Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft
File:                     63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft (raw, json)
Hash identifier:          zjd9WCcVxTWJw8h4YhwHVBf+7RiBS/3ZQL7fx+3LA60=
Subject key identifier:   DF:65:57:F6:67:A3:63:C5:77:83:F3:25:77:28:1F:5F:D6:B2:90:85
Authority key identifier: 63:BA:A2:1C:6C:6C:9C:D9:90:D0:B9:F4:79:04:C1:CD:15:7C:F5:DB
Certificate issuer:       /CN=63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB
Certificate serial:       32E19A02BFC590012DB3B757EDF9DF3B68BF29A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft
Manifest number:          0173
Signing time:             Fri 28 Mar 2025 19:53:46 +0000
Manifest this update:     Fri 28 Mar 2025 19:48:46 +0000
Manifest next update:     Sat 29 Mar 2025 20:41:46 +0000
Files and hashes:         1: 34352e3138362e3131362e302f32322d3234203d3e20323639343230.roa (hash: v6FfJeuumfXIYCweQXjbAZeYc74haJwQ/f96fMOUpQw=)
                          2: 323830343a363435303a3a2f33322d3438203d3e20323639343230.roa (hash: LXnyeGKPRQl4EOPDFjU09hL9l3Vdd5/bUgxKfr+LUZw=)
                          3: 63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.crl (hash: g6bnQ9ylIpEy/ERq/lmxfODdbRoOhvsNx5HwrJA8pv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e1:9a:02:bf:c5:90:01:2d:b3:b7:57:ed:f9:df:3b:68:bf:29:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB
        Validity
            Not Before: Mar 28 19:48:46 2025 GMT
            Not After : Mar 29 20:41:46 2025 GMT
        Subject: CN=DF6557F667A363C57783F32577281F5FD6B29085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:53:0c:57:b5:51:b6:1e:99:e3:36:0b:44:
                    7b:c8:49:98:21:4b:61:6b:4d:77:ff:8d:09:ac:2c:
                    9b:b5:80:03:4b:b2:6a:9f:02:6c:eb:83:32:41:2d:
                    af:4f:cf:1b:cf:a4:4a:be:0d:5d:fd:ba:c7:ab:d1:
                    4a:0d:cf:ba:4b:d7:3b:48:a0:bf:a2:b0:3d:2b:81:
                    4e:5e:e8:b0:bd:a7:ee:5d:b9:f9:8c:cf:a2:d7:31:
                    ee:59:62:c8:a6:f9:25:83:7b:82:18:56:08:e0:c1:
                    45:41:6c:ec:f2:0d:98:80:58:c0:c5:04:0c:5e:2c:
                    b4:b4:c7:b7:76:c4:a7:25:64:79:73:0b:24:8a:f0:
                    78:b7:18:d7:90:9a:64:fe:28:68:0f:a6:67:e7:09:
                    93:2d:e0:fc:79:64:80:74:2d:16:9a:19:95:9a:1b:
                    6f:e0:2f:e4:0a:92:56:1c:ed:ce:9c:4b:4b:e7:91:
                    77:03:66:8b:fd:36:da:54:d4:f6:cf:61:02:ec:39:
                    0b:5d:b2:e1:69:ab:4b:87:ae:aa:cd:f5:bf:ee:56:
                    b9:82:be:82:ca:3a:86:3d:07:32:91:1e:72:8a:c9:
                    1c:6b:8a:63:8c:e1:36:37:5e:d5:4f:dd:ac:7d:55:
                    8d:49:39:03:fe:b2:86:74:2a:34:8a:29:eb:9b:a4:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:57:F6:67:A3:63:C5:77:83:F3:25:77:28:1F:5F:D6:B2:90:85
            X509v3 Authority Key Identifier:
                keyid:63:BA:A2:1C:6C:6C:9C:D9:90:D0:B9:F4:79:04:C1:CD:15:7C:F5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:fa:47:01:b1:6e:14:8a:d5:da:6a:e5:59:8d:1b:0e:17:
         ed:3b:78:a2:27:8b:2b:fb:60:27:87:07:cd:d7:09:7e:bc:a6:
         2a:ff:3e:21:60:8d:60:fa:96:da:c7:3b:38:6b:77:8f:82:f1:
         61:09:0f:24:4f:44:df:6e:bf:eb:63:51:9c:76:c8:95:56:ce:
         ec:2e:08:8e:c3:0c:66:63:34:99:cf:ea:33:24:37:db:be:e6:
         5d:a4:ad:f4:f8:47:30:5f:1a:de:ba:0a:83:bf:ff:7b:54:00:
         48:1f:59:a4:f1:d5:53:64:47:2f:3f:ef:96:f5:32:58:e5:e8:
         66:f3:3e:06:8e:61:54:34:28:52:09:8e:e3:51:56:dd:c6:2e:
         cd:8e:98:26:f9:62:a6:43:44:7d:40:b4:8e:9c:1f:0d:d8:95:
         4d:39:31:71:39:c5:7d:58:76:11:32:6d:26:2d:42:10:b8:ba:
         01:84:9b:31:13:b5:40:f5:04:dc:5f:cc:5d:80:5b:6d:a0:85:
         50:30:8e:43:cf:36:f0:8e:49:81:f2:be:05:75:b1:2c:29:7d:
         05:b9:54:63:c4:70:3d:74:a5:13:d0:08:bd:2b:ef:90:e5:1c:
         b6:ab:4e:73:35:55:b7:cf:c5:67:ef:58:9e:51:90:b6:14:df:
         39:b4:71:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:43:02 2025 by rpki-client