Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/9BEA1CF5115139C1B81530020BACBC97FF588226.mft
File:                     9BEA1CF5115139C1B81530020BACBC97FF588226.mft (raw, json)
Hash identifier:          ZVaHe4tXSbydHtGWQtszHFaiJWNkavAJeljC6HZPkyA=
Subject key identifier:   0A:9D:09:B3:12:30:D8:50:7C:C8:E4:BB:AE:C4:E7:58:9B:5A:47:6C
Authority key identifier: 9B:EA:1C:F5:11:51:39:C1:B8:15:30:02:0B:AC:BC:97:FF:58:82:26
Certificate issuer:       /CN=9BEA1CF5115139C1B81530020BACBC97FF588226
Certificate serial:       3DAEAA17C98125622D1DFFEFAE7940E69F8B59E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BEA1CF5115139C1B81530020BACBC97FF588226.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/9BEA1CF5115139C1B81530020BACBC97FF588226.mft
Manifest number:          15
Signing time:             Fri 28 Mar 2025 22:04:54 +0000
Manifest this update:     Fri 28 Mar 2025 21:59:54 +0000
Manifest next update:     Sun 30 Mar 2025 00:17:54 +0000
Files and hashes:         1: 3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (hash: EzVTxufRnErPKPeMWacatUNbTqVESl7UE7561Pj0TgU=)
                          2: 9BEA1CF5115139C1B81530020BACBC97FF588226.crl (hash: LPeHkpWA/NbWXGlUn/V9+1pwP0tWWge/W4iTazcFkkk=)
                          3: 323830343a373965383a3a2f33322d3334203d3e20323731333335.roa (hash: +9Y9cnnjHswprdhnMlw6mGjoZrfD1CILd7tNblm4nTo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:aa:17:c9:81:25:62:2d:1d:ff:ef:ae:79:40:e6:9f:8b:59:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEA1CF5115139C1B81530020BACBC97FF588226
        Validity
            Not Before: Mar 28 21:59:54 2025 GMT
            Not After : Mar 30 00:17:54 2025 GMT
        Subject: CN=0A9D09B31230D8507CC8E4BBAEC4E7589B5A476C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:f3:80:84:04:36:3c:05:37:ec:e5:81:05:
                    21:b7:d8:7b:96:28:97:6a:01:7b:2d:e9:7d:09:58:
                    56:fb:4d:bd:ed:b6:76:0a:19:9f:04:ae:cc:69:dc:
                    d0:6d:e3:f3:02:f3:df:ac:a6:21:92:68:d3:62:a9:
                    f0:d2:7f:97:37:d6:60:db:04:b2:92:d2:da:a9:cf:
                    c8:4a:e5:10:a3:97:df:bc:6f:da:64:42:4b:fd:1e:
                    2a:94:59:38:5b:c1:b0:88:a6:a2:e9:a0:00:84:fb:
                    ef:63:44:64:4e:a2:f6:cc:ae:64:18:9c:55:a0:95:
                    4a:b0:b8:5b:7e:16:37:3c:ba:55:fb:ee:ad:d5:be:
                    83:06:6e:b4:f8:fb:8f:a1:be:f1:fa:b7:84:a8:68:
                    a2:8a:a3:2e:76:c5:8c:ac:08:50:22:46:40:f6:fc:
                    7f:59:24:c2:be:48:e2:28:95:0e:8f:23:e6:f2:99:
                    9d:39:00:a7:2f:eb:88:d3:91:aa:0a:18:30:f1:eb:
                    f0:45:a2:9d:0b:be:a6:99:ea:c2:d6:15:63:70:1f:
                    59:51:7b:d7:fa:d7:6f:6e:1a:2e:e1:1b:0b:8b:b7:
                    b1:99:98:67:6f:a6:a8:f3:9e:7e:1e:ae:f6:4b:a7:
                    27:1c:20:da:a9:d8:ed:7d:f5:9b:b0:46:0f:b4:60:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:09:B3:12:30:D8:50:7C:C8:E4:BB:AE:C4:E7:58:9B:5A:47:6C
            X509v3 Authority Key Identifier:
                keyid:9B:EA:1C:F5:11:51:39:C1:B8:15:30:02:0B:AC:BC:97:FF:58:82:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/9BEA1CF5115139C1B81530020BACBC97FF588226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BEA1CF5115139C1B81530020BACBC97FF588226.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/9BEA1CF5115139C1B81530020BACBC97FF588226.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b7:1c:cd:46:75:00:0f:c3:c0:65:f3:f6:1b:f3:16:79:83:
         13:20:c8:b9:c0:e4:6a:15:ee:62:b1:e0:24:bc:06:c3:74:c0:
         12:7e:01:b0:fb:00:93:c4:e4:44:b4:ed:41:f1:d0:44:74:52:
         df:e7:d8:34:f7:57:3d:74:30:67:5b:e5:b6:36:35:86:ca:7f:
         2c:a7:a9:b9:49:80:e3:82:ee:cf:62:02:b3:60:fd:67:12:ba:
         3d:59:c8:1c:5a:53:91:d0:07:02:93:7e:8f:89:2e:74:cf:c6:
         46:e0:05:2d:f5:07:a9:0c:63:a0:5e:f5:42:89:de:7c:29:ab:
         59:75:47:d2:57:a4:52:48:89:3c:2d:52:5d:05:a6:f0:18:0c:
         05:69:ac:d3:87:ce:ad:d7:04:8a:37:f9:09:4f:b9:ca:45:dc:
         72:94:7a:16:21:c0:94:c7:f5:fe:60:59:ca:b4:cf:3b:ed:36:
         5a:d0:2b:a4:d2:95:e6:e5:03:89:71:04:5f:b8:b5:3b:33:86:
         44:e5:8f:93:e5:e0:f3:bf:05:90:07:b0:d1:4d:0a:ef:a5:05:
         fe:8f:9a:d5:e2:5b:5f:33:0d:1c:80:11:f7:94:61:80:35:d1:
         ad:0f:13:13:49:32:72:a7:ee:37:06:2d:32:bd:f7:d4:64:03:
         86:e3:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:01:43 2025 by rpki-client