Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
File:                     9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft (raw, json)
Hash identifier:          2ICj8Q050DZv/rSsyByizjBhr5iw1ObbG7kaECCZ7aw=
Subject key identifier:   04:13:00:DB:06:14:77:DE:FD:38:54:E8:B9:E8:39:A2:E5:BF:03:D0
Authority key identifier: 9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE
Certificate issuer:       /CN=9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE
Certificate serial:       3A2602C339BFCC7A64A6B7ABBC1EFAA6FE3E5780
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft
Manifest number:          8B
Signing time:             Sat 29 Mar 2025 08:57:44 +0000
Manifest this update:     Sat 29 Mar 2025 08:52:44 +0000
Manifest next update:     Sun 30 Mar 2025 09:14:44 +0000
Files and hashes:         1: 323830343a346564343a3a2f33322d3336203d3e20323638323835.roa (hash: 7d67sk0wDJ48gQf5wzEpy5JiybK5vIkYJP75gneD0PQ=)
                          2: 34352e3233372e3131322e302f32322d3234203d3e20323638323835.roa (hash: 8qaHgysPNMjZAwsao9ugq4x/xUs0ki58RQUk8g5gP0w=)
                          3: 9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.crl (hash: xSwXiAJnOks17q1OAdGLFxyspm4dCO+vJZNnczGOqzU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:26:02:c3:39:bf:cc:7a:64:a6:b7:ab:bc:1e:fa:a6:fe:3e:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE
        Validity
            Not Before: Mar 29 08:52:44 2025 GMT
            Not After : Mar 30 09:14:44 2025 GMT
        Subject: CN=041300DB061477DEFD3854E8B9E839A2E5BF03D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:5f:38:17:44:09:f5:79:b0:42:54:c3:4c:
                    b8:53:c2:c8:6b:01:df:9f:66:86:08:73:ec:00:45:
                    40:a6:21:48:75:2b:af:47:7a:85:58:f8:47:92:63:
                    f0:13:34:3f:64:0f:3e:6d:26:bb:eb:b4:dd:c5:51:
                    57:96:c2:19:23:f2:7d:ce:ef:3a:7d:b5:e7:93:1d:
                    1f:60:94:66:b0:d0:08:f8:d4:ed:dc:c7:85:ff:56:
                    4c:fb:62:3e:f7:b8:66:cf:1c:ce:72:e2:92:69:f1:
                    48:0e:bd:e6:fc:43:2a:d2:1a:3a:46:95:92:a4:0c:
                    1b:c3:bf:e7:c0:60:7b:cc:aa:91:37:49:b3:6e:ab:
                    f6:8b:e3:72:38:30:ff:18:91:9d:fd:8b:c5:20:23:
                    9f:8f:fd:ec:1f:be:1d:1b:08:60:1e:12:a4:ea:75:
                    76:f3:b1:7a:90:e9:aa:2b:84:1c:ab:3b:90:1c:37:
                    00:b1:94:17:60:6c:0b:96:bd:85:0e:c4:b5:81:bd:
                    e1:50:f6:86:2c:28:dc:b6:f0:4f:4d:c7:c6:cf:a5:
                    7f:0c:88:80:34:b5:32:25:f8:ea:8a:28:e9:e5:d5:
                    d4:fc:c6:e3:81:22:fa:18:c8:61:bb:ec:fd:d5:a0:
                    f1:71:9c:9e:94:65:ef:10:da:ab:26:28:10:42:a8:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:13:00:DB:06:14:77:DE:FD:38:54:E8:B9:E8:39:A2:E5:BF:03:D0
            X509v3 Authority Key Identifier:
                keyid:9B:B7:FC:9A:69:CB:B0:6C:BF:7A:F7:4C:65:A4:A7:34:D2:84:C5:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4UzVWXXk6HGr8gbzLuxpLeUVtRna4CmBppqavpDdZPE/0/9BB7FC9A69CBB06CBF7AF74C65A4A734D284C5EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:19:fc:2d:1b:63:5d:21:9a:a1:d5:6a:a6:f6:b9:5e:51:
         b9:72:b2:a5:aa:af:b4:4e:59:12:7c:b2:fc:3b:9f:d5:ff:45:
         f1:71:b3:e7:a5:bb:e8:8b:9a:f2:ce:6c:cd:92:05:f2:3a:b0:
         cd:5c:e8:ff:67:10:08:fb:ee:39:d6:a8:74:2c:1a:96:10:08:
         5e:1c:fd:cc:e3:5d:c2:3d:46:56:ef:70:f7:3b:6c:40:ba:e9:
         8c:5f:90:de:50:bf:18:08:05:26:9f:2b:58:9e:99:f5:a9:38:
         44:5e:fd:7c:c0:ef:34:b9:32:c8:34:db:d3:b2:93:86:0d:f1:
         cb:f7:84:5f:6b:cd:e0:bd:10:5f:d1:ff:e3:0e:ae:19:b5:53:
         16:05:a6:9f:b4:e1:de:c2:fb:20:25:b0:9e:ad:d7:be:bf:96:
         c7:e1:9d:06:f5:27:00:69:cd:dd:5d:92:a9:13:da:d9:6c:eb:
         ad:13:5d:40:4b:5d:e5:f6:6f:0d:3a:13:8b:86:63:84:1d:77:
         9b:1b:7b:3a:47:ec:6a:b3:bc:a1:78:08:f3:8d:e0:0b:ec:b9:
         d7:91:f0:1a:ed:e6:d9:cb:32:1e:d5:a0:b6:32:1a:87:58:af:
         fa:5f:97:1f:8d:79:9a:18:aa:c5:ea:e0:54:56:87:d4:b8:c7:
         78:4b:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:02:11 2025 by rpki-client