Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
File:                     CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json)
Hash identifier:          TOE809xcFYx8aoKWNBYgtVgiML25MZGQGny4CVFNms0=
Subject key identifier:   02:61:38:60:5E:10:B8:70:8D:47:15:AB:11:C3:98:B4:2A:86:3D:13
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Certificate issuer:       /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial:       5CA0131B5B7EA686B931E3E0F928CF2185BC3D95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
Manifest number:          01E1
Signing time:             Sat 29 Mar 2025 08:22:22 +0000
Manifest this update:     Sat 29 Mar 2025 08:17:22 +0000
Manifest next update:     Sun 30 Mar 2025 10:00:22 +0000
Files and hashes:         1: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: bK8Cz7DO2vpPSvti5NQTRWAsm2JzGVmmUrCJ1aCRY88=)
                          2: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: Bhu/eGNOOWFc2ep8aUehLXvNs4ymREZ2pdLGTh+BKL4=)
                          3: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: VJdH/xHpD6ecg3kwn9yL7bslKKlhAKJoZBYlUI+LMxk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a0:13:1b:5b:7e:a6:86:b9:31:e3:e0:f9:28:cf:21:85:bc:3d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
        Validity
            Not Before: Mar 29 08:17:22 2025 GMT
            Not After : Mar 30 10:00:22 2025 GMT
        Subject: CN=026138605E10B8708D4715AB11C398B42A863D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:eb:f6:56:79:f6:a0:28:3a:b0:ba:28:26:
                    f6:7c:22:5c:1e:fa:60:a6:df:ce:19:d1:a5:48:61:
                    05:8f:30:8f:00:70:72:b4:a1:53:13:04:79:9c:0e:
                    1e:1d:8f:9e:91:59:52:f5:a2:29:76:e4:cd:c1:fe:
                    e8:7e:1c:79:d5:2b:f0:bc:40:2e:56:7e:7f:cf:4d:
                    fe:19:ee:5f:20:e2:77:a5:5d:ee:63:ae:b5:31:77:
                    c1:88:90:81:2f:a2:64:a3:83:35:0d:80:4d:dd:83:
                    f9:c0:df:30:9c:82:1e:29:d3:fe:47:e4:e7:ba:04:
                    f3:b0:37:14:d2:aa:9b:40:ce:64:60:4b:da:11:ba:
                    6f:ba:b7:98:21:2e:04:8e:f7:57:b2:22:76:b2:6f:
                    96:9a:86:a3:ed:a6:44:fa:a0:15:8b:bb:76:56:b2:
                    9a:68:42:fa:76:af:fa:50:4f:c1:98:f6:53:39:da:
                    55:a7:df:55:90:85:63:cb:e1:a3:63:2c:57:a8:e4:
                    f6:6c:3a:d6:66:94:fc:f9:cd:b6:16:aa:bf:df:97:
                    36:76:ac:b7:f9:5e:68:41:ee:6d:55:6e:46:4a:64:
                    65:5c:da:8e:6d:5f:e4:85:c7:79:ea:6e:70:42:36:
                    b7:2a:4c:89:d1:e3:5d:9f:b4:c0:bf:b4:65:4d:c4:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:38:60:5E:10:B8:70:8D:47:15:AB:11:C3:98:B4:2A:86:3D:13
            X509v3 Authority Key Identifier:
                keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:c4:21:36:44:db:db:ba:24:c1:6b:9c:d8:c8:05:4d:64:
         73:e7:94:a3:1d:7e:e1:a3:2c:c1:a8:9a:c0:3c:57:49:d6:ab:
         9c:34:c1:36:31:86:f9:1b:8d:9a:2f:f4:13:04:45:17:7b:98:
         be:21:fa:24:b9:43:27:08:12:9c:6e:f5:25:58:e7:aa:5a:fd:
         be:b5:ee:63:24:08:25:48:51:b9:f0:6a:3d:a2:72:33:2e:2c:
         18:0d:4d:fe:3b:a7:ed:b4:71:21:d7:41:a3:43:74:c5:65:48:
         26:27:39:f1:d6:61:ec:40:39:32:c4:51:c4:1b:2a:b4:71:13:
         01:e1:06:0d:e7:42:1e:58:b6:fe:6d:40:48:8c:84:04:4c:a8:
         c2:34:7a:8d:7d:d3:95:14:32:33:93:d3:1e:ea:d2:e8:bc:1d:
         03:dc:3b:b6:1d:91:12:cb:a4:20:82:a6:c2:a6:8d:63:0d:06:
         f3:ec:e0:c2:10:01:2c:e6:b6:e4:fb:54:4e:b0:50:4f:ac:23:
         83:02:3a:35:b9:28:81:e9:9f:2e:e6:ed:64:3d:ca:3a:87:18:
         89:a6:e7:6f:be:7f:20:3a:76:b7:e9:5a:d9:8b:8d:5a:e5:f5:
         99:63:0d:da:54:d7:dd:2b:ac:aa:ba:73:d9:f7:8e:30:06:90:
         d6:fe:83:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:16:19 2025 by rpki-client