Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
File:                     A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft (raw, json)
Hash identifier:          s8hSuYuIUtdS6lBiDFlPs0tM2NyidhMXYHXwBmG6m9w=
Subject key identifier:   09:45:9D:42:F1:55:6B:44:54:FD:5E:54:B7:77:17:39:4F:97:97:87
Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
Certificate issuer:       /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
Certificate serial:       2ECE1DB5ECC31C66B3C42233AC69A7ED888B0C5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft
Manifest number:          70
Signing time:             Sat 29 Mar 2025 03:50:57 +0000
Manifest this update:     Sat 29 Mar 2025 03:45:57 +0000
Manifest next update:     Sun 30 Mar 2025 06:36:57 +0000
Files and hashes:         1: A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl (hash: gqB7diyeywdAiuoGWGr5jAi2YrVwmrrSj4rH5fz3SWM=)
                          2: 323830343a373865633a313030303a3a2f33362d3336203d3e20323731323734.roa (hash: oLmLFNGFzVEdnh4c4itLZP17aZpEt3QNy5IaojB/SV4=)
                          3: 323830343a373865633a3a2f33322d3332203d3e20323731323734.roa (hash: 2W2KSo/Abj/XorQFmTqJcenbjW+CL3gGoaAjYN3R7js=)
                          4: 323830343a373865633a323030303a3a2f33362d3336203d3e20323731323734.roa (hash: /GVfblh8G4/htSymp0DWV+ukSlnZu4UwALGlIKuOsz0=)
                          5: 3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa (hash: Q3yHgRlmtEhdQ8yepDv0S7EpKfArRnJDjYInZLcsL7Y=)
                          6: 323830343a373865633a333030303a3a2f33362d3336203d3e20323731323734.roa (hash: itszwuEmuIFWcA7xqcmDhV3dc8Ptj1VPtF9iuMZi9H0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:1d:b5:ec:c3:1c:66:b3:c4:22:33:ac:69:a7:ed:88:8b:0c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
        Validity
            Not Before: Mar 29 03:45:57 2025 GMT
            Not After : Mar 30 06:36:57 2025 GMT
        Subject: CN=09459D42F1556B4454FD5E54B77717394F979787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:d2:7c:07:72:35:6f:b2:a5:f5:fd:4d:62:
                    92:1b:11:62:76:36:c8:b7:ed:83:28:f3:71:4c:00:
                    7a:52:f8:b5:17:14:ff:df:f0:4f:6f:8f:c9:25:47:
                    1d:b9:60:ed:30:89:8e:f0:21:3d:28:ce:51:a2:cd:
                    8e:fe:1c:44:d2:87:02:7c:90:bc:0f:83:15:5a:e0:
                    8e:61:8c:03:cc:29:b4:76:29:60:6b:0f:c9:bc:ec:
                    de:e8:8a:c5:43:7b:bc:2e:6e:a5:60:44:a2:16:a2:
                    65:31:66:ca:36:ac:40:b3:97:4b:26:b5:ca:67:e0:
                    d9:02:2d:1b:43:58:21:97:25:15:60:9e:d6:56:80:
                    dc:d1:47:b3:4e:56:0e:10:00:e2:9c:12:36:3f:28:
                    b7:94:c8:87:8b:bc:6f:27:92:3e:25:5b:9b:65:0d:
                    53:f7:64:f2:60:d3:07:ca:1a:58:da:6c:83:2e:cc:
                    bd:e1:f1:fb:c3:bd:c1:96:91:01:f5:b7:be:1f:8b:
                    ba:54:ea:ca:b7:c5:32:c2:06:d6:f3:eb:8d:8e:7f:
                    29:4e:ff:43:3c:b5:c1:5b:19:96:31:c9:14:6d:ea:
                    9a:ef:56:45:cc:29:71:e2:76:01:ba:b3:4f:48:da:
                    24:0f:b4:c4:cd:52:47:60:67:74:68:d5:d5:5b:6f:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:45:9D:42:F1:55:6B:44:54:FD:5E:54:B7:77:17:39:4F:97:97:87
            X509v3 Authority Key Identifier:
                keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f7:3b:99:cd:4a:88:10:5d:60:ae:86:ac:c2:f7:62:4c:9f:
         e5:58:66:97:cd:96:58:b9:6f:57:36:90:e4:6c:90:68:ef:15:
         21:3f:e3:c9:7b:c4:3d:cc:05:c8:6b:a7:43:9e:e8:84:1c:0a:
         6f:37:05:37:d7:2a:4b:87:29:7d:7b:c6:25:f8:27:e8:28:70:
         49:b2:d4:53:68:f8:c8:27:ab:ab:c3:11:f1:a2:64:27:28:57:
         fb:a4:01:5c:fc:34:3a:b6:8c:a6:48:62:22:c8:e0:e7:9d:da:
         bb:ca:31:b8:49:83:78:fc:ed:a1:df:db:3e:d4:cf:74:27:16:
         4b:d0:86:7b:c5:74:40:bd:89:e8:89:9f:51:b8:8f:60:55:72:
         ff:57:31:38:f6:d4:9e:4f:c1:56:01:a5:75:d6:6e:89:ca:ad:
         8e:19:9b:82:78:1b:e7:e7:d5:cf:6a:a8:02:f3:97:d7:e3:7c:
         3e:2d:90:8f:f3:68:c2:9b:61:96:5c:c7:7e:69:b9:1e:0e:31:
         f8:73:72:16:e9:6e:cc:49:4e:f2:d5:36:d7:bf:14:94:e9:63:
         e3:e9:67:b2:64:55:e6:24:80:11:73:1b:b0:c7:1a:56:75:0c:
         91:bf:aa:90:7f:fd:59:4e:63:68:4b:1f:94:37:36:fa:18:c7:
         a1:ec:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:07:29 2025 by rpki-client