Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.mft
File:                     25828EC0A96A4EE910BCBFF048F36176EB90EBE8.mft (raw, json)
Hash identifier:          LyUq12BeojgDbXuOq7balHnb9Q6GfYjOg9mXOgZwxds=
Subject key identifier:   4D:72:71:5A:C5:87:F0:A3:B8:D6:0D:59:D5:E6:89:CA:AD:CB:C9:82
Authority key identifier: 25:82:8E:C0:A9:6A:4E:E9:10:BC:BF:F0:48:F3:61:76:EB:90:EB:E8
Certificate issuer:       /CN=25828EC0A96A4EE910BCBFF048F36176EB90EBE8
Certificate serial:       040A5B12402664915C8BA61DA2B7EC259B3E7C1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.mft
Manifest number:          0E
Signing time:             Mon 10 Mar 2025 08:05:25 +0000
Manifest this update:     Mon 10 Mar 2025 08:00:25 +0000
Manifest next update:     Tue 11 Mar 2025 08:39:25 +0000
Files and hashes:         1: 3230302e392e37362e302f32332d3234203d3e20323734373437.roa (hash: WTf7Zi7MBqijZRCttOmXAcRoD4G0kcv1EplmUF3MwAE=)
                          2: 34352e3232382e3230332e302f32342d3234203d3e20323734373437.roa (hash: c7yGQUu4R91y8itYELz32rRvfmbjWdlUKFkFwci/GRE=)
                          3: 25828EC0A96A4EE910BCBFF048F36176EB90EBE8.crl (hash: aAtwYrg1ReBVc3ch2bQ2KmemqSzob+bnWVXehjKl3oU=)
                          4: 3139302e3131332e36322e302f32342d3234203d3e20323734373437.roa (hash: qcyv+Nl0akToWWtIX7yjKLaz2AAFqDToCiMHN39dvGY=)
                          5: 323830343a393266633a3a2f33322d3438203d3e20323734373437.roa (hash: ut+0i9xrcv/8BXHtWBWH/6wnXqGfLYISg49LCLG5JdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0a:5b:12:40:26:64:91:5c:8b:a6:1d:a2:b7:ec:25:9b:3e:7c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25828EC0A96A4EE910BCBFF048F36176EB90EBE8
        Validity
            Not Before: Mar 10 08:00:25 2025 GMT
            Not After : Mar 11 08:39:25 2025 GMT
        Subject: CN=4D72715AC587F0A3B8D60D59D5E689CAADCBC982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:44:10:98:e9:75:a0:22:69:61:27:a7:85:
                    9d:ed:e2:25:af:f7:92:5a:7b:40:a2:5e:f5:a5:c3:
                    d3:5d:0d:1a:73:0b:62:99:c7:5e:06:a8:c4:b7:57:
                    e0:dd:49:80:34:3e:12:04:5b:96:da:d0:0e:6c:b9:
                    7d:fe:3a:06:d7:fd:9d:e3:ba:aa:b2:ff:4f:65:44:
                    61:d2:c0:a6:8c:7c:94:b4:51:53:dc:25:c1:aa:6c:
                    77:b1:54:6c:82:3f:ce:4d:78:76:f9:6a:5c:0f:82:
                    90:21:b1:ee:75:d1:c9:47:e2:40:19:fd:f0:fa:dd:
                    ee:18:28:3b:01:e4:99:d3:dc:d5:05:8d:5c:12:37:
                    bc:10:33:8d:de:5e:aa:b1:e2:73:e7:d7:e8:d8:2b:
                    0e:4d:6f:45:00:81:cd:23:0b:0f:22:61:9a:17:43:
                    cf:9d:37:51:e8:5b:fd:01:7e:58:00:fa:5e:df:ab:
                    fa:59:82:54:92:43:3c:df:6f:8a:40:fc:23:48:88:
                    4f:eb:b8:42:f3:14:ff:b4:3b:3a:96:9e:97:38:31:
                    f1:5f:08:72:04:7c:61:e6:fb:f6:b6:9f:6a:4e:71:
                    8f:cc:f3:4f:a5:f3:d0:45:d9:c0:6a:e7:27:29:c3:
                    bf:62:e0:85:55:35:3e:2d:7a:a9:d0:ea:98:88:07:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:71:5A:C5:87:F0:A3:B8:D6:0D:59:D5:E6:89:CA:AD:CB:C9:82
            X509v3 Authority Key Identifier:
                keyid:25:82:8E:C0:A9:6A:4E:E9:10:BC:BF:F0:48:F3:61:76:EB:90:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGRFmfZDHXCjqPSv5v7KqUWoCrCo4SPsEjW3twVHD48k/0/25828EC0A96A4EE910BCBFF048F36176EB90EBE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:31:b8:06:28:8b:62:47:80:d4:8a:92:dd:fd:e1:64:9b:4e:
         3b:b5:b7:ff:46:31:e4:3c:85:ea:58:b0:f0:1a:f2:64:06:cb:
         a6:54:04:aa:73:08:97:a4:b6:a0:02:9f:26:50:e8:0b:5b:fa:
         ba:33:36:33:19:9f:7b:67:4a:80:fb:e9:55:4b:39:4a:2c:c8:
         5f:22:f1:b1:5e:3d:d9:ac:4f:96:74:80:ad:43:ba:bb:7d:ac:
         7d:3f:27:17:16:91:a6:41:d8:05:f2:f7:af:3d:be:e6:63:e8:
         59:d1:61:37:ad:f0:1a:19:17:1e:84:ae:24:7b:55:ea:b3:6f:
         ca:a0:2a:08:fb:8b:e9:ce:11:83:41:8e:f9:e1:c0:88:9d:10:
         cd:5a:47:10:bc:fa:ab:10:7c:b1:c8:31:b4:5e:95:89:6b:8d:
         bf:01:b1:a9:ce:47:90:2e:0b:36:91:0b:87:5f:9c:1b:3b:27:
         d8:99:12:93:67:55:22:99:4c:ad:39:e6:dc:b1:e5:0e:33:6d:
         fb:89:cd:3c:34:cf:49:54:26:58:db:38:fd:fc:2c:6e:e8:68:
         b5:76:52:30:fc:f7:1f:1e:42:f4:50:07:31:be:5f:dc:42:00:
         51:1c:e8:b9:04:0d:f9:5c:2c:7c:f0:6a:b0:3d:26:38:ba:aa:
         19:df:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:36:48 2025 by rpki-client