Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/96C80DB0944D2C18B712181758491CFBFBDBB79A.mft
File:                     96C80DB0944D2C18B712181758491CFBFBDBB79A.mft (raw, json)
Hash identifier:          28Pxfb410VDNv2nzu72KM4gRJPF+UU9TBcEXv59g1CU=
Subject key identifier:   42:53:31:AF:6C:86:78:A1:2B:56:B6:30:BA:40:F4:E9:79:92:21:34
Authority key identifier: 96:C8:0D:B0:94:4D:2C:18:B7:12:18:17:58:49:1C:FB:FB:DB:B7:9A
Certificate issuer:       /CN=96C80DB0944D2C18B712181758491CFBFBDBB79A
Certificate serial:       3162BB80F9C0E497699B48DEC507449183F22479
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96C80DB0944D2C18B712181758491CFBFBDBB79A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/96C80DB0944D2C18B712181758491CFBFBDBB79A.mft
Manifest number:          03
Signing time:             Wed 25 Jun 2025 15:49:02 +0000
Manifest this update:     Wed 25 Jun 2025 15:44:02 +0000
Manifest next update:     Thu 26 Jun 2025 18:44:02 +0000
Files and hashes:         1: 3139302e3138342e3231362e302f32322d3332203d3e20323730393539.roa (hash: x/YP9v+/WyQrJtDMyulQelH2tfeerTA0FPaqShS51Bc=)
                          2: 96C80DB0944D2C18B712181758491CFBFBDBB79A.crl (hash: UW0CKIVtE4gPqeTpdkke7/DnWZ7nld8RJ2E7avTldnY=)
                          3: 323830343a373431633a3a2f33322d313238203d3e20323730393539.roa (hash: 3P/gv/BQ5+myS+VeEkDENeShuOqZNPsKM6qDRGtSmNE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:62:bb:80:f9:c0:e4:97:69:9b:48:de:c5:07:44:91:83:f2:24:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96C80DB0944D2C18B712181758491CFBFBDBB79A
        Validity
            Not Before: Jun 25 15:44:02 2025 GMT
            Not After : Jun 26 18:44:02 2025 GMT
        Subject: CN=425331AF6C8678A12B56B630BA40F4E979922134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4d:3a:1d:79:70:cd:3f:d6:01:06:36:82:ed:
                    8f:fb:a3:3b:91:c9:0c:90:ca:05:4a:a8:42:8c:f8:
                    ff:c3:be:82:5f:ee:23:96:37:62:39:dd:6d:03:6f:
                    2f:d3:9a:93:c2:82:c5:92:f0:72:23:50:25:db:84:
                    d6:4d:64:71:46:84:40:88:7a:30:fc:4f:46:9e:18:
                    c4:ba:76:5e:1e:1a:78:fc:b2:2f:36:21:56:d6:69:
                    2a:d8:7e:0c:9a:b5:ea:a7:b3:3e:95:a3:a4:f1:10:
                    e6:df:5a:0a:a4:d6:e3:11:52:73:7f:b7:60:e4:a9:
                    88:4e:18:63:c2:2d:02:8a:00:55:d9:ac:ed:6a:df:
                    15:70:5e:ef:b4:9b:9a:23:45:7f:e2:03:a9:df:f9:
                    4e:16:96:71:66:e0:24:40:e3:9f:6d:f1:37:41:f7:
                    8c:f4:99:b7:49:0b:62:30:82:eb:d4:36:2a:be:42:
                    9e:d0:08:1a:b3:a8:8f:d8:de:b9:3f:bc:60:c1:cf:
                    fe:5f:1f:23:6f:90:d6:67:c7:d5:a8:12:46:f1:1b:
                    cd:d8:3f:d9:bb:1a:5b:ae:b4:7a:b9:e0:92:49:50:
                    ba:cd:a2:85:9d:ea:7a:7c:53:3e:68:b1:ac:62:b2:
                    da:46:e0:d8:da:7c:1e:97:34:d4:5b:e8:92:92:47:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:53:31:AF:6C:86:78:A1:2B:56:B6:30:BA:40:F4:E9:79:92:21:34
            X509v3 Authority Key Identifier:
                keyid:96:C8:0D:B0:94:4D:2C:18:B7:12:18:17:58:49:1C:FB:FB:DB:B7:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/96C80DB0944D2C18B712181758491CFBFBDBB79A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96C80DB0944D2C18B712181758491CFBFBDBB79A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/96C80DB0944D2C18B712181758491CFBFBDBB79A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:5b:45:05:af:68:a2:aa:1b:a7:bc:26:31:76:1b:72:67:
         df:df:7b:17:c8:06:0a:c5:c8:ae:96:8f:44:0e:13:68:6e:19:
         cf:52:df:95:c2:32:28:bf:ee:98:ba:aa:e3:7c:c0:bd:42:78:
         bd:de:1f:24:8e:ef:3a:7e:66:34:f3:43:47:10:3f:e8:ee:d5:
         62:4e:ca:53:45:47:bb:b3:bc:da:3c:81:c0:9f:c9:d0:83:49:
         ff:fc:1f:85:46:24:2c:b3:10:d6:79:48:39:03:11:11:e0:e8:
         e2:db:29:a8:b4:b8:e2:dd:a7:9c:0f:b3:e5:46:80:fa:04:38:
         30:dc:2f:c2:3b:c3:4d:77:89:29:2e:29:71:01:75:32:e5:85:
         86:0c:2b:bb:17:27:28:da:e6:55:e4:da:13:87:ec:c9:fa:9a:
         fe:94:9b:dc:70:7a:a0:42:6b:fb:28:0f:cf:51:53:5f:6a:3e:
         bf:72:a4:f1:11:c9:56:6b:ba:46:76:f9:0e:a5:71:c1:4a:53:
         31:5f:99:d6:69:1f:37:89:59:e1:87:70:4a:25:33:4c:20:a5:
         87:84:19:23:2f:d5:77:7c:f2:eb:08:85:e7:b5:29:22:1b:ca:
         b6:e2:e5:a6:05:19:dd:c5:c3:4a:29:31:a0:69:cf:8f:bf:2d:
         65:79:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:25:16 2025 by rpki-client