Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
File:                     358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft (raw, json)
Hash identifier:          3cgFYMUPqgFzArqgitgQMAtZT3elvbaYX6dGwX7kAqk=
Subject key identifier:   D8:24:64:34:79:00:07:3D:5B:02:63:71:10:F2:59:07:4C:3B:6C:9A
Authority key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
Certificate issuer:       /CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Certificate serial:       0DE96E87645401975A72822F4CF7D7351EEFA611
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
Manifest number:          01E3
Signing time:             Sat 29 Mar 2025 10:46:58 +0000
Manifest this update:     Sat 29 Mar 2025 10:41:58 +0000
Manifest next update:     Sun 30 Mar 2025 12:18:58 +0000
Files and hashes:         1: 34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa (hash: n+NKrmH0iKMlaup99tiTLUbAku7VQx5f+Ustl0keBdw=)
                          2: 323830343a356335303a3a2f33322d313238203d3e20323638393031.roa (hash: XtMCYKKNy3smVa5tNSvF7uBud0PzsUGyJwyoHvhmFCc=)
                          3: 358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl (hash: BFc8dd5R4tiOTQH3OcXiCKCjo7y54/Fjw1UY1ROtmb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:6e:87:64:54:01:97:5a:72:82:2f:4c:f7:d7:35:1e:ef:a6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
        Validity
            Not Before: Mar 29 10:41:58 2025 GMT
            Not After : Mar 30 12:18:58 2025 GMT
        Subject: CN=D82464347900073D5B02637110F259074C3B6C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:48:6e:c2:06:29:d6:a6:4c:22:c3:aa:e9:c2:
                    7c:34:54:5e:ab:a7:15:96:d6:42:dd:5c:2a:f2:c4:
                    e5:94:9c:fb:13:a0:75:9c:39:a5:85:ce:f7:dc:66:
                    18:62:fd:07:96:43:55:53:88:27:b8:96:14:55:4d:
                    77:a4:d9:98:d8:86:a7:b8:2e:24:67:1d:f7:95:0f:
                    a3:06:c8:b4:de:48:7e:ce:7e:14:eb:f5:51:33:04:
                    43:77:90:99:42:db:09:3b:c0:97:a1:b2:a0:59:8e:
                    4f:38:6d:ba:81:4a:c0:fa:86:23:71:fc:46:de:91:
                    4f:bb:44:dd:d8:f1:93:ad:ee:ee:64:57:a8:43:01:
                    58:5e:e8:1b:4a:8a:6f:4c:ae:d5:ae:fd:6e:74:da:
                    88:1b:3f:ba:00:6d:a2:fa:84:66:50:2c:53:3a:7c:
                    f9:c7:57:ff:fe:36:9c:bd:5a:3d:06:82:6b:46:6e:
                    b1:75:ba:f8:9b:83:b1:be:dd:69:2a:dc:9a:9a:c7:
                    91:7a:3d:cd:1b:d8:c7:4b:27:f6:0c:95:05:dc:79:
                    28:25:6a:5b:c6:e9:05:24:fc:7e:68:66:8f:28:9d:
                    d1:7c:c2:ea:c4:da:5a:10:b5:83:b2:1a:ff:ac:b2:
                    b8:ed:c3:b1:7b:95:21:14:c8:29:e3:68:2b:6c:b3:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:24:64:34:79:00:07:3D:5B:02:63:71:10:F2:59:07:4C:3B:6C:9A
            X509v3 Authority Key Identifier:
                keyid:35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:ee:4e:65:64:8c:36:51:9c:ed:d8:4f:31:26:21:ad:56:
         52:a5:5a:3e:7e:03:6b:d0:4f:46:e2:fd:ca:23:8f:40:e2:bf:
         c6:54:27:5a:d0:5c:7f:f2:4a:72:e3:6d:76:12:3b:3a:5e:1e:
         b5:a9:6c:de:cb:07:81:a3:a8:41:13:2a:3d:ac:af:2a:a6:98:
         28:2f:fd:c0:05:f6:cd:a8:e2:3e:0e:00:b8:bc:6e:1c:89:88:
         8f:d0:43:d7:38:a1:5f:70:e7:9f:7e:47:f4:04:06:53:cf:b4:
         1e:0a:69:50:60:8d:32:9b:55:46:18:05:32:91:3c:71:85:f2:
         25:24:09:1e:27:c4:7e:aa:b9:c0:91:ac:9f:09:c9:f0:c7:41:
         e5:a4:40:7c:f4:64:ee:ed:53:fc:f5:a5:1e:eb:a3:27:e4:06:
         ee:65:53:81:90:a8:b0:42:59:4f:7b:94:3d:07:ff:f9:f8:2e:
         a8:b6:1b:15:85:e0:97:2c:3a:6e:fa:64:d4:3a:75:48:bb:83:
         a0:ae:f2:39:fd:5d:b5:01:f9:43:c7:fc:d0:78:df:cb:b3:19:
         10:68:35:b0:d4:11:2a:3f:be:11:24:f4:24:f8:ed:a1:cc:2a:
         d6:60:89:c6:87:0d:f6:eb:7c:01:72:b4:5f:3a:d8:fa:2e:0b:
         18:78:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:42 2025 by rpki-client