Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
File:                     968400C9DFC16D643EF5C94C34F993F17C7568AA.mft (raw, json)
Hash identifier:          Bo6Ez5qEA7rAc6ld7vtLEhbTwjsjh+DwbGP5Iu4He5E=
Subject key identifier:   71:7A:D9:A5:BF:D1:7F:AC:0B:34:15:81:7E:4D:3B:E4:DC:80:A6:07
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       381899ECE472B3EBE90504C0D78A241F899FFDCF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
Manifest number:          01AB
Signing time:             Sat 29 Mar 2025 01:26:19 +0000
Manifest this update:     Sat 29 Mar 2025 01:21:19 +0000
Manifest next update:     Sun 30 Mar 2025 02:04:19 +0000
Files and hashes:         1: 3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (hash: Mmf0wY+e+8w3dCxqRke4ElAH1fJC6TQyPDFd2Pf/eVg=)
                          2: 3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (hash: 3TsKJXzw+Lo1FzgWFUPZsc0aIm6daoVgFsX7/Aq5Cto=)
                          3: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (hash: teCtB4Fn2kN03+SlFCT3BKScUrU3aR8E10Lhca0QEk4=)
                          4: 968400C9DFC16D643EF5C94C34F993F17C7568AA.crl (hash: 5NCVOi0DhwkGl+1jm/ZXMof/L4cNMMx/n56fv/bLTFE=)
                          5: 3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (hash: LiG9D7WWyl09FlnwL2JZe7Bu4MCI90Fk5jvv1rcives=)
                          6: 3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (hash: qqgKdsyIff38cUlA7BLQo5VrkOAlfEIgoXntb+yJPZ4=)
                          7: 3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (hash: cYUDQcdZeQEMofRAFnaFfnssnLgM8qR5q1TNmp4mubc=)
                          8: 3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (hash: LKNp0pTU4RS7haWecXJ8peLUpLWVWtfJHP22XQsML4Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:18:99:ec:e4:72:b3:eb:e9:05:04:c0:d7:8a:24:1f:89:9f:fd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Mar 29 01:21:19 2025 GMT
            Not After : Mar 30 02:04:19 2025 GMT
        Subject: CN=717AD9A5BFD17FAC0B3415817E4D3BE4DC80A607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:20:c9:9e:7f:95:a7:be:7d:0d:57:f5:08:
                    36:cd:1e:2a:61:ed:96:99:60:5e:e3:1a:66:7b:cf:
                    ba:a5:24:94:53:f8:4a:00:ca:e1:7b:a3:39:5d:f1:
                    c2:89:31:46:4f:20:04:d9:1e:07:3e:05:1e:ce:39:
                    16:67:b4:86:67:e8:93:08:b6:4b:52:42:fe:e2:5b:
                    0d:3c:cf:a8:1c:32:16:fb:a8:c5:3a:01:3d:ab:0a:
                    a0:85:87:dd:fb:ec:31:40:fa:b9:c3:a9:a0:25:f1:
                    65:c5:4e:f0:67:79:77:fe:ef:f4:fb:91:e7:f2:5b:
                    4b:81:cb:34:3d:0b:f9:65:d2:6e:23:0b:21:8a:56:
                    ff:9a:03:4b:3f:32:52:47:53:66:38:89:4f:9f:e6:
                    03:ae:c2:03:ec:0a:3a:56:af:94:df:d4:47:3e:36:
                    65:60:98:f9:e8:d0:9a:f3:7d:a2:92:f5:2a:c2:66:
                    a3:3e:8c:ef:03:3e:ae:f5:b9:43:05:cf:5d:a7:c0:
                    07:88:0a:c8:4d:e9:86:07:df:94:a7:a0:fb:52:ad:
                    53:38:6b:97:6c:5a:a3:95:d5:38:cc:f0:ee:53:be:
                    65:72:ba:d8:76:3b:59:6e:8e:05:1c:cf:6f:9e:be:
                    37:b8:f8:22:c4:f3:29:a7:d7:02:f0:2d:e7:bb:e2:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7A:D9:A5:BF:D1:7F:AC:0B:34:15:81:7E:4D:3B:E4:DC:80:A6:07
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:37:2c:02:a9:7c:7c:65:c0:a0:e5:cc:d7:9c:92:94:23:b8:
         0f:63:25:03:86:5c:fa:ee:8c:dd:50:d1:9a:55:86:81:c7:d1:
         78:0a:66:bd:a7:51:de:bb:cb:1a:8d:e3:fb:5f:0e:35:ab:41:
         26:b0:8e:8e:94:a5:02:ef:6c:2b:95:28:2f:22:fa:f4:ac:96:
         c0:d7:71:ff:36:c6:3a:9a:48:42:4c:f4:3f:d1:53:72:a0:47:
         e9:a1:f8:14:60:2a:81:51:cb:56:7e:3a:7f:db:d9:75:89:e8:
         8c:ca:9d:de:c4:d3:05:7c:74:6e:09:7d:14:fe:fd:90:25:ed:
         43:22:52:67:07:2b:79:81:bf:24:9e:e8:23:af:7a:0d:21:92:
         89:d5:a1:85:62:42:f2:54:fd:8e:ab:7a:75:0f:10:3c:b6:7e:
         dd:b6:62:21:4b:0c:8f:4a:c6:26:2b:f5:bf:a4:a3:28:22:70:
         66:c4:ac:42:27:00:fd:ee:11:34:88:3d:2d:3d:8f:1b:c1:80:
         0d:0e:ed:43:64:77:7b:52:c4:2a:32:aa:11:22:38:20:13:a7:
         10:ee:fd:bc:50:17:5b:04:97:1f:a6:b4:df:1d:c1:ae:38:c3:
         86:32:51:0a:df:5a:88:18:63:8a:c6:2a:45:61:41:f4:d7:80:
         68:47:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:40:29 2025 by rpki-client