Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/B8A101F9ED0E552416B8664F419072D7A54C9F15.mft
File:                     B8A101F9ED0E552416B8664F419072D7A54C9F15.mft (raw, json)
Hash identifier:          LL21httS/S2gKYwVBNuU5n9ljA1yq2+3RIYjTQpGGSg=
Subject key identifier:   22:E9:63:A3:8F:E7:0E:45:1B:C3:5A:C3:67:BF:F4:8F:48:13:4A:91
Authority key identifier: B8:A1:01:F9:ED:0E:55:24:16:B8:66:4F:41:90:72:D7:A5:4C:9F:15
Certificate issuer:       /CN=B8A101F9ED0E552416B8664F419072D7A54C9F15
Certificate serial:       6CC70EC04F631524FBDB0FF4B036F68CA1D61979
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8A101F9ED0E552416B8664F419072D7A54C9F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/B8A101F9ED0E552416B8664F419072D7A54C9F15.mft
Manifest number:          22
Signing time:             Sat 29 Mar 2025 00:44:00 +0000
Manifest this update:     Sat 29 Mar 2025 00:39:00 +0000
Manifest next update:     Sun 30 Mar 2025 02:09:00 +0000
Files and hashes:         1: B8A101F9ED0E552416B8664F419072D7A54C9F15.crl (hash: dYIzTYQ/g5thYA6DiVymEW183HWzMvyZ1S5NgKztXHA=)
                          2: 34352e3136382e342e302f32322d3234203d3e20323638303437.roa (hash: iJemlEkrhnnoRSbjoLXe7iOOBehUYZ+12VwxtapotIo=)
                          3: 323830343a353732343a3a2f33322d3336203d3e20323638303437.roa (hash: bS0EDSrlbAZcWG1rvjA0+JsqNWCcI809tyBR46XAMpE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c7:0e:c0:4f:63:15:24:fb:db:0f:f4:b0:36:f6:8c:a1:d6:19:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A101F9ED0E552416B8664F419072D7A54C9F15
        Validity
            Not Before: Mar 29 00:39:00 2025 GMT
            Not After : Mar 30 02:09:00 2025 GMT
        Subject: CN=22E963A38FE70E451BC35AC367BFF48F48134A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:fd:14:1a:14:da:17:ca:78:90:c8:5e:85:
                    9e:5c:f0:31:bb:73:6d:39:a1:73:02:9f:40:d3:31:
                    9b:98:ef:30:81:7a:f2:4f:ef:71:14:92:86:bb:b1:
                    ac:72:f5:71:78:d4:58:22:20:ff:b8:34:15:9e:a0:
                    1c:4b:ad:7a:36:b8:7c:41:b3:ee:1e:40:3c:98:d7:
                    d3:b7:e3:6f:7f:e9:bb:5c:a5:df:d0:8c:54:07:06:
                    a8:f1:cf:e2:5e:6b:12:13:db:ce:3f:6e:e1:52:25:
                    00:73:94:68:d3:26:21:f0:d8:23:6f:65:22:06:96:
                    75:25:82:c6:4f:1a:9e:28:d4:0e:7f:22:77:4f:64:
                    42:55:d9:08:b8:6c:7a:0f:15:0e:08:e7:b9:0f:0c:
                    ea:64:48:ad:5f:4c:83:35:82:d8:e4:fe:d0:0d:fc:
                    be:13:35:96:d9:c4:bb:46:28:7e:6c:11:62:fa:1a:
                    bb:4c:f9:fd:82:68:b3:79:60:90:c9:4f:8e:30:5c:
                    2c:c8:18:93:b2:ea:43:18:b0:65:8e:a3:a1:b4:fb:
                    9a:90:35:e4:5a:da:68:ef:a4:f8:71:80:ee:23:f8:
                    70:70:08:14:d3:dc:cb:4a:23:f6:6e:5e:89:ce:3a:
                    7d:5f:23:9b:0e:95:cc:1e:37:53:7b:f3:70:0a:b0:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E9:63:A3:8F:E7:0E:45:1B:C3:5A:C3:67:BF:F4:8F:48:13:4A:91
            X509v3 Authority Key Identifier:
                keyid:B8:A1:01:F9:ED:0E:55:24:16:B8:66:4F:41:90:72:D7:A5:4C:9F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/B8A101F9ED0E552416B8664F419072D7A54C9F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8A101F9ED0E552416B8664F419072D7A54C9F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/B8A101F9ED0E552416B8664F419072D7A54C9F15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:d7:e0:06:b2:e1:d5:db:ca:31:c5:04:c8:0b:a4:74:8f:
         ff:73:fa:17:de:da:54:3f:76:ea:9f:6e:16:26:54:2e:ea:36:
         b7:db:73:8d:52:b2:37:a0:1b:95:c1:b7:bd:e8:db:ec:10:97:
         96:02:db:82:3b:e9:e7:8a:f4:e8:84:a1:d1:89:cd:91:fa:fb:
         46:7d:5f:48:90:9b:03:f0:ac:5a:ae:b7:dc:51:38:1d:e8:4f:
         92:bc:ed:31:c8:22:8e:67:41:d1:38:2b:6a:b7:08:f8:ba:0c:
         92:fa:6a:53:34:f8:90:22:ab:88:e2:89:ce:8f:7d:98:a7:ed:
         ac:55:40:d8:dc:80:7c:60:87:34:94:8d:93:43:5a:8b:3c:b3:
         1d:d7:73:92:0c:ed:26:2e:5c:c3:93:96:b1:10:83:0f:65:e8:
         af:fd:d4:79:ff:e9:5b:e0:f7:5b:df:e8:ee:5c:1a:d9:06:13:
         f0:98:66:72:2a:c3:96:7b:b5:1b:83:35:16:ce:c3:ea:b0:17:
         d5:5f:0f:42:07:01:e3:dc:6a:dc:6a:38:ca:71:1f:a5:ec:b9:
         0c:00:cc:40:1e:9c:6e:80:5a:a7:ed:97:a7:c4:50:3c:e0:3d:
         68:cc:52:8c:80:bd:43:d2:b5:86:61:48:0b:e5:1d:98:c9:18:
         d1:4d:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:56 2025 by rpki-client