Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
File:                     14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft (raw, json)
Hash identifier:          VwaFhD0blkBLeIITak0Vzdm9oEo/WTnUndCeu2lrdMg=
Subject key identifier:   EB:94:13:F5:BD:29:37:66:4E:F5:AA:5C:8D:E2:F8:1E:8A:F5:99:DB
Authority key identifier: 14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1
Certificate issuer:       /CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
Certificate serial:       03010F2DC0F1424D9772DBFE8DEA1AA9B888621A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft
Manifest number:          01C4
Signing time:             Sat 29 Mar 2025 09:59:02 +0000
Manifest this update:     Sat 29 Mar 2025 09:54:02 +0000
Manifest next update:     Sun 30 Mar 2025 11:02:02 +0000
Files and hashes:         1: 323830343a313238633a3a2f33322d313238203d3e20323633343833.roa (hash: EYG6br5zwgHoi8f54PxnvldTAV0I+mIDlTjJJ5D3lHM=)
                          2: 14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl (hash: fCk4bf8WFyo9ylduz4y0CDcnkqCJbAuCPYdUV7CW9Dg=)
                          3: 3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa (hash: mbcktOJZCLHdqszA/t9rTKFJsSPBbT8Uk0pSZNNglgc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:0f:2d:c0:f1:42:4d:97:72:db:fe:8d:ea:1a:a9:b8:88:62:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1
        Validity
            Not Before: Mar 29 09:54:02 2025 GMT
            Not After : Mar 30 11:02:02 2025 GMT
        Subject: CN=EB9413F5BD2937664EF5AA5C8DE2F81E8AF599DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:d1:aa:8a:d5:0f:f1:64:0a:d1:b7:5d:a5:
                    19:9e:79:88:39:61:49:7f:5c:cf:e2:95:ff:7a:11:
                    4a:1c:58:d9:e6:21:bd:a2:99:6f:45:eb:4c:b6:fb:
                    7b:f3:c8:27:58:e2:2e:59:1c:ab:0c:60:7a:ee:e8:
                    9d:96:1d:d1:9e:bb:e9:85:d7:58:ac:67:33:ea:a1:
                    56:c3:27:2e:ca:23:08:2f:eb:6a:01:9b:15:c3:c4:
                    23:87:27:b9:89:b1:ef:e1:66:2a:56:cf:00:06:cc:
                    f4:8a:ad:7c:c8:64:d4:8f:ef:60:6b:bc:e6:85:23:
                    98:51:36:9e:0f:cc:90:f5:be:01:82:70:b1:4a:f6:
                    ec:95:0e:ee:ee:02:0b:da:b7:bc:0a:9c:23:2d:09:
                    8a:2a:45:1a:9b:cc:47:89:80:55:da:d7:8a:68:9c:
                    a6:81:08:c7:ed:24:92:21:6f:4a:e8:5b:78:8a:56:
                    5b:dd:aa:1f:77:8c:93:60:d9:06:11:6e:cf:4d:b0:
                    75:d0:d0:b9:9f:dc:d3:e8:22:de:ff:b4:54:40:86:
                    dc:7a:3e:24:e6:c7:8e:2e:b3:9b:df:45:0e:ae:d9:
                    47:f8:59:69:2e:fe:fa:b4:23:ac:95:9f:10:8e:c6:
                    08:a2:b2:f7:55:6a:99:ae:ba:0a:4b:36:b7:f9:5e:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:94:13:F5:BD:29:37:66:4E:F5:AA:5C:8D:E2:F8:1E:8A:F5:99:DB
            X509v3 Authority Key Identifier:
                keyid:14:DA:F3:CA:35:6C:52:B0:3F:2B:DD:7F:43:D3:D5:BC:B2:4D:25:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/14DAF3CA356C52B03F2BDD7F43D3D5BCB24D25C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:7d:96:ef:7c:70:b6:67:6e:fe:07:a7:1d:00:1d:80:5c:
         b9:2d:40:9f:24:93:14:a8:98:85:6e:e5:0e:ec:cf:99:6d:0a:
         a4:f6:ba:91:5e:8f:e4:de:7a:a7:81:b4:d4:ba:ea:2e:2f:5c:
         52:d1:1d:32:42:f5:ad:db:b6:6a:6d:04:a3:05:72:47:6c:02:
         64:3a:7a:26:ba:4d:48:7d:e8:2a:db:97:77:e7:3b:87:6f:71:
         4d:6e:7a:c5:2b:f8:19:15:ad:4d:96:f0:ac:6f:e9:9d:d6:07:
         59:b3:9d:34:4d:10:2d:97:d4:c3:fb:f9:5b:ef:1f:ac:1f:0e:
         a5:5b:a4:f1:9b:c6:fc:a5:ce:7f:9e:dc:17:27:1b:c7:e9:6f:
         20:14:8c:41:a0:8f:af:66:d4:89:5f:d9:da:56:0e:c1:38:4f:
         76:31:a2:ae:7a:39:a7:87:13:b1:b9:7c:3b:94:9d:ed:5f:7f:
         89:8a:54:75:09:cf:0c:c0:b4:fd:2c:3b:5a:ca:7a:75:f7:d7:
         f2:9a:e7:92:f2:8d:7e:41:44:18:5f:09:9b:29:a9:51:63:70:
         9d:96:0a:2a:21:b1:df:d3:90:8b:f8:ba:5c:e2:4e:d8:ce:7d:
         45:ad:9e:5b:a0:b5:01:ba:fa:8d:71:40:d6:b2:c1:bb:91:1a:
         15:d8:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:51 2025 by rpki-client