Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
File:                     30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft (raw, json)
Hash identifier:          DgaGicK1eiRFBzQkSD/EbX0rceGTpQ0GgQPpwUhmOdM=
Subject key identifier:   18:E6:4E:06:3A:6C:58:E2:F9:9A:BB:1C:5E:20:F5:67:AB:E2:C8:DF
Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
Certificate issuer:       /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
Certificate serial:       6FF4D47D4E55F890805E956ACE9AD153B07809CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
Manifest number:          AC
Signing time:             Sat 29 Mar 2025 10:49:36 +0000
Manifest this update:     Sat 29 Mar 2025 10:44:36 +0000
Manifest next update:     Sun 30 Mar 2025 11:10:36 +0000
Files and hashes:         1: 323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (hash: DAqu5vHYMmBzgjKw3m7YZkJtCc2eRZUK716q7SojePk=)
                          2: 323830343a313239383a3a2f33352d3438203d3e20323633343836.roa (hash: sljh31mJ0RJTBcb4KweO4CaaM79EEO0P440gQgwgF2U=)
                          3: 3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa (hash: 5v9hnDEi09hRUO2yXK4a7ymdq4lnC5yaazp+8/R5Opo=)
                          4: 323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa (hash: B+W9Frc+XlYM7J/MsTk/HS6qJWiZIbS4YJ+YQvXnnuc=)
                          5: 3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (hash: rL+TkHgeBzF/RxGQbctSGIejhaFIapqJpjb9Ehb1bjU=)
                          6: 30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl (hash: KtIUVwWZ8iyHT7FXEJ15z8xqK1IrOz9FIAG3gxZzDzc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f4:d4:7d:4e:55:f8:90:80:5e:95:6a:ce:9a:d1:53:b0:78:09:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
        Validity
            Not Before: Mar 29 10:44:36 2025 GMT
            Not After : Mar 30 11:10:36 2025 GMT
        Subject: CN=18E64E063A6C58E2F99ABB1C5E20F567ABE2C8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:0e:9b:fb:21:e5:f6:12:24:38:c0:f3:41:
                    65:c5:13:cf:06:5e:e4:b0:f6:95:3b:8d:db:3b:15:
                    e1:06:35:c3:88:8f:f1:96:14:71:5c:b1:2a:c6:e7:
                    5b:af:0a:65:c8:39:f7:1e:d0:9f:26:61:98:34:5d:
                    ff:74:7c:07:cc:97:22:9e:f4:81:b8:6a:c2:22:16:
                    af:b6:23:7e:1f:83:ab:7f:e2:ac:91:07:f1:b6:af:
                    7d:dd:34:77:cb:d3:ab:14:b2:2d:56:64:c8:a4:a6:
                    2d:e9:74:2f:ee:b7:1c:e6:1e:a9:56:53:49:73:72:
                    5b:30:3c:e3:42:c2:f8:4f:95:3e:dc:c2:c7:fc:c8:
                    e1:3c:28:17:da:d5:3f:b7:da:0c:8b:96:59:2d:c0:
                    06:d8:91:63:a4:8c:4a:0e:fd:10:1f:51:a5:37:f6:
                    ac:e1:0b:15:0b:2c:af:b8:ad:9b:13:13:0f:d0:09:
                    45:1f:55:71:4f:52:68:ca:8a:7f:f9:e7:a4:81:44:
                    b4:62:70:8d:b1:fd:26:4b:cb:59:4f:0c:ff:a1:84:
                    72:fc:05:1f:f8:09:11:f1:e8:4a:fe:86:a8:30:ba:
                    9e:41:bd:fb:29:2f:a6:72:47:d4:3f:d7:40:5c:af:
                    35:76:44:51:36:1c:22:52:ce:77:03:b3:a1:1a:11:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:4E:06:3A:6C:58:E2:F9:9A:BB:1C:5E:20:F5:67:AB:E2:C8:DF
            X509v3 Authority Key Identifier:
                keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:17:fc:d8:40:31:f8:d0:c1:a4:64:0d:1f:e9:76:47:ed:8b:
         b6:7e:40:4a:46:b8:fa:de:3a:5a:d7:0c:a3:0c:6a:93:eb:62:
         ea:db:e1:23:45:69:f9:0b:64:ab:a1:4d:0e:a4:f1:16:00:5f:
         1e:43:2f:a6:2d:b8:9f:1d:32:63:e5:07:82:1d:ab:1d:aa:e1:
         9a:bb:a3:8e:5f:59:06:67:f2:49:06:0f:9f:a1:38:74:32:bc:
         32:55:e9:58:53:3b:e0:50:a5:80:16:cd:21:d8:98:25:97:3a:
         18:9f:47:f1:a8:a7:b8:e1:3f:d1:1b:4d:d4:7e:4e:66:27:7a:
         da:3d:1d:58:95:19:4e:83:3f:38:d8:52:2f:25:e6:4b:ad:43:
         68:dd:f3:89:cc:2d:3b:f0:a7:3b:69:a1:08:82:bb:09:a9:a6:
         b8:81:17:f6:38:92:9d:41:bd:70:0b:5c:21:ff:31:99:09:4a:
         0c:73:a6:73:91:a8:59:17:fc:60:bf:aa:3d:e0:b9:24:00:fe:
         b6:29:c8:83:d3:35:b0:6e:78:68:4d:28:34:c5:55:e6:1b:a7:
         c9:2e:e1:4f:13:f9:f2:44:d5:b4:a8:84:cd:8a:db:42:68:ae:
         55:39:a8:db:04:7b:e1:41:e0:65:d1:93:1c:22:b3:f5:4e:a6:
         e4:42:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:19 2025 by rpki-client