Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/2129B6338FC6405D66B55C1607DDA84907C08B48.mft
File:                     2129B6338FC6405D66B55C1607DDA84907C08B48.mft (raw, json)
Hash identifier:          1m3rz+qokNEfuS471QhokQK1n/z2yN/5jlvGXn/r6M4=
Subject key identifier:   54:7D:0A:96:D4:14:A6:C5:CB:E7:D3:7E:09:E8:C9:C4:91:DF:4D:70
Authority key identifier: 21:29:B6:33:8F:C6:40:5D:66:B5:5C:16:07:DD:A8:49:07:C0:8B:48
Certificate issuer:       /CN=2129B6338FC6405D66B55C1607DDA84907C08B48
Certificate serial:       6FE95B8E71AB904C95F44CA4424FFF1BDCDF9531
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2129B6338FC6405D66B55C1607DDA84907C08B48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/2129B6338FC6405D66B55C1607DDA84907C08B48.mft
Manifest number:          0100
Signing time:             Sat 29 Mar 2025 00:54:32 +0000
Manifest this update:     Sat 29 Mar 2025 00:49:32 +0000
Manifest next update:     Sun 30 Mar 2025 04:19:32 +0000
Files and hashes:         1: 3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa (hash: 4Kjw8lSRWWko+sX5xwUOkrIOcpfGR7nT+FQkAksiqYo=)
                          2: 323830343a333561343a3a2f33322d3438203d3e20323636323938.roa (hash: ETpxKZnbblPuvqtbbEo6VJ1XA5IjqivWzDmUXSNG6tM=)
                          3: 2129B6338FC6405D66B55C1607DDA84907C08B48.crl (hash: VI0xrfXGflG54l/o4F+6tGBiaQW+blRsAXacjO9tpAk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:5b:8e:71:ab:90:4c:95:f4:4c:a4:42:4f:ff:1b:dc:df:95:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2129B6338FC6405D66B55C1607DDA84907C08B48
        Validity
            Not Before: Mar 29 00:49:32 2025 GMT
            Not After : Mar 30 04:19:32 2025 GMT
        Subject: CN=547D0A96D414A6C5CBE7D37E09E8C9C491DF4D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:0e:11:4d:f5:62:d2:2b:4d:a8:9a:19:2e:
                    d5:1b:c3:da:ce:59:1b:f8:3e:95:b5:5a:bd:b5:8f:
                    78:0c:63:67:84:b1:4a:46:e1:be:5a:76:52:af:ea:
                    99:2b:2c:2b:95:9f:cf:dc:c4:2b:d1:9c:51:34:1b:
                    36:da:a1:9b:c5:e1:d0:93:a8:c4:d4:27:44:74:5f:
                    57:4c:dd:8b:c5:c6:53:df:e7:5b:a1:45:77:c6:db:
                    30:9f:58:10:b7:2e:39:db:1f:32:15:93:5b:fe:37:
                    50:18:34:10:bd:f8:ef:c0:33:be:a4:49:e7:ce:c2:
                    65:5c:9d:2d:94:f3:d4:71:1b:eb:53:45:ad:b8:1f:
                    f9:d1:ae:3a:2d:a7:53:c6:29:88:58:82:fc:e2:f3:
                    6a:4a:fe:01:50:af:a9:39:68:e4:89:68:79:12:22:
                    b1:1e:3d:f8:74:4c:67:0e:ea:94:59:a4:c3:c1:6d:
                    c2:61:7f:1d:1c:17:8f:c5:86:56:a8:99:40:99:6a:
                    42:e8:1a:c2:14:18:c5:64:7f:e9:ba:a8:12:b1:03:
                    7f:05:db:fb:26:4d:51:e9:7a:f1:5d:ba:2c:03:2c:
                    17:73:39:37:a7:dd:2c:ea:63:c3:38:d2:c7:25:a7:
                    cc:67:bb:40:e8:1d:d2:94:77:bc:f5:86:c9:d1:a6:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:0A:96:D4:14:A6:C5:CB:E7:D3:7E:09:E8:C9:C4:91:DF:4D:70
            X509v3 Authority Key Identifier:
                keyid:21:29:B6:33:8F:C6:40:5D:66:B5:5C:16:07:DD:A8:49:07:C0:8B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/2129B6338FC6405D66B55C1607DDA84907C08B48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2129B6338FC6405D66B55C1607DDA84907C08B48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/2129B6338FC6405D66B55C1607DDA84907C08B48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:d1:62:12:0a:a4:8e:20:a9:b6:37:15:d9:4f:b5:12:4f:
         a5:52:43:b1:e4:9e:9b:45:e8:cd:02:3d:bc:88:fc:fd:d8:d7:
         4d:a4:d9:84:9d:20:70:ce:bf:73:8a:dd:4d:a3:4f:14:d7:5c:
         fa:64:61:d6:b6:c2:0f:e1:b7:89:bb:59:da:01:1f:60:55:a6:
         73:e0:28:2f:d9:34:dd:fa:bb:bb:0c:ba:74:7d:ea:1d:1c:20:
         ae:0e:e4:db:88:9f:33:96:17:cc:87:a8:57:60:1a:a3:d5:43:
         69:1e:1a:2e:6d:de:82:c0:86:24:1f:be:54:2d:7f:fb:ce:ed:
         b4:12:e6:0f:be:19:88:cd:c1:58:6c:2b:31:f8:aa:c1:37:cd:
         74:68:23:83:c9:4e:48:50:cd:69:37:09:4f:ab:55:3b:33:b9:
         19:61:9c:4b:66:65:4c:6a:ad:ba:8d:de:43:1c:c5:6e:9e:ba:
         ab:94:4f:ec:ae:46:03:24:5f:08:41:7f:78:4e:6e:3b:63:07:
         4f:d8:81:9c:62:0e:a8:4f:5d:9a:8c:ff:60:b6:9f:ce:40:6d:
         12:bf:b2:18:4b:3f:4a:ca:03:dd:b2:73:94:19:e6:7c:93:1b:
         56:5d:32:66:ed:5d:1b:d9:38:61:20:3f:f1:ec:90:a8:ee:61:
         be:89:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:46:11 2025 by rpki-client