Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
File:                     D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft (raw, json)
Hash identifier:          VVsYxTPoaspy0jwvExXxs06xQjawnIIIgPBrRZuTlKc=
Subject key identifier:   BA:19:A5:C0:CD:A1:48:01:8F:94:14:FF:98:65:A2:FB:61:11:46:EC
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       74B246331C8E67D610A18544062F45201A05746A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
Manifest number:          01DF
Signing time:             Sat 29 Mar 2025 00:20:01 +0000
Manifest this update:     Sat 29 Mar 2025 00:15:01 +0000
Manifest next update:     Sun 30 Mar 2025 01:21:01 +0000
Files and hashes:         1: 34352e3136312e31362e302f32332d3233203d3e20323638343436.roa (hash: 1CzNXgWhk9oZGz1KoALNkPbt3zsK0qHsuYqvOHZiX3s=)
                          2: 34352e3136312e31392e302f32342d3234203d3e20323638343436.roa (hash: b8A7c2G4rRLLY9s5IxFy2/pt/S3YOLZGfzuUXsuSSPQ=)
                          3: 34352e3136312e31362e302f32322d3232203d3e20323638343436.roa (hash: 7mW6GgmdpTy8xrB7HYIMl78bBZ8D9QMG24O4fX2WVuM=)
                          4: 34352e3136312e31362e302f32342d3234203d3e20323638343436.roa (hash: 7SGkSlacWUQQyGI+qmtr+4PPigjKvPlRFZz06qT/lCY=)
                          5: 34352e3136312e31382e302f32342d3234203d3e20323638343436.roa (hash: Zaf3WBK8Cu60rwu44dz0Q9nRvboU9Le/x/7IfKFuEt8=)
                          6: D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl (hash: HCBBc+b8sZLsA7bbRCwTkBbL6ng9SXl8bq6gpf43mJo=)
                          7: 34352e3136312e31382e302f32332d3233203d3e20323638343436.roa (hash: cc802LqqKsx9adBojiHBF1OMXl6Go/IvgmeRpVMr3js=)
                          8: 34352e3136312e31372e302f32342d3234203d3e20323638343436.roa (hash: Pwgd6MsJww5Fx4SaCeg0SDZdp82fszo7iicJv3ejyDc=)
                          9: 323830343a353135383a3a2f33322d3332203d3e20323638343436.roa (hash: VAJsX5JYRSYV7szlpVQYH8EOeslfSvdfynMC8a8dFuc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b2:46:33:1c:8e:67:d6:10:a1:85:44:06:2f:45:20:1a:05:74:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Mar 29 00:15:01 2025 GMT
            Not After : Mar 30 01:21:01 2025 GMT
        Subject: CN=BA19A5C0CDA148018F9414FF9865A2FB611146EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d8:38:ce:2f:5b:ec:38:52:13:c8:27:b5:87:
                    69:54:61:0f:3b:cf:77:98:73:61:97:21:83:e4:e8:
                    44:a6:fa:61:04:a6:83:a7:87:00:c6:63:1d:37:80:
                    58:50:4a:58:49:5e:7c:19:01:c0:c8:9c:ea:94:8e:
                    df:2b:b5:d9:62:99:59:f2:89:d4:65:48:65:4a:61:
                    9b:1e:21:25:60:40:4c:50:d8:52:2b:57:c0:70:22:
                    31:09:cb:a2:af:33:9b:4d:20:73:e7:12:15:8d:8f:
                    a9:f2:73:6a:b8:a1:68:eb:b9:63:33:0b:63:4a:e4:
                    ce:07:f6:2e:f9:db:83:a9:83:ae:71:28:f0:e8:b9:
                    a6:3b:04:4e:5c:db:f3:38:ce:81:dc:5c:5a:73:e9:
                    d8:4d:b2:31:8f:72:30:4e:3e:54:b8:4d:32:df:08:
                    3f:b0:76:5e:a8:cd:92:f9:5f:54:c2:13:9d:8d:71:
                    07:0a:db:53:03:ce:db:07:7d:f2:5a:cf:f8:6b:0b:
                    de:29:9c:73:77:b7:e9:31:9e:28:c6:4e:85:52:61:
                    4f:43:45:e4:ff:39:49:67:a9:da:2c:57:38:44:9b:
                    72:19:e6:2e:f5:19:0b:19:29:14:2e:ce:e8:e0:1a:
                    27:0e:8d:ae:10:9f:22:27:72:d3:de:ec:83:d8:4c:
                    e7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:A5:C0:CD:A1:48:01:8F:94:14:FF:98:65:A2:FB:61:11:46:EC
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a2:4e:e8:8d:f0:7f:b8:84:82:b3:3f:0e:4b:2d:25:3b:78:
         50:20:83:7c:a6:c8:21:59:e2:13:7b:a4:7e:86:69:8b:80:9a:
         f2:76:10:bb:81:f8:52:57:02:84:a4:51:57:12:f0:86:3c:ca:
         b0:f6:e6:59:f0:fa:2d:e4:ed:6c:96:4b:dc:a6:e3:8d:e5:60:
         00:43:ee:0e:cf:0d:15:d0:dc:af:82:d9:54:0a:a4:63:90:c4:
         ce:9b:a9:5b:b9:34:ed:b5:5a:31:0b:08:16:52:96:26:a4:da:
         04:51:eb:49:cf:5b:a6:d0:50:00:5c:43:0a:f8:ce:79:65:80:
         70:84:d7:11:d6:8f:e9:57:cb:38:51:27:38:6f:12:46:85:a5:
         8d:1f:39:d1:2a:c8:7c:24:6b:8c:2f:0d:f4:72:40:15:93:6a:
         3c:45:30:e4:4d:13:97:2e:43:27:23:7f:ec:ef:a7:ff:01:0d:
         c1:3f:35:8d:95:8c:ba:2c:2a:63:5e:82:27:57:73:f8:17:7a:
         7c:11:e1:49:fa:80:e7:38:4c:64:c0:d4:1f:38:6c:87:78:bc:
         8e:5e:83:b7:0d:08:7c:3d:8d:00:dd:5b:85:47:ef:a8:1a:a8:
         28:a0:6d:80:eb:a2:be:ee:b8:67:d5:e7:5b:c9:15:68:76:eb:
         80:8a:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:11:26 2025 by rpki-client