopSnTEcA=)
                          4: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (hash: /lOnITnsBWnxNA6epV89MrMQ7FB0dCBnu1J6TgpbcsQ=)
                          5: 3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (hash: y5559hsrv3ev4gkLxD/ZTHcT/AvR/D459zxtw1U5ixU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8d:c3:af:ce:42:ea:dc:ef:b1:ab:d7:84:3b:7a:fc:2f:15:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
        Validity
            Not Before: May 30 19:50:10 2025 GMT
            Not After : May 31 21:45:10 2025 GMT
        Subject: CN=193EE767DA4A5F11EFF68DBAFF0C5A238E9B6C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:2e:48:25:9e:29:bc:4e:62:c2:55:b3:1f:
                    68:c9:f2:b4:c7:a1:e0:8e:e3:7c:d6:79:07:ea:68:
                    eb:0f:24:4a:20:cc:4e:07:e8:8f:d1:7c:ee:4e:40:
                    75:0f:97:77:37:29:46:f1:cc:f1:06:e6:95:f7:89:
                    65:7f:5c:de:6f:e3:99:04:89:0c:06:32:f4:4f:04:
                    1d:a9:5e:ef:8f:05:17:65:5a:f2:3a:cc:ce:ba:ce:
                    a5:35:d1:60:4f:5d:cb:cf:af:1d:0e:c9:a0:03:62:
                    af:75:6f:41:9a:fe:8c:40:bf:10:21:c3:7d:30:30:
                    ad:4d:04:59:fe:d4:ef:65:60:88:1a:76:e5:93:a1:
                    52:5f:95:15:0f:cc:ad:e4:63:5a:6c:5c:76:9b:d6:
                    94:f1:93:e0:7c:e5:9a:c1:4d:95:c6:24:33:2a:1a:
                    1d:a0:23:aa:62:75:0d:6f:a0:70:d1:5c:3c:62:1c:
                    65:c7:b7:70:4c:fa:ad:20:de:e6:03:b8:60:17:24:
                    35:5e:99:19:b6:2a:38:f9:f1:c3:7d:39:c2:f9:42:
                    af:ba:1f:d5:e0:7e:25:13:67:72:fa:1e:a3:be:18:
                    95:d6:b6:79:76:67:f1:6b:65:74:9f:8a:5f:8e:69:
                    1a:ef:07:d3:52:01:c9:22:25:e4:2e:3a:6f:24:e8:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:E7:67:DA:4A:5F:11:EF:F6:8D:BA:FF:0C:5A:23:8E:9B:6C:0D
            X509v3 Authority Key Identifier:
                keyid:DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:46:25:cf:a0:a0:84:12:48:91:d4:62:17:3c:e8:da:7b:ec:
         02:af:08:3c:99:7a:d3:fa:9a:12:df:8c:79:fd:6d:8e:e6:26:
         ec:f3:7a:b9:f1:9e:50:ea:43:e6:7f:8a:63:59:00:22:74:ab:
         3a:c9:44:45:56:e1:28:98:eb:49:56:4f:cd:18:c9:be:06:f4:
         d2:e7:3c:1f:90:d6:87:6d:19:50:d3:68:7c:a5:bd:97:2f:81:
         4a:af:40:7d:41:dc:6e:45:b8:24:b5:03:81:9f:f3:5a:99:ac:
         62:d5:d8:e6:df:4a:a7:07:8b:3d:07:7b:22:d3:48:bc:6b:cc:
         6e:7d:2d:56:31:5d:a0:45:3b:1c:f0:71:a9:07:9e:17:52:50:
         79:65:eb:eb:ed:ec:6b:7d:af:bb:27:1f:1e:89:42:65:4c:94:
         67:c5:e7:1f:d2:d8:81:75:98:c7:ff:b6:6c:43:45:96:7a:0e:
         d8:79:8c:9b:08:88:58:24:76:8c:d3:09:dd:d4:6b:08:10:17:
         97:3b:39:0f:eb:23:0d:07:15:3e:43:cf:98:cd:8b:0d:12:5f:
         a2:f3:61:d8:2d:23:4a:cb:1c:b3:17:de:6a:f6:31:96:13:29:
         47:90:26:a8:50:ff:29:d3:9a:78:0c:59:16:15:bf:95:48:7e:
         c4:72:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:50:26 2025 by rpki-client