Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
File:                     D7277992174B249B4D551A37C49F2DD4D7AA9968.mft (raw, json)
Hash identifier:          i6t68txv6QP4knjRU3mr1Gtu8tpjkZMN1bjgKrDuYZE=
Subject key identifier:   7E:FE:3E:D1:C8:A5:66:F6:72:5D:07:AC:AA:96:84:E6:A1:63:D7:88
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Certificate issuer:       /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial:       691393CE9F62BFB4CE634595F49806B3CBFC1904
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
Manifest number:          01DD
Signing time:             Sat 29 Mar 2025 09:49:29 +0000
Manifest this update:     Sat 29 Mar 2025 09:44:29 +0000
Manifest next update:     Sun 30 Mar 2025 12:22:29 +0000
Files and hashes:         1: 34352e3139312e3235322e302f32322d3232203d3e20323639363939.roa (hash: 7lAsXimThfqIz6KBqcW9+mqm2MMvoLAxz+5duNnsoEs=)
                          2: 34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa (hash: 4L/5MtN5jeiGBii2778zcvKJU5mjlA9WUvgPp7+fk9w=)
                          3: 34352e3139312e3235342e302f32342d3234203d3e20323639363939.roa (hash: PkzdwBYi9mFQQyIVpRZHpRjBeMfXUZut+eLb59w4WIg=)
                          4: 34352e3139312e3235322e302f32332d3233203d3e20323639363939.roa (hash: OIJkM8d/cnwFeSEBOXfnsT0g0BNmTiaMVw2KNN9gg2I=)
                          5: 34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa (hash: sXd+W07Hem9JPI5Cu9pKKzrsmdxRJlWP9ZrBBBR6SEg=)
                          6: 323830343a363838383a3a2f33322d3332203d3e20323639363939.roa (hash: iNX2rtFmvJxhAM/rw/6Smp97ltcEgNgwsDj7qZ7twq4=)
                          7: D7277992174B249B4D551A37C49F2DD4D7AA9968.crl (hash: QMhBcRTetjA2+BjET70zaX6KC+CNpfDL2hswHlq3j6M=)
                          8: 34352e3139312e3235322e302f32342d3234203d3e20323639363939.roa (hash: tkr1l4rzijOVDnZAIVIJWxY0IajW32exEAtsW96zKLY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:13:93:ce:9f:62:bf:b4:ce:63:45:95:f4:98:06:b3:cb:fc:19:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
        Validity
            Not Before: Mar 29 09:44:29 2025 GMT
            Not After : Mar 30 12:22:29 2025 GMT
        Subject: CN=7EFE3ED1C8A566F6725D07ACAA9684E6A163D788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:14:32:e0:bf:54:9f:b3:3f:19:3b:fb:53:
                    4b:17:ab:e3:ad:e9:f3:8d:99:81:12:c3:98:0d:d5:
                    9a:2f:81:9c:f0:13:3d:59:d0:cc:11:a7:07:a3:ba:
                    d9:ea:0a:45:ab:d6:48:c4:0c:60:76:d1:5a:37:cd:
                    d4:d6:f2:54:cb:86:44:94:0a:f5:7c:5e:ee:07:02:
                    a4:15:0d:09:32:fb:1c:a2:e5:cb:03:57:66:c0:e6:
                    e9:d5:7f:34:3f:21:72:cd:da:81:f2:27:c0:ba:87:
                    1b:b8:58:63:ce:d1:ff:3b:a5:93:c1:a9:5d:6d:47:
                    2a:60:9e:e8:a1:42:3d:6e:65:17:f8:9d:7e:7e:6d:
                    81:83:d9:2f:40:c0:1f:92:44:fa:48:d1:3a:38:c5:
                    43:1d:65:ba:ee:7d:a2:cf:99:3a:1d:8a:8b:19:a7:
                    34:eb:c5:82:b6:bf:ef:6f:c3:c4:ce:97:7a:32:f2:
                    00:24:c7:17:d0:88:95:61:2e:93:36:cc:3e:71:c2:
                    86:e6:c3:92:00:d9:dc:0c:a9:93:e8:89:3b:d0:12:
                    c6:13:d0:f6:d3:7e:88:69:94:4e:52:22:7f:50:5f:
                    64:22:49:76:e0:b7:42:f0:d6:59:0e:46:03:37:09:
                    5f:e7:ca:4c:18:43:f0:91:00:1d:d9:b0:5a:e8:73:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FE:3E:D1:C8:A5:66:F6:72:5D:07:AC:AA:96:84:E6:A1:63:D7:88
            X509v3 Authority Key Identifier:
                keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:e1:19:79:4c:0a:87:7e:53:5a:ea:49:8b:0f:a5:60:8d:
         a3:95:b1:eb:25:f6:b7:df:0f:aa:5c:cd:4c:58:13:22:60:53:
         6f:ce:72:4c:cf:4e:8e:42:e8:dd:e6:c2:e1:71:69:27:f4:07:
         88:a1:a6:f2:86:35:5a:2a:03:77:00:58:c2:25:cf:3f:5c:a3:
         c3:35:bc:b7:25:a1:42:af:1b:f8:24:69:5c:8d:90:0c:74:9b:
         6c:26:06:dd:97:bd:50:50:bd:70:01:23:5e:ed:6f:df:50:bf:
         74:c2:37:ed:bc:91:49:b2:e8:23:59:e4:40:2c:cc:00:e1:4f:
         d8:c5:71:f1:ae:df:72:d1:5f:65:63:42:4a:07:ca:31:21:96:
         72:20:f0:fb:a4:07:e5:eb:3f:60:3f:e1:24:20:c1:28:9f:44:
         47:f9:a1:50:82:64:25:56:2f:88:45:c6:d7:f6:60:b2:24:12:
         9a:f1:5b:86:e0:69:a5:71:22:2d:c0:c2:bf:9f:3c:25:28:ab:
         2c:77:ea:0c:b4:66:91:a1:3f:b1:25:fb:02:87:21:73:43:77:
         25:d8:5c:82:d4:89:f3:cd:25:0f:30:1e:bf:ec:68:ea:57:a0:
         ab:0c:38:4a:bd:d7:67:33:c6:f0:8e:5d:87:47:34:65:3b:78:
         5a:d3:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:08 2025 by rpki-client