Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
File:                     C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft (raw, json)
Hash identifier:          gouJ6Vv+BQ3d97ubhbAX6YC7TocZi0MTvszWkZKWEE0=
Subject key identifier:   39:D0:D0:13:A1:B7:9F:19:FD:C7:B5:35:88:2D:90:FC:4B:71:A2:32
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       02CDF2D11B0603B5259B4331F3EA0974CCF013E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
Manifest number:          01DF
Signing time:             Fri 28 Mar 2025 23:30:08 +0000
Manifest this update:     Fri 28 Mar 2025 23:25:08 +0000
Manifest next update:     Sun 30 Mar 2025 00:45:08 +0000
Files and hashes:         1: 3138392e3132362e3133372e302f32342d3234203d3e203430333536.roa (hash: QK00rYq5ZWV0YhSkUw1Hgo2Cy2aBlZ7HKqc3o5/lTsk=)
                          2: 323030313a313261343a3a2f33322d3430203d3e203238333436.roa (hash: Ug6/vjQdgJBgBqRYRV59OAzin+XJffDRWUuvHcW7c88=)
                          3: C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl (hash: 3jCxOhrEvDbS/fASeXPhL8m6LTPMgKmmaSalF/jcKVM=)
                          4: 3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa (hash: t+FRAhQUKppjhn4KfNeK1ozh/Lg8/ZyoB6qtFQpDyyc=)
                          5: 323030313a313261343a666666663a3a2f34382d3438203d3e203430333536.roa (hash: 9/YOcZEBC791JT7+hlb2tQHen4Pgko7PETy+9QrH8Qg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cd:f2:d1:1b:06:03:b5:25:9b:43:31:f3:ea:09:74:cc:f0:13:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Mar 28 23:25:08 2025 GMT
            Not After : Mar 30 00:45:08 2025 GMT
        Subject: CN=39D0D013A1B79F19FDC7B535882D90FC4B71A232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:95:27:9e:60:9c:c8:41:e9:95:61:07:ca:
                    a4:87:d2:ff:c4:1b:16:24:b8:ad:93:b6:91:01:5e:
                    49:06:47:54:08:52:2e:52:fd:c6:86:5b:15:bb:b6:
                    5e:15:4b:fb:7b:e8:b4:9d:90:64:4f:e3:d4:b7:8c:
                    b7:cd:20:46:4a:20:6d:3f:41:d3:15:d6:d0:d7:1a:
                    d1:fd:90:e4:f2:1e:5d:c6:df:eb:cd:a0:44:97:7a:
                    b1:92:00:a0:ed:62:52:a7:79:9e:77:a5:cc:d7:dd:
                    87:e3:7d:27:ec:c1:93:7d:da:12:6e:8c:cf:98:6e:
                    6d:60:20:1b:4c:3e:ce:43:5d:4a:c5:98:f2:d0:60:
                    57:41:ca:8a:2e:35:ac:12:d7:6e:5e:6d:a1:8b:51:
                    5b:60:7c:4f:d8:7b:fb:f8:a8:e2:49:67:8f:92:c7:
                    d5:08:44:22:01:66:a0:2b:12:b2:fc:f0:18:67:84:
                    6d:79:d5:a0:ef:ed:2b:88:8e:21:03:fa:3b:b4:a6:
                    6a:ec:7e:cd:87:09:a2:fe:74:8b:23:57:73:e2:ce:
                    ec:49:59:6e:ab:ab:62:7e:d8:db:ca:49:bf:e8:6d:
                    dd:01:90:63:e0:9c:5d:8e:c8:74:0c:12:fb:32:16:
                    a5:2c:1a:6b:2e:74:3b:1d:10:37:97:28:52:ad:b1:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:D0:13:A1:B7:9F:19:FD:C7:B5:35:88:2D:90:FC:4B:71:A2:32
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:94:9d:dc:a7:6f:17:bb:4b:77:06:51:09:c2:32:94:cf:06:
         cb:df:21:23:bd:21:26:00:52:3a:02:e3:8f:f4:76:07:64:36:
         4c:a0:03:22:30:91:d5:ca:90:32:20:60:1f:c5:b2:c1:db:40:
         9d:98:d4:f5:6f:fc:95:1c:98:27:13:41:a7:2f:bf:77:d7:1c:
         de:35:be:e3:ee:ed:f4:7d:98:d6:d7:93:1a:df:3d:07:5b:6c:
         b9:99:5e:60:f4:42:3c:6f:a0:f4:7a:66:ff:40:e3:75:1b:11:
         23:0a:5a:69:98:26:58:86:8c:a8:1f:3a:d9:79:14:dc:76:23:
         84:38:c4:7f:e8:d1:69:a6:77:2c:8a:38:b0:08:ab:11:f6:b4:
         0a:27:26:f7:e1:06:92:d5:bf:21:b1:22:f0:0b:70:75:10:b1:
         78:8a:72:7f:76:03:df:ef:03:a8:f7:d4:81:05:27:dd:06:7b:
         f9:5f:36:ca:2e:aa:81:15:c2:6e:bf:59:90:71:05:2f:a1:d5:
         87:cd:f1:ad:5d:27:ab:1c:82:60:9b:7d:b0:73:5c:82:f0:64:
         3e:86:21:78:54:02:f2:01:cc:39:6d:4e:86:b6:a2:56:26:e7:
         86:8b:91:9b:b4:8b:46:a7:85:cb:ae:3b:64:3a:6d:f1:a9:26:
         2a:60:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:37 2025 by rpki-client