Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft
File:                     BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft (raw, json)
Hash identifier:          sik14YMCFcQczzGeogBGNGPHWX0ViO1uaCf/tau1QMU=
Subject key identifier:   68:C0:89:F7:8A:B1:55:C6:5E:B1:38:D8:F0:64:1B:32:EB:4C:B1:4D
Authority key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29
Certificate issuer:       /CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
Certificate serial:       378D95E0E29D7BB2C6A02E0BD74CCE074FB7F8F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft
Manifest number:          01DC
Signing time:             Fri 28 Mar 2025 16:53:59 +0000
Manifest this update:     Fri 28 Mar 2025 16:48:59 +0000
Manifest next update:     Sat 29 Mar 2025 19:32:59 +0000
Files and hashes:         1: BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl (hash: KDr7xJut0RbmuwseEArpGvYClW1IuWcb1vEyQLwxNKk=)
                          2: 323830343a363763343a3a2f33322d313238203d3e20323639363439.roa (hash: sx66GdN/o8ObU+kS4UdT85uvRj7R169FGRhEutZKWEQ=)
                          3: 34352e3138392e32302e302f32322d3332203d3e20323639363439.roa (hash: x3F9fr3M1wUnR699QYfCg0kaN9QGK+XJRuVDMxUGoQQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8d:95:e0:e2:9d:7b:b2:c6:a0:2e:0b:d7:4c:ce:07:4f:b7:f8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
        Validity
            Not Before: Mar 28 16:48:59 2025 GMT
            Not After : Mar 29 19:32:59 2025 GMT
        Subject: CN=68C089F78AB155C65EB138D8F0641B32EB4CB14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:6e:37:46:e4:d9:df:b3:22:91:af:41:e7:
                    2e:25:8f:cb:85:a3:35:d6:c4:cc:62:1f:26:74:a9:
                    aa:e1:ba:4c:2a:a8:ee:a5:67:b1:69:0a:5b:96:8c:
                    ba:08:2d:a2:0f:7d:40:1f:8e:f5:11:9b:90:ea:91:
                    e4:04:2c:ea:1e:9d:e7:c4:6c:6e:56:61:2c:f8:ed:
                    6e:87:b6:d7:d3:93:79:1b:b7:65:41:0a:f6:3b:2e:
                    72:15:55:13:ee:5c:85:d9:a2:8f:85:bb:c9:eb:c6:
                    2d:e9:48:14:17:7c:75:35:c0:1e:db:24:a5:3a:c6:
                    1f:d4:34:1f:82:2f:8d:32:66:d2:70:d0:8f:ee:5b:
                    f7:61:28:ad:4d:bf:1e:aa:6c:81:4e:2e:3f:e3:20:
                    13:a1:f3:41:dd:0a:10:78:35:72:a8:93:be:ec:7c:
                    2f:a3:b6:7c:52:c2:76:e8:c0:04:33:97:e8:48:e1:
                    dd:80:0e:2a:b0:b7:1a:ab:ed:7e:a1:69:bd:d9:53:
                    a9:98:37:8e:a2:66:00:e9:f1:99:b3:46:ac:fd:9e:
                    67:b3:c4:23:98:81:3c:af:3f:0d:95:a2:5f:23:be:
                    b5:5a:1f:ab:6e:35:9f:7e:63:3d:ba:61:2e:ce:61:
                    6f:ab:61:86:9c:ff:1e:60:2f:ff:22:03:c1:f8:d5:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C0:89:F7:8A:B1:55:C6:5E:B1:38:D8:F0:64:1B:32:EB:4C:B1:4D
            X509v3 Authority Key Identifier:
                keyid:BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:52:b2:b0:46:f0:92:dd:a9:77:db:66:da:e0:cc:1c:f9:1c:
         19:ea:43:86:81:87:d0:6a:75:00:49:e0:3c:af:42:23:29:a2:
         35:18:f4:4a:54:9d:60:c0:39:bb:90:f7:07:11:de:aa:f6:5a:
         68:ee:81:fc:eb:ba:d1:5f:bb:78:00:e3:3e:0a:7a:74:b9:2c:
         e4:46:59:bc:b7:fc:9d:6b:13:22:e4:8a:68:ce:40:83:95:47:
         72:b8:c4:23:6d:7d:e9:62:78:f2:27:2e:8d:cd:74:2f:73:6c:
         2a:cb:8e:f9:3f:58:90:1c:ae:16:ed:aa:ec:a7:67:c9:27:bd:
         10:74:69:ba:b9:d8:52:2a:db:13:4d:43:9f:43:04:aa:31:a7:
         d8:86:11:cf:85:a1:fa:7f:a2:4b:27:16:01:5d:06:3b:03:93:
         f7:52:c2:d0:12:60:9e:a1:74:75:a5:10:70:29:7b:c8:19:b0:
         d9:74:8a:a4:7c:cf:81:2e:06:a9:8e:3e:98:bb:ce:1f:a6:30:
         ac:2d:10:02:48:3d:f2:3d:94:c8:c4:8c:bc:87:67:db:e8:3b:
         77:69:95:56:e8:31:aa:a8:87:04:d4:6f:8d:60:e2:c7:01:16:
         4c:6e:25:3a:94:e4:0c:3e:ac:b1:0b:79:b3:28:30:45:31:60:
         30:d8:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:53:07 2025 by rpki-client