Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.mft
File:                     B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.mft (raw, json)
Hash identifier:          YerjYHZlfHryinvDghb0hHCK0x3wTyVz4ifgEmsgjII=
Subject key identifier:   A1:4C:3A:FD:D5:1E:B2:03:D9:6B:0B:B5:6E:A0:A8:4F:9E:FC:3F:4A
Authority key identifier: B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1
Certificate issuer:       /CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
Certificate serial:       162C6F403A06B38AABB4BC899351550985ABD4BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.mft
Manifest number:          0171
Signing time:             Sat 08 Mar 2025 03:17:24 +0000
Manifest this update:     Sat 08 Mar 2025 03:12:24 +0000
Manifest next update:     Sun 09 Mar 2025 06:36:24 +0000
Files and hashes:         1: 3136382e3232382e3132302e302f32322d3232203d3e20323632363938.roa (hash: FmSh+6wrD3VGBxTNCA1147hyGbahRhLf58Yuw4PB1dA=)
                          2: 3138372e3130322e33322e302f32302d3230203d3e20323632363938.roa (hash: JETGtR12imATsG7j8tsfF4lPL9V57tgrHNp349hfVeM=)
                          3: 3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa (hash: f1wTq2uA63UgU62yzr78N5Jkgfnc9H4WReFksNS9g5s=)
                          4: B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl (hash: W8Vne16eK2ihyiIG2ZHtBq7eSHrjBHTnSm5ph+ciMyo=)
                          5: 3138372e3130322e33322e302f32342d3234203d3e20323632363938.roa (hash: 0zSzFdAr7E7CjqIFW/hY7VFaisWyZahS4caz6WmHwz4=)
                          6: 3230302e3231352e3137322e302f32322d3232203d3e20323632363938.roa (hash: 9sGTE2SXmGuP/8RebPAp87XXnwswR66vizMzJWjQaBA=)
                          7: 323830343a313865303a3a2f33322d3332203d3e20323632363938.roa (hash: Kh9vjpgiTfljhFVhd2Ct35bQn9B+WLO/a/qEHFP06BI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2c:6f:40:3a:06:b3:8a:ab:b4:bc:89:93:51:55:09:85:ab:d4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
        Validity
            Not Before: Mar  8 03:12:24 2025 GMT
            Not After : Mar  9 06:36:24 2025 GMT
        Subject: CN=A14C3AFDD51EB203D96B0BB56EA0A84F9EFC3F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:ab:e6:55:f4:50:9a:1b:f7:82:09:88:4b:
                    28:bf:f1:52:95:04:4d:94:bb:06:5a:fe:5a:3a:d3:
                    d3:66:2e:b9:b0:9c:04:fc:04:96:65:ef:7e:41:b6:
                    63:48:9e:50:e5:f3:38:c1:10:82:46:21:09:bf:59:
                    e3:1c:b5:85:e0:b5:85:28:52:fe:85:b2:5c:e5:03:
                    18:29:2e:03:71:20:36:50:28:43:0e:b9:74:63:aa:
                    c8:10:77:e6:22:33:0e:1e:e7:86:23:ff:4b:c1:63:
                    d7:87:f5:79:fc:45:db:21:bb:ee:bb:52:2b:1e:61:
                    49:21:36:a9:04:c5:32:42:90:24:e7:f5:98:81:33:
                    b6:44:65:59:17:4d:b1:5d:ec:ac:fd:de:7e:4b:d3:
                    47:1d:93:a7:bf:19:81:dd:b5:ef:41:20:a5:45:0c:
                    eb:c1:13:79:da:7e:67:de:b1:21:9d:95:31:07:c0:
                    be:58:65:1e:74:5b:67:15:23:1e:45:f7:22:1d:b4:
                    b1:cc:d5:59:65:ee:31:53:4e:59:b8:e4:5b:e5:27:
                    9d:fc:57:57:82:67:66:80:fb:70:a0:64:eb:98:3e:
                    9e:5c:7c:6e:ac:0d:96:f4:8f:80:56:07:b6:54:b5:
                    9a:66:61:fc:27:54:35:3d:39:7b:9d:6d:fe:2c:24:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4C:3A:FD:D5:1E:B2:03:D9:6B:0B:B5:6E:A0:A8:4F:9E:FC:3F:4A
            X509v3 Authority Key Identifier:
                keyid:B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:45:c4:ca:db:35:92:c1:02:25:34:90:a1:d7:58:13:48:4b:
         9c:c1:b3:4a:83:7b:60:3c:0d:1c:48:73:63:61:c4:11:6f:35:
         eb:f0:37:a5:5b:df:18:ba:20:1d:02:e6:e4:da:f3:96:9a:36:
         f6:cd:3c:3a:ca:55:bd:53:59:02:d1:1c:99:56:40:30:14:78:
         af:45:f8:bf:de:2e:4b:d0:36:33:5c:c6:f5:ac:e1:d5:f8:ee:
         3a:aa:c6:62:b9:46:81:6d:bc:66:ab:c8:0e:1d:87:80:fe:1e:
         47:98:2d:5e:bd:03:38:41:57:3f:bf:f2:ee:ea:3b:1a:a9:b8:
         49:74:ec:f8:bf:e4:d7:c4:a7:a7:a4:ce:78:d4:d8:ba:19:72:
         20:df:ba:13:09:b5:00:df:84:ba:c7:76:f0:4d:25:aa:62:28:
         ee:a5:14:0a:a9:10:06:2a:a5:0e:40:6f:9f:5b:9e:57:2b:7a:
         b6:21:2c:dd:e3:3d:e4:9b:85:e3:45:36:cf:d3:a4:9b:02:f9:
         f0:db:3b:df:6f:eb:30:2e:ff:a2:95:47:a5:35:8e:ec:7b:0c:
         1d:f4:05:ed:9d:64:57:13:e8:bf:fa:b0:9d:87:8f:57:2a:b1:
         f6:ac:1b:98:84:c9:8e:e1:07:ad:af:55:f5:12:88:73:2d:fd:
         ba:c6:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:37:35 2025 by rpki-client