Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.mft
File:                     999BAB4331AD91DD7B08643BF9CAB750C9C37E76.mft (raw, json)
Hash identifier:          kPRJA6HChylJvXyblW97wkM0kPHLb56ApJcIodslaok=
Subject key identifier:   36:59:53:E3:96:82:56:C4:6F:7B:35:4E:0E:D6:D8:01:61:C7:57:C4
Authority key identifier: 99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
Certificate issuer:       /CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Certificate serial:       7429880EC8FBCE427DB8867BB64CB1D457812AA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.mft
Manifest number:          04
Signing time:             Sun 02 Feb 2025 07:17:16 +0000
Manifest this update:     Sun 02 Feb 2025 07:12:16 +0000
Manifest next update:     Mon 03 Feb 2025 08:24:16 +0000
Files and hashes:         1: 323830343a383265383a383030303a3a2f33342d3334203d3e20323732313634.roa (hash: y1P+K2V4udzN6NWPiuixhjbX3ulN/SBwdpKee4Rmwwk=)
                          2: 323830343a383265383a3a2f33342d3334203d3e20323732313634.roa (hash: W+zwHq8oPHh8cqSiZu3Odd0AWyHGm/tBDTh9My9I7Os=)
                          3: 323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa (hash: /Pup/XoLS9e2luU7TjN/GNSetL61R0evbOTeWJ8B2cg=)
                          4: 323830343a383265383a3a2f33332d3333203d3e20323732313634.roa (hash: 8mwFDzVLmWNEdX+uqVI4q1jzQZj1yxhwkwvpzN9donQ=)
                          5: 323830343a383265383a343030303a3a2f33342d3334203d3e20323732313634.roa (hash: ANz6QhUmugf8DGZFcvqxaYHp93NcNNsOCgXI8oknHNI=)
                          6: 999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl (hash: IEBb73uSVMFJVkpHNr2JaVvsHKslIJoZJNf3djWttKE=)
                          7: 323830343a383265383a383030303a3a2f33332d3333203d3e20323732313634.roa (hash: +c6YQ3ERfGDNbomHE6szqcDn9dhCp4KLym6Mspw+qGA=)
                          8: 323830343a383265383a3a2f33322d3332203d3e20323732313634.roa (hash: e+ZeRTvAiqLdD/gv3WWdsCHD8YmXgoqlzyzNii9UT1s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:29:88:0e:c8:fb:ce:42:7d:b8:86:7b:b6:4c:b1:d4:57:81:2a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
        Validity
            Not Before: Feb  2 07:12:16 2025 GMT
            Not After : Feb  3 08:24:16 2025 GMT
        Subject: CN=365953E3968256C46F7B354E0ED6D80161C757C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:65:32:2c:5f:c1:fc:1a:70:2a:ba:00:b1:
                    40:f2:98:71:79:07:b7:0d:3f:48:48:94:58:b8:17:
                    44:6e:e8:42:1d:0e:f0:33:6c:55:ec:9b:64:2b:78:
                    1d:69:ed:6c:c5:b9:41:19:19:95:49:ae:7a:d1:c0:
                    ff:b5:2e:68:68:9a:d4:76:1c:1c:17:12:3b:50:c3:
                    4d:61:b9:1e:62:6a:6c:14:94:9d:be:b1:b0:42:14:
                    90:60:3c:d3:28:46:db:cf:98:fa:da:de:fb:07:45:
                    5c:f7:e9:ea:87:d1:b8:a1:ee:32:21:72:da:7b:9b:
                    b7:d6:3a:2f:59:55:64:de:33:ef:5a:de:d4:d8:56:
                    09:49:8c:23:a6:e0:51:ce:f5:72:6a:ec:ce:ed:32:
                    fe:2c:d0:1b:54:e3:33:08:54:18:f8:be:22:f4:ae:
                    f7:43:45:4b:2e:d4:af:9f:f5:0c:8a:f2:47:48:6b:
                    bd:4f:0d:cf:c1:40:50:f4:61:be:fb:09:c5:fb:99:
                    55:c5:f5:45:38:51:e2:90:ae:c5:65:c3:0d:02:a8:
                    fc:4e:3b:ed:9f:35:7e:df:e6:16:c1:ff:01:24:95:
                    4d:0d:8f:3c:5f:d2:f7:a4:84:9a:ea:93:53:29:1b:
                    57:15:2e:34:71:de:44:b8:06:c9:e1:e7:78:42:25:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:59:53:E3:96:82:56:C4:6F:7B:35:4E:0E:D6:D8:01:61:C7:57:C4
            X509v3 Authority Key Identifier:
                keyid:99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4c:06:8f:67:33:69:29:89:4f:1a:90:da:7d:75:e0:15:11:
         30:0f:4f:65:1a:07:58:6a:da:6a:89:82:45:ab:69:56:7d:46:
         d9:f8:50:dc:ec:ed:28:0c:55:46:2c:26:e1:f5:2c:fb:e5:3b:
         7f:0f:41:b7:43:ba:52:80:47:e9:7a:fa:2c:9d:a9:e5:bf:ee:
         6c:64:a7:87:57:9c:40:2c:d5:5c:92:b9:6d:86:ee:56:02:9e:
         b5:ab:c4:dd:f1:a6:83:b0:1b:4d:87:2e:98:6b:1f:b4:72:e6:
         15:5b:36:7a:a7:4c:bc:0d:e1:6e:c0:3e:5c:01:72:ff:cf:6f:
         7f:8b:81:cf:21:8d:9d:cd:dd:9d:48:f9:14:f8:0a:11:26:68:
         8c:55:8b:4b:b4:48:7b:c7:26:26:bf:e7:c5:a0:7d:e6:0d:de:
         a6:21:e8:1a:5c:97:e4:e1:0b:40:0f:1f:0f:e1:05:74:16:2a:
         fc:5f:c8:10:3a:db:f9:71:f0:d9:3b:0d:a9:0a:99:1c:31:05:
         6b:a6:a1:ec:ed:16:29:25:95:d1:1d:f8:fc:e5:cb:c0:e4:72:
         26:d8:c2:7d:7d:6d:bf:b1:37:1e:fb:8b:73:1c:cb:63:31:07:
         a6:13:31:15:30:0e:d4:ff:4e:22:be:81:c4:3b:9d:e8:88:2d:
         77:8b:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:19:59 2025 by rpki-client