Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft
File:                     0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft (raw, json)
Hash identifier:          JXqa3JbKxN/G/RTqIbVXP8XypZ9kEYTYKG4aU/puRgI=
Subject key identifier:   5D:25:86:89:49:25:FE:5E:19:F3:DB:79:7D:BD:98:27:EF:92:15:4E
Authority key identifier: 09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED
Certificate issuer:       /CN=0911F3F0D22D3DF877B191C4EAD82C266C7FABED
Certificate serial:       03D2DC90A60B2A32E3DBF16D3E8C9321EB16630D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft
Manifest number:          016A
Signing time:             Thu 02 Jan 2025 12:37:37 +0000
Manifest this update:     Thu 02 Jan 2025 12:32:37 +0000
Manifest next update:     Fri 03 Jan 2025 15:16:37 +0000
Files and hashes:         1: 3137302e302e36302e302f32322d3232203d3e20323635303038.roa (hash: IDfux9Shw3FGBeg1ri4XgU34IriU+K+GpwS8KblgNtQ=)
                          2: 3137302e302e36302e302f32332d3233203d3e20323635303038.roa (hash: DXxE3EoDYNrpfZjEA9F52NT/fpEAE4uQKr6gaPiBQgw=)
                          3: 323830343a333135383a383030303a3a2f33332d3333203d3e20323635303038.roa (hash: GmPgnTU93HQCEkVvk5o1zrPkYsBiQ0knUNLhq9BpjB0=)
                          4: 3137302e302e36322e302f32332d3233203d3e20323635303038.roa (hash: hHdR1Y3RICXLRAPS+BJ1ZPYEQIclR3Vp8uQsJeRMU2g=)
                          5: 3137302e302e36332e302f32342d3234203d3e20323635303038.roa (hash: Eu2kiPzZziT+tMwcewBMukjYArFh8ev4GomDor5bLeE=)
                          6: 323830343a333135383a3a2f33332d3333203d3e20323635303038.roa (hash: yoVOAVeHQj9t4mcpzIlCQP+i09Wx1CpsQT5hmakcSlY=)
                          7: 0911F3F0D22D3DF877B191C4EAD82C266C7FABED.crl (hash: Tcrj+GSXD9UqSalEIEChYxR0a+E/yLVwzzs2VYMv8XA=)
                          8: 323830343a333135383a3a2f33322d3332203d3e20323635303038.roa (hash: VufdkiggSqgqXon/XTVukYGYNRjhVOzlnQy5aGvQT7g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d2:dc:90:a6:0b:2a:32:e3:db:f1:6d:3e:8c:93:21:eb:16:63:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0911F3F0D22D3DF877B191C4EAD82C266C7FABED
        Validity
            Not Before: Jan  2 12:32:37 2025 GMT
            Not After : Jan  3 15:16:37 2025 GMT
        Subject: CN=5D2586894925FE5E19F3DB797DBD9827EF92154E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:20:15:0e:a8:f5:6c:1b:b1:54:91:84:0f:
                    15:42:07:d3:52:95:1b:f4:84:7b:83:5e:53:c5:e1:
                    7f:b2:9d:ce:05:63:9a:8e:c3:f9:16:48:b6:b8:cd:
                    53:a6:08:b5:7d:64:17:29:fa:9d:ca:8b:fa:a9:b2:
                    8d:a9:80:9e:3b:0a:9e:30:93:50:16:be:7d:9f:ac:
                    2b:b3:0d:b8:db:45:6a:cb:ae:dc:71:aa:06:0a:9d:
                    fb:57:f3:1b:77:cf:c4:00:b2:7f:3c:02:4b:3c:06:
                    f4:14:ac:0a:f5:7b:d1:fc:c1:f1:91:70:1e:18:c8:
                    31:91:9f:29:1d:2b:1c:b4:13:67:48:c1:7a:24:7c:
                    8f:9d:9b:f6:07:21:a2:20:7d:e9:c7:88:eb:4d:b3:
                    d9:14:c1:5c:89:37:be:6d:1d:e3:9a:ea:0c:22:60:
                    f4:61:e0:73:cb:e6:c1:f4:93:bc:77:ea:54:c5:57:
                    47:8f:bd:39:d6:e4:cb:c8:8d:35:8c:81:f7:a0:94:
                    30:be:39:8b:1d:5a:73:bc:25:68:89:cc:c5:c5:71:
                    42:23:ec:ea:08:18:e3:74:4e:f0:66:71:3c:87:8f:
                    f4:61:d6:fd:05:99:47:e3:d2:88:5c:a2:6e:1d:6f:
                    51:75:1f:9b:e5:dc:2f:f8:21:9c:ad:6c:c0:34:e7:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:25:86:89:49:25:FE:5E:19:F3:DB:79:7D:BD:98:27:EF:92:15:4E
            X509v3 Authority Key Identifier:
                keyid:09:11:F3:F0:D2:2D:3D:F8:77:B1:91:C4:EA:D8:2C:26:6C:7F:AB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/1/0911F3F0D22D3DF877B191C4EAD82C266C7FABED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:19:90:4f:f4:6d:48:b4:29:48:e1:0f:bc:fe:90:66:30:
         e2:b3:cf:56:c5:8f:c9:6e:5e:e8:c7:05:a7:7c:64:ae:ec:18:
         e3:9e:04:3c:a3:23:cc:60:73:76:88:c1:ce:7f:90:22:9d:f6:
         34:35:75:7b:a0:6e:a0:34:59:71:c8:f5:42:ea:e9:ff:f7:59:
         eb:a8:28:b8:22:79:cc:8f:21:7c:91:5e:67:9f:fe:4d:11:e8:
         3f:60:9f:87:fc:71:3a:cd:7c:ad:9b:dd:0c:d6:8a:38:0f:a5:
         25:0f:30:00:41:1f:b6:d6:da:89:8f:f3:7f:40:93:5f:8e:78:
         e9:f9:19:e1:16:bb:b1:38:64:a3:28:b7:40:06:77:ed:b5:25:
         fc:86:de:a6:d8:63:15:01:0a:70:9e:1b:4c:ac:ee:11:45:20:
         45:7b:28:65:d9:74:af:03:93:ec:28:f9:b5:9b:17:28:1c:e1:
         71:d5:31:a4:0e:b7:21:32:0d:96:c0:cf:aa:fb:1b:17:d6:d6:
         98:fb:41:84:8a:b0:57:29:ce:12:c3:99:59:a8:ef:25:e2:71:
         b6:a7:ee:a2:f2:68:41:11:6a:e3:4a:cf:aa:03:cf:4b:75:99:
         24:89:1a:c4:3d:a8:ce:1c:4a:74:d0:05:11:18:04:8f:05:e9:
         36:59:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:34 2025 by rpki-client