Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft
File:                     0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft (raw, json)
Hash identifier:          uVznYXeZbmYKMoMHeqPT+HOoOw9WVfjNAY9pO2NqNFY=
Subject key identifier:   F1:47:5E:36:71:11:74:5D:8E:3C:09:A5:31:6D:99:9B:1F:2A:DB:C1
Authority key identifier: 0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC
Certificate issuer:       /CN=0D9A4BD6F2310AD615675874C9AA26E744205AAC
Certificate serial:       6F3BF2C204DC0B96E2AEDB790FED5A951E4775E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft
Manifest number:          58
Signing time:             Sat 29 Mar 2025 09:12:44 +0000
Manifest this update:     Sat 29 Mar 2025 09:07:44 +0000
Manifest next update:     Sun 30 Mar 2025 11:25:44 +0000
Files and hashes:         1: 3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa (hash: dn3WYXJyj65U1zFjuNpdTIpCem+Ty5L2NVXRyajJX1w=)
                          2: 0D9A4BD6F2310AD615675874C9AA26E744205AAC.crl (hash: NM7jQjCIRI8il8iRzHnRehpAYAS4u88nM0Xp43sOsTI=)
                          3: 323830343a366466383a3a2f33322d3438203d3e20323730353637.roa (hash: lyrsv1Nw2TUVJluB9JqIqHS8NbS1KGzu5cy2eTOsBFw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3b:f2:c2:04:dc:0b:96:e2:ae:db:79:0f:ed:5a:95:1e:47:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9A4BD6F2310AD615675874C9AA26E744205AAC
        Validity
            Not Before: Mar 29 09:07:44 2025 GMT
            Not After : Mar 30 11:25:44 2025 GMT
        Subject: CN=F1475E367111745D8E3C09A5316D999B1F2ADBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:d4:ef:3b:4d:64:69:90:c5:65:67:71:cf:
                    a9:87:8f:75:d7:33:d8:4d:bb:b9:f0:c3:70:af:38:
                    dd:f6:94:55:e6:02:2e:a8:ee:61:17:8d:63:0b:fb:
                    59:a8:3d:7d:89:fa:19:5f:18:32:19:8f:9c:e9:a1:
                    30:d0:c4:38:fc:ef:03:6b:b4:20:06:34:a3:68:31:
                    91:ed:83:37:93:d9:ce:8a:65:ec:8f:5c:83:a5:19:
                    4a:64:13:4a:a4:ae:7e:92:62:19:2d:73:1b:74:9d:
                    4e:86:9a:ea:f3:3d:46:e1:05:bd:23:74:3b:a1:5f:
                    00:60:d1:81:37:4f:92:be:a1:5c:cc:84:48:c1:40:
                    e9:88:9a:dc:fc:6a:06:81:3e:68:69:67:0c:38:33:
                    48:d4:c7:f7:10:a8:07:d9:3e:69:4d:d4:0b:78:1a:
                    48:e6:9f:42:e2:1e:7b:8c:19:b8:54:1e:95:8d:79:
                    43:06:a9:24:45:58:37:a7:5d:aa:d9:73:87:38:1d:
                    05:e1:4b:f2:da:88:e2:17:fc:00:8b:fb:e5:41:78:
                    ed:b9:f3:5d:99:97:a5:e1:aa:e2:01:cb:5d:5e:be:
                    cf:73:97:ae:5d:22:55:d9:8c:94:bf:5f:82:72:46:
                    c1:4e:ee:c1:82:a8:d6:55:54:65:43:24:e6:6e:a2:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:5E:36:71:11:74:5D:8E:3C:09:A5:31:6D:99:9B:1F:2A:DB:C1
            X509v3 Authority Key Identifier:
                keyid:0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:ce:ef:cf:53:13:7a:31:f9:95:09:92:2f:e7:d5:ca:e7:
         cf:41:0b:66:2a:64:ed:36:66:f1:3e:e4:f5:33:d8:a6:78:3a:
         97:d5:75:ee:81:09:ee:e7:ef:60:2b:b2:82:70:64:a9:66:a1:
         f7:6e:b4:9c:4c:98:8d:8f:c5:08:94:c6:95:1b:4d:7e:2a:90:
         a7:b6:0e:8b:07:78:4e:a9:c4:63:6e:0f:3c:18:1d:72:d0:70:
         0b:2b:b5:cf:ca:ba:83:95:76:d3:cc:a6:77:bb:f7:c8:ee:4d:
         f4:ab:87:49:a4:d4:82:50:ae:4d:8a:9d:e0:26:c3:4d:ff:5f:
         ea:45:31:8d:aa:80:0c:18:a1:72:2b:cb:b0:7f:2a:a4:ae:2c:
         1b:c2:ff:0a:c9:ed:fe:34:4b:a4:07:a9:8d:b6:83:a4:cc:89:
         7a:4c:ec:85:d2:ac:46:9d:0f:7a:e3:82:55:aa:47:01:0c:1e:
         48:1e:1b:71:5d:ef:bb:31:39:32:4e:93:87:16:a3:b3:cc:06:
         00:e7:35:c6:43:81:3b:2c:31:0b:4f:f2:4b:d4:a3:05:c5:c0:
         e0:1b:b4:ef:bc:6c:ae:49:11:69:df:a7:4c:6c:d2:d6:bc:5e:
         26:ca:81:b3:36:b8:75:e3:5b:c8:60:0b:81:d5:af:0e:69:b2:
         56:85:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:52 2025 by rpki-client