Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft
File:                     AD3AEE6D0F6670021EECC39215F89978080B77E0.mft (raw, json)
Hash identifier:          QwbCmpnOqePpyVAHr2TeHEjdY2QHCyuw0DlFQYiprNE=
Subject key identifier:   0F:7D:9B:0B:57:22:CB:C2:91:D2:E9:F0:8C:2C:18:A3:4C:A9:98:1A
Authority key identifier: AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0
Certificate issuer:       /CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
Certificate serial:       63F2314E96AA7F443CC52E68502462BB9BE024B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft
Manifest number:          17
Signing time:             Fri 28 Mar 2025 16:17:19 +0000
Manifest this update:     Fri 28 Mar 2025 16:12:19 +0000
Manifest next update:     Sat 29 Mar 2025 19:06:19 +0000
Files and hashes:         1: AD3AEE6D0F6670021EECC39215F89978080B77E0.crl (hash: LygpFFpNWPh3Yp6HllInr6IxXmBzJHCg6S0QtevHykg=)
                          2: 34352e3233362e3234382e302f32322d3332203d3e20323638323533.roa (hash: wp5Y2CmdENpkZ5QXlfX5AW7S10wq9FjUCST++Umi+2U=)
                          3: 323830343a346535303a3a2f33322d313238203d3e20323638323533.roa (hash: DzE0ZAZBUWM763YBPqqyH4iqUz+TMT1RExljjIFhOAM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f2:31:4e:96:aa:7f:44:3c:c5:2e:68:50:24:62:bb:9b:e0:24:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
        Validity
            Not Before: Mar 28 16:12:19 2025 GMT
            Not After : Mar 29 19:06:19 2025 GMT
        Subject: CN=0F7D9B0B5722CBC291D2E9F08C2C18A34CA9981A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:b7:cf:c9:09:0b:6b:03:6a:87:0f:c4:52:
                    7c:1a:01:d9:0f:fc:9c:6e:93:5d:54:7c:27:96:cc:
                    e6:27:eb:0a:e8:39:96:9d:69:63:f5:f4:0e:78:72:
                    3d:00:21:40:a4:a6:41:2f:64:bf:c5:9c:b2:e3:8e:
                    ec:0f:9e:93:aa:7c:66:9f:58:63:25:33:72:92:f5:
                    fc:95:d8:fd:86:be:b7:3e:dc:7d:e6:67:81:70:a2:
                    97:e8:cc:86:52:b6:49:89:12:d9:36:b6:ae:81:d0:
                    52:11:7f:a2:c9:e2:48:02:8f:32:d3:1f:49:f2:47:
                    18:af:4d:da:2a:e8:f5:0d:83:bf:fc:d9:72:48:1e:
                    dc:80:b8:82:46:d6:03:46:99:42:5c:43:5f:bc:ee:
                    69:ff:5c:4b:0c:17:02:d1:74:88:1e:68:74:a9:dc:
                    3e:3c:cb:3e:5b:dc:64:e8:24:d4:5f:c4:50:e5:b9:
                    5a:df:bf:63:c5:8a:fa:21:27:a5:70:bd:34:d4:1a:
                    7c:b0:fe:a7:0c:7c:69:ce:ce:bd:85:9b:8f:d5:dd:
                    9c:d8:10:ac:00:46:84:37:6a:d4:36:07:95:f0:1d:
                    95:ef:a7:27:62:bc:d4:3c:28:86:7d:3e:cd:d2:0e:
                    67:06:5a:e9:af:14:d7:47:d0:38:2a:8c:ad:1e:b9:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7D:9B:0B:57:22:CB:C2:91:D2:E9:F0:8C:2C:18:A3:4C:A9:98:1A
            X509v3 Authority Key Identifier:
                keyid:AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:0c:65:6f:c7:6f:df:d3:4d:93:76:f8:b2:ec:23:e1:d2:
         9e:df:25:ad:26:06:db:ed:81:fe:90:2c:07:15:30:74:7c:c8:
         8e:cc:b7:11:c4:ce:90:16:66:8d:04:da:4f:2d:50:19:6c:25:
         4b:da:4e:c4:f7:91:19:7a:20:cb:49:16:03:23:48:04:72:ea:
         cc:0f:d9:2e:05:a1:54:aa:33:b7:40:91:fa:b3:3b:b7:d4:46:
         6d:f9:16:6c:8a:21:3d:8a:42:5a:cf:5a:46:38:7f:96:c9:e4:
         f8:88:57:fa:af:c6:16:71:10:7f:48:30:d8:b8:48:d8:2c:ae:
         5e:e2:6a:f5:c4:23:01:36:f3:6c:26:d4:cd:2a:f6:da:ce:94:
         de:42:f6:55:74:b7:0f:54:01:8f:12:45:a0:32:68:a1:bc:c3:
         05:33:d3:78:7d:0a:72:36:9a:54:8c:2a:35:c0:6f:4f:03:97:
         01:7c:53:2d:40:20:ec:92:48:05:de:86:c9:52:a1:95:84:66:
         5b:00:d5:77:26:d7:34:54:df:8e:6f:bc:67:00:79:6b:8c:ed:
         16:dc:27:bf:17:8f:2a:a5:1e:7a:ba:6f:0e:68:0e:4e:52:ec:
         16:40:bd:c9:01:4f:18:84:28:91:61:07:57:fc:5e:71:2a:e1:
         2e:0a:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:40:44 2025 by rpki-client