Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.mft
File:                     4AC63499535F096FC094DF4DF02AC3681513D3B2.mft (raw, json)
Hash identifier:          bid7Nb4V2duRAdvxmIFFG3JLM0ULeDBhkCd3HRcLh0E=
Subject key identifier:   6B:83:C8:FA:90:DA:9E:AF:C6:CC:6D:DA:6F:17:10:F3:54:B9:DC:72
Authority key identifier: 4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2
Certificate issuer:       /CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
Certificate serial:       42349D19F64E1A59D1755FF17524174102904D6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.mft
Manifest number:          3A
Signing time:             Fri 10 Jan 2025 08:15:01 +0000
Manifest this update:     Fri 10 Jan 2025 08:10:01 +0000
Manifest next update:     Sat 11 Jan 2025 09:00:01 +0000
Files and hashes:         1: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (hash: VrvSK02k5rhiW4wKvrrAXllqnRDxK4gNhwRwVBXM1Wk=)
                          2: 4AC63499535F096FC094DF4DF02AC3681513D3B2.crl (hash: ndBtbSBXVgttpTFDOWikDXyocFzwI4ZRc1om8upVT6M=)
                          3: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (hash: 6B1rRaeZEj2+xXniLFMwLDciBsdK9tq28toFCrhKVe0=)
                          4: 323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (hash: ymapjRSxS+OMEbfGoPOXbkUQcz52HjgFg66qy2wXrnU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:34:9d:19:f6:4e:1a:59:d1:75:5f:f1:75:24:17:41:02:90:4d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
        Validity
            Not Before: Jan 10 08:10:01 2025 GMT
            Not After : Jan 11 09:00:01 2025 GMT
        Subject: CN=6B83C8FA90DA9EAFC6CC6DDA6F1710F354B9DC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:61:49:1c:ff:33:97:6d:83:ad:e3:7e:71:
                    53:5d:03:55:e0:46:d3:86:c3:92:cf:42:71:98:55:
                    d6:60:3d:e4:96:87:9d:19:b6:1c:cd:d7:11:db:76:
                    9d:89:fa:bc:68:e6:b5:c6:ee:c8:1c:00:3d:ad:ec:
                    ad:09:99:14:17:4d:99:91:4a:19:83:06:26:be:54:
                    b5:12:c4:fe:86:81:c3:56:1f:65:79:e6:1e:20:1c:
                    3c:76:af:f0:75:63:d9:70:2e:f5:ee:f8:e3:23:29:
                    e7:52:21:4c:d4:b8:b5:00:2f:69:2f:b5:8f:0e:bf:
                    b2:ac:b0:b6:43:53:52:72:91:93:30:7d:2f:71:ae:
                    b9:5c:10:a6:09:d2:52:40:43:24:4c:5f:cb:0b:e9:
                    d4:3a:ef:09:61:7d:0f:74:72:2d:1e:91:ed:51:a2:
                    9d:e5:f9:df:76:e5:37:06:f5:6a:f1:c4:e0:db:d2:
                    44:45:3b:d2:4f:57:e1:ad:93:37:87:e2:b4:19:22:
                    89:92:f2:52:92:57:9b:02:20:d8:38:d7:de:73:ed:
                    c5:0a:75:6f:44:0c:b7:ed:7b:2e:9f:0e:92:6e:15:
                    32:33:86:02:1d:b7:98:ec:2e:4c:8c:f0:0e:e4:0d:
                    e6:2a:77:2c:3a:89:b6:2d:66:55:2b:42:38:a7:23:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:83:C8:FA:90:DA:9E:AF:C6:CC:6D:DA:6F:17:10:F3:54:B9:DC:72
            X509v3 Authority Key Identifier:
                keyid:4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:52:2d:3a:e8:0f:65:97:a5:d0:50:03:cd:3a:a8:7f:60:9f:
         74:cd:7b:76:03:d7:1f:07:dd:49:c9:fa:a2:f6:7a:ef:da:67:
         27:21:ea:7e:3e:10:f1:d1:00:89:86:9d:df:90:9b:8a:f7:64:
         06:7b:2b:c0:c9:46:d8:33:7d:6f:40:d4:62:c7:01:ac:76:aa:
         02:28:14:56:15:12:82:64:b9:92:e6:66:08:62:1d:5c:22:f0:
         f5:0c:da:c9:d5:3c:84:15:43:50:10:ac:48:89:25:5c:c4:ac:
         3d:dd:1e:71:45:e9:b6:3e:2a:d9:fd:1f:e0:60:77:2b:f9:9c:
         bb:c0:e8:64:38:9d:73:f2:26:27:88:52:2d:4e:7a:33:b4:c5:
         e4:e0:1a:75:30:cd:9a:1a:4b:a4:9a:4c:b4:11:f4:87:0a:52:
         b1:e5:67:04:4a:37:dd:0d:35:72:1f:76:55:14:4a:9e:e7:1f:
         9e:e5:d8:a7:e8:89:8d:3f:ad:9c:f1:22:fe:25:93:ea:28:19:
         e1:fe:64:d2:0a:4e:f6:2e:4f:c5:db:c2:77:57:a7:59:dd:f0:
         5e:e2:d7:2f:04:65:37:c6:c7:78:43:c2:e1:08:59:83:7e:7c:
         9b:74:46:a2:ab:89:e4:d5:34:7a:61:cd:d6:76:7e:05:c2:81:
         88:53:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:54:23 2025 by rpki-client