Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
File:                     D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json)
Hash identifier:          yLaTXnAheApc0fKJBWjWHGEyp9ld8ODFV+WalPlbT+w=
Subject key identifier:   07:45:65:23:B2:3A:89:D8:CA:E0:41:69:92:E8:18:1B:C2:CE:48:C9
Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
Certificate issuer:       /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Certificate serial:       5B8197ECA8267C525979235E15141B9258446331
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
Manifest number:          01E1
Signing time:             Sat 29 Mar 2025 04:38:11 +0000
Manifest this update:     Sat 29 Mar 2025 04:33:11 +0000
Manifest next update:     Sun 30 Mar 2025 07:52:11 +0000
Files and hashes:         1: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: QvjsIcUC57Kr43bVdKYDiH6vNSYSbUoDse6LmAdr5Ec=)
                          2: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: IhDSHYohc0+Dr9apFyNFCQVRejVX/yjwQA2nWachXec=)
                          3: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: XOwtVM5LyoozAIAy6kZOX07UdARTT+Ta3OmCSyAiYcM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:81:97:ec:a8:26:7c:52:59:79:23:5e:15:14:1b:92:58:44:63:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
        Validity
            Not Before: Mar 29 04:33:11 2025 GMT
            Not After : Mar 30 07:52:11 2025 GMT
        Subject: CN=07456523B23A89D8CAE0416992E8181BC2CE48C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:98:4c:86:e0:24:4c:75:8f:54:2a:bc:bb:
                    2f:6f:69:26:cf:34:ae:71:b1:37:7b:42:b4:9c:e5:
                    c3:4c:66:ad:29:5c:73:11:ba:e7:a9:d6:b8:e2:9d:
                    f7:81:b2:08:1e:a9:ca:5a:94:de:b9:ee:24:67:c7:
                    01:4e:73:42:90:6c:e4:67:80:a8:d0:e9:a1:a6:a7:
                    78:bf:8a:1f:a3:5b:02:f2:24:2c:33:70:12:8f:72:
                    32:c3:82:51:f5:f9:e0:31:71:83:1c:4e:5a:ca:e0:
                    b6:db:28:2c:89:3a:d7:9c:6e:53:91:3f:c2:db:8d:
                    d3:f3:e5:14:99:c7:58:e3:c2:1b:cc:80:0d:d1:a1:
                    89:6c:35:d9:7a:44:32:cd:94:f9:98:0b:cd:6b:88:
                    72:31:63:51:bf:ba:c4:b8:20:e4:af:6f:f8:a1:09:
                    e7:d5:b2:1c:84:54:88:c7:b3:a1:b5:11:af:f2:65:
                    dc:71:67:20:f2:64:77:41:1c:47:84:ac:60:cd:a2:
                    7d:06:d3:f7:39:c2:34:95:7f:45:ba:9c:65:4e:61:
                    ab:0a:88:74:30:97:b5:58:38:ab:45:09:98:20:82:
                    3b:29:a5:44:65:e7:b3:14:dd:30:02:9e:75:02:2d:
                    45:53:e9:c7:6e:e9:41:b5:33:a9:ce:7d:32:30:4f:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:45:65:23:B2:3A:89:D8:CA:E0:41:69:92:E8:18:1B:C2:CE:48:C9
            X509v3 Authority Key Identifier:
                keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:34:c8:e6:24:18:bb:c2:b1:c8:10:4f:fc:fd:ce:f0:d1:
         ef:29:04:75:31:28:6f:66:e3:85:8d:ff:ff:66:f1:f4:78:59:
         cd:d6:eb:cd:71:94:50:88:74:42:bf:e7:3e:86:4a:4a:96:68:
         1b:82:1c:5a:e9:3f:7b:40:36:a0:82:a0:bd:79:5a:b8:9f:8b:
         ea:10:4b:fc:21:09:a8:e6:ce:b4:fe:41:52:6c:c8:a4:ab:36:
         d7:36:a5:c6:70:df:d2:3c:a3:42:17:fc:c6:6b:18:ac:a8:c0:
         46:76:2c:53:78:f4:a9:28:6f:77:a8:25:a6:8c:4f:6b:95:a1:
         05:23:23:42:00:7c:13:68:b0:d5:08:c0:c7:07:a1:45:31:6c:
         3c:1a:9c:9e:8a:d7:27:75:24:28:95:64:61:b9:15:a5:22:13:
         fa:d6:29:a1:14:f1:83:7d:30:2b:e6:fe:af:ca:95:ee:c0:76:
         36:56:b6:78:4f:84:44:ea:e6:72:b6:f3:c8:f3:28:1c:9a:e8:
         0d:23:b6:98:a8:1f:4e:a1:4f:93:27:40:7e:4d:b5:cc:39:4a:
         d6:52:9d:bc:8a:5f:d3:08:39:a2:14:bd:4e:8c:66:41:b5:fd:
         9f:60:0e:c2:94:db:0d:e9:89:1f:fb:49:c2:bf:1f:6b:c3:28:
         c0:95:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:32:19 2025 by rpki-client