Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
File:                     FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft (raw, json)
Hash identifier:          QbkdZ+afB1Q13MgPCddVUsHbs+BvdWdygpA9gYif7cQ=
Subject key identifier:   BB:90:55:40:20:10:F8:DA:22:03:A5:74:D8:30:32:B6:BD:A9:2D:5E
Authority key identifier: FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Certificate issuer:       /CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
Certificate serial:       703823E45E12A0DE4BFF9825AA1F9B3EB397DF34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
Manifest number:          0163
Signing time:             Sat 29 Mar 2025 08:36:15 +0000
Manifest this update:     Sat 29 Mar 2025 08:31:15 +0000
Manifest next update:     Sun 30 Mar 2025 11:43:15 +0000
Files and hashes:         1: 323830343a316633633a3a2f33362d3336203d3e203532393130.roa (hash: pK0vxGlvaotsyQD+C1TPMWLey8rpIGm4nTwAOcPsGT8=)
                          2: 3138362e3235312e33382e302f32342d3234203d3e203532393130.roa (hash: 8DeICP4FF3jQujyak6gJWVw7WL3y+fZYiXM99bQQofQ=)
                          3: FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl (hash: xUqM+067SjpO20KJUEm1+w3dc7Q/0NNNs6TiZHwAtaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:38:23:e4:5e:12:a0:de:4b:ff:98:25:aa:1f:9b:3e:b3:97:df:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Validity
            Not Before: Mar 29 08:31:15 2025 GMT
            Not After : Mar 30 11:43:15 2025 GMT
        Subject: CN=BB9055402010F8DA2203A574D83032B6BDA92D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:2a:c9:bf:bf:1b:2f:5d:c3:e7:80:a6:0b:
                    74:7d:f3:59:0b:b7:8d:86:05:7a:ab:19:ae:b0:f5:
                    15:fe:1d:1b:23:2a:c9:8e:af:3c:cf:03:b3:78:b4:
                    98:16:af:10:64:57:17:04:04:b4:ad:35:5a:8b:48:
                    c3:58:34:75:9a:ae:69:26:fb:19:19:9b:0c:6d:96:
                    24:e5:54:65:84:51:12:f3:aa:4d:ef:9e:1b:ed:55:
                    c9:3a:ba:89:3f:b4:87:f5:2b:b0:2f:f0:c6:23:a2:
                    96:43:1d:77:1b:ee:af:ce:a6:b3:7f:5e:5f:e8:21:
                    37:22:eb:9c:be:fa:86:16:6c:0c:dd:ec:1a:46:b3:
                    cf:a9:c9:e4:74:1d:7e:d0:fa:f9:9a:9b:66:b4:73:
                    2f:00:f1:b0:ea:62:63:da:e8:06:0f:f7:83:8c:61:
                    fb:7f:7d:64:06:89:cb:fe:63:78:44:79:76:bd:09:
                    73:81:2c:0d:c7:8f:94:89:38:cf:18:18:04:78:ef:
                    15:c4:08:3e:88:bd:4e:b3:96:b7:54:33:d2:f9:b4:
                    90:9d:b3:a5:f7:6b:f4:8a:5f:43:9d:88:73:51:32:
                    1d:e8:d8:fc:c2:2d:a9:24:e0:2e:0b:5d:ce:56:31:
                    fe:a1:28:b8:49:c1:60:96:1a:f2:5e:f1:3e:03:67:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:90:55:40:20:10:F8:DA:22:03:A5:74:D8:30:32:B6:BD:A9:2D:5E
            X509v3 Authority Key Identifier:
                keyid:FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a6:93:c9:68:7a:dd:74:24:83:22:87:7f:52:f3:11:d5:66:
         7d:43:28:7e:88:d9:2b:09:3d:d8:34:16:a6:71:d6:ef:ea:1d:
         76:ec:4d:de:21:6d:c9:4b:f2:99:e6:e3:b1:fb:8b:21:87:8d:
         db:73:c9:a0:f9:b4:b1:12:16:48:ad:c3:d2:32:96:4a:96:00:
         83:c2:ff:e9:94:32:15:e0:db:e7:7e:fc:44:57:0c:0c:5f:c1:
         ee:05:88:a1:cc:6d:42:d6:ae:3f:22:69:29:19:92:79:95:91:
         81:3c:1f:33:4b:bc:51:4c:24:d9:6d:d9:c0:32:76:ce:d8:90:
         cc:d5:b5:27:11:39:21:4e:21:15:64:24:42:85:03:ca:89:61:
         fe:83:1d:76:85:b9:53:82:3e:88:57:21:09:e4:03:4b:1a:64:
         e9:e9:ba:c2:f2:84:6d:97:c9:1b:bc:2f:57:c7:d5:b5:1e:bb:
         ba:67:58:31:4d:ce:13:64:69:0f:bc:03:03:c0:89:d1:ee:61:
         22:12:17:0f:eb:09:69:c9:1c:56:7c:77:67:77:b9:f8:81:49:
         20:98:07:9c:68:64:d4:89:6c:a9:38:5f:e0:fb:e4:35:c8:38:
         d7:45:0d:d6:71:76:58:b2:32:c9:34:56:03:56:86:82:0f:27:
         d6:56:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:39 2025 by rpki-client