Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
File:                     83CE6152C5DC2AF2E628D574237B19843CB8056C.mft (raw, json)
Hash identifier:          NR91omVDusV4ZPUyvUQL8t66pRsad0j8H+rO5z+F/o0=
Subject key identifier:   16:97:9C:8F:E8:55:6A:BB:2A:66:4B:AE:7A:D3:B2:68:F2:C0:DB:2A
Authority key identifier: 83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
Certificate issuer:       /CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Certificate serial:       6219768150BAE89AD5339792C459C6EF0E522814
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
Manifest number:          01DB
Signing time:             Sat 29 Mar 2025 00:58:01 +0000
Manifest this update:     Sat 29 Mar 2025 00:53:01 +0000
Manifest next update:     Sun 30 Mar 2025 03:00:01 +0000
Files and hashes:         1: 323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (hash: OLgKHqgGbEwp9YLyt+GlkYBGdIT0pdiA2z5v+L18RW0=)
                          2: 83CE6152C5DC2AF2E628D574237B19843CB8056C.crl (hash: mr7PMjbX7LOVd/MooGS02Nk9xfuMVmewsfwImCxWTgU=)
                          3: 34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa (hash: eJ0SnoP0rJrkB7BcraftQs77yC6H6cOfW2/8PM8SNdE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:19:76:81:50:ba:e8:9a:d5:33:97:92:c4:59:c6:ef:0e:52:28:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
        Validity
            Not Before: Mar 29 00:53:01 2025 GMT
            Not After : Mar 30 03:00:01 2025 GMT
        Subject: CN=16979C8FE8556ABB2A664BAE7AD3B268F2C0DB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:4c:92:52:86:44:31:ac:98:9e:3f:e4:51:
                    5b:48:1d:8f:87:ab:16:0b:a3:ae:05:1f:58:2a:c4:
                    86:21:51:73:24:21:6e:96:85:97:40:6c:61:ea:d3:
                    34:85:1e:0f:92:5f:b6:89:4d:ea:12:5b:44:96:1a:
                    88:f8:8b:8d:dc:3e:f6:09:20:54:37:27:cf:02:18:
                    72:88:46:51:d3:05:f9:0e:b7:3b:e9:14:0d:e8:ce:
                    44:a8:57:d5:74:b1:48:1e:27:e7:9b:0e:78:35:13:
                    13:31:64:a5:8a:89:6e:7d:50:c3:c8:58:5e:fd:c3:
                    35:db:38:0e:0f:d2:80:58:08:13:c6:26:f9:fb:c1:
                    d1:fa:79:9a:62:de:3f:dd:64:ca:d4:ec:d5:4d:a5:
                    a3:bf:bd:13:aa:ad:83:eb:c3:92:42:5a:51:2d:a1:
                    36:92:16:bb:44:ba:24:b2:ad:e4:d4:96:de:7f:e2:
                    32:8f:d0:5f:51:0b:67:82:d3:36:49:92:84:f6:a5:
                    9f:06:c3:ea:a5:87:cf:9d:99:7d:80:4b:4b:4c:05:
                    1a:bc:e1:a0:db:70:c4:88:5e:bb:44:c0:4f:9b:ed:
                    cc:b5:17:11:23:e1:36:2e:c0:ff:47:0f:30:53:05:
                    30:69:c1:e7:14:83:a3:18:04:4b:0d:63:54:2f:8e:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:97:9C:8F:E8:55:6A:BB:2A:66:4B:AE:7A:D3:B2:68:F2:C0:DB:2A
            X509v3 Authority Key Identifier:
                keyid:83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:11:15:50:8c:f0:9a:be:1b:f0:79:da:55:4f:68:7b:5b:99:
         cd:39:1c:82:bc:eb:86:b4:f7:da:98:35:40:61:06:77:a8:f2:
         46:7e:31:e8:60:8a:69:11:12:0a:a4:30:52:00:da:ef:ec:ab:
         1e:93:a8:fd:2a:a0:b0:16:7a:0d:d2:5b:80:a5:cf:74:62:7a:
         f3:a7:dc:f3:0c:68:44:ea:04:3a:ce:7a:14:3c:33:30:b6:4e:
         72:f0:c9:52:a0:69:26:a0:16:13:d7:fa:13:4c:77:e0:16:bf:
         43:73:ed:7c:d5:54:b5:28:70:fa:0b:b6:e9:3c:b6:ea:4e:e8:
         02:fb:7e:8b:bd:be:2e:01:29:1d:82:bc:4c:ac:07:80:59:65:
         18:8f:69:5d:15:0b:da:e0:8f:32:6c:99:52:5f:cb:c9:81:05:
         5c:28:d5:e1:da:6f:4a:4a:83:0b:6e:d8:d2:d4:41:a7:95:5c:
         03:38:0b:44:17:db:7b:6f:58:55:88:fe:03:a9:b6:a0:59:33:
         5c:f3:21:cd:c9:d7:23:d5:c6:02:b7:3a:04:6e:15:6f:f5:4b:
         f8:79:5e:73:8a:c3:5f:03:ce:dc:80:ad:7d:44:de:ae:cc:de:
         86:15:a7:04:6b:71:6c:8f:9d:f5:dd:b9:c3:b0:bb:85:74:aa:
         6f:d6:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:06 2025 by rpki-client