Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
File:                     864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json)
Hash identifier:          adIRjssf3kXxzvmaV3HzRQch3R9bx18Xgbi8TKJcChc=
Subject key identifier:   54:92:6D:AE:36:0E:FC:D4:AB:FB:34:DE:FD:88:DC:52:56:4E:B2:1C
Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
Certificate issuer:       /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Certificate serial:       4567A7BF1FE889D8F70759DBAD3C0273E2E4B0C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
Manifest number:          47
Signing time:             Fri 28 Mar 2025 22:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 21:55:07 +0000
Manifest next update:     Sat 29 Mar 2025 23:43:07 +0000
Files and hashes:         1: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: e1XjvkH2G61dqhOHqc4pF2YHXIhwmms0v4hSF8s9XzI=)
                          2: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: CYuNLddwrzkuSQOvAtfbs86zalQgYf/hON8i+CLWP1M=)
                          3: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: U2X+DNMG/Bb1Kgy1CKCKBiUdZyIh3tpWZrlBBVlp8/0=)
                          4: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:67:a7:bf:1f:e8:89:d8:f7:07:59:db:ad:3c:02:73:e2:e4:b0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
        Validity
            Not Before: Mar 28 21:55:07 2025 GMT
            Not After : Mar 29 23:43:07 2025 GMT
        Subject: CN=54926DAE360EFCD4ABFB34DEFD88DC52564EB21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:d7:e7:5b:86:e7:ae:4c:8f:1b:de:36:c6:
                    77:06:11:e4:b2:2f:f1:a2:e0:a2:b2:97:4d:a8:2b:
                    e4:98:ad:aa:a7:6d:4d:a7:17:a5:94:ee:91:bc:37:
                    a9:34:b9:c8:24:09:87:f2:d9:d4:ad:7c:30:37:91:
                    95:62:20:f4:1f:0b:cb:82:9f:ac:ce:98:3d:b0:63:
                    04:d8:2f:bd:7b:e2:92:4c:ce:2a:29:bc:12:bf:e3:
                    4a:4b:48:29:f5:a7:98:b6:6c:70:8b:e0:e4:71:c3:
                    bd:39:f5:7c:62:5e:80:41:a0:04:d8:5a:92:cf:c6:
                    27:6a:16:17:06:bd:95:d8:76:0d:d1:f9:d6:cf:0a:
                    af:b0:50:bc:c8:a7:aa:13:ab:0e:d0:d0:97:36:2a:
                    6d:68:77:a5:9e:e4:ae:98:1a:8e:81:3b:48:71:82:
                    ff:05:77:09:25:7f:d1:73:c2:cc:62:6b:3f:fb:cb:
                    54:9d:f9:aa:aa:b0:92:28:f5:a6:8b:75:7b:3e:32:
                    87:cb:3f:bc:e0:5b:77:62:60:9e:50:72:8a:b0:4f:
                    05:1d:83:f6:49:7b:b9:ac:0b:1c:f4:96:68:b3:cd:
                    8c:a0:8e:02:05:b4:95:73:99:6c:1a:2a:47:59:82:
                    6e:51:7f:9d:53:29:f1:45:f6:d5:6d:05:53:9f:b3:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:92:6D:AE:36:0E:FC:D4:AB:FB:34:DE:FD:88:DC:52:56:4E:B2:1C
            X509v3 Authority Key Identifier:
                keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:00:4a:1e:df:5c:e2:9f:82:d0:87:f2:ad:10:c4:3c:11:
         bb:ad:93:0b:7e:6b:8e:84:26:b7:64:71:65:3e:cb:d4:8a:dd:
         4c:63:6c:6c:2c:f6:44:df:5f:5a:d3:ca:af:cf:0a:99:dd:7b:
         b3:ee:54:17:a3:00:1c:dc:60:89:0c:44:ef:f2:29:39:c4:38:
         71:d6:b8:fe:0e:7c:5d:0a:33:ac:12:cb:b8:83:61:95:86:04:
         72:48:c4:74:61:85:8b:c1:8e:48:d4:82:47:6f:d2:9d:bf:b8:
         96:a2:7d:e8:98:82:12:92:2d:39:26:3c:1a:d1:64:99:08:a9:
         9f:7c:5d:12:7b:ca:eb:31:b9:8a:0e:4c:6c:0f:23:4c:dd:ac:
         33:a8:92:e4:e3:72:e8:16:7a:1a:42:d1:81:6b:fb:fb:cc:0a:
         3f:02:84:78:20:4e:39:9c:20:68:3c:65:8d:8d:e8:2c:5e:aa:
         6a:43:38:69:fb:be:68:6c:ef:16:59:48:e5:6f:f7:e4:58:12:
         66:f0:67:d4:5f:3d:7c:a9:0e:98:67:cf:e7:a8:bc:d4:6b:cb:
         da:e2:b5:22:52:75:0a:d7:4d:be:0d:a8:4d:25:05:87:21:be:
         3d:ba:5e:25:8d:6c:86:d9:f5:64:43:52:4a:58:59:1e:3d:5a:
         db:d2:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:14:29 2025 by rpki-client