Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
File:                     18A4CF42CC304D1E5395D809FDD692A864102BAE.mft (raw, json)
Hash identifier:          BEXRUPaFTnQHiZPMfVzrDxxXKgWMUgN5usIxF+NxyBI=
Subject key identifier:   88:D6:3B:E7:95:C9:5D:E5:F4:DB:F0:A9:85:65:22:D3:60:42:48:DA
Authority key identifier: 18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE
Certificate issuer:       /CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
Certificate serial:       2051590A1B9F4FBD7B7CF28293D19DC3A897DA54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
Manifest number:          EA
Signing time:             Sat 29 Mar 2025 00:36:56 +0000
Manifest this update:     Sat 29 Mar 2025 00:31:56 +0000
Manifest next update:     Sun 30 Mar 2025 03:13:56 +0000
Files and hashes:         1: 34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (hash: gJIFIK9aFAHb/0LGxIj2bWYjndNDbHONuewCwpY5+iE=)
                          2: 323830343a363566303a3a2f33322d3334203d3e20323639353234.roa (hash: YwtWVePQryzk7OdLLicpoWAGIU9SEwIerI/rotGO1aY=)
                          3: 18A4CF42CC304D1E5395D809FDD692A864102BAE.crl (hash: JEIaxDExU98i5mGl+dOrlQdyutPL2PB+eEhgLLZ3fpU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:51:59:0a:1b:9f:4f:bd:7b:7c:f2:82:93:d1:9d:c3:a8:97:da:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
        Validity
            Not Before: Mar 29 00:31:56 2025 GMT
            Not After : Mar 30 03:13:56 2025 GMT
        Subject: CN=88D63BE795C95DE5F4DBF0A9856522D3604248DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:61:d5:44:58:64:f3:98:ab:59:07:6c:3b:
                    56:2d:93:41:fb:eb:e8:d3:b9:e2:03:85:3b:f5:35:
                    99:30:19:b4:cf:ef:fb:8b:3c:f5:40:00:3f:ee:30:
                    fd:17:d3:80:d6:ea:83:21:20:f7:18:73:62:6f:70:
                    bb:de:57:66:e3:fe:d4:ca:a8:bd:93:77:e4:ee:6f:
                    8d:f0:eb:da:f5:c3:f0:04:00:25:4d:ae:98:7c:6f:
                    ef:e5:61:f0:9f:14:18:de:2c:3a:4e:48:ff:1e:4f:
                    43:28:fc:1c:4d:8b:75:f4:1b:ef:d9:a6:69:02:fd:
                    1c:b2:dc:82:8e:41:6d:7a:7a:fb:1b:fc:e6:e0:4a:
                    4d:aa:0f:7e:3a:03:07:ff:1d:c4:01:0f:49:4b:27:
                    8d:59:d1:29:df:30:5c:a5:07:fe:bd:5e:03:c6:6c:
                    5e:d3:0e:63:6e:59:44:32:f8:f5:b5:e6:ff:31:5b:
                    8d:11:e3:63:21:38:0b:35:ab:89:49:fe:8c:90:9c:
                    2e:57:60:11:14:70:56:79:1a:d5:71:09:b7:f9:27:
                    e0:70:95:ae:35:ea:27:f1:ba:5e:41:90:45:b8:d4:
                    8b:49:10:8f:78:16:63:85:80:da:21:b3:6b:c5:df:
                    b3:f1:67:ec:69:75:da:a9:9c:93:bc:57:c1:17:4e:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D6:3B:E7:95:C9:5D:E5:F4:DB:F0:A9:85:65:22:D3:60:42:48:DA
            X509v3 Authority Key Identifier:
                keyid:18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:62:72:b8:4f:bc:70:54:6e:de:fd:11:49:b2:71:3a:fc:e7:
         d4:84:c7:ba:6a:91:2e:23:7c:11:a1:5e:e8:64:9f:6e:2b:8f:
         b2:b9:45:65:af:fe:0a:ae:02:14:15:b5:c3:8b:3a:dc:82:33:
         f7:80:38:04:fc:ab:5f:77:fa:b8:4c:31:74:1c:69:c7:9c:28:
         88:43:93:14:86:3d:85:5b:3f:f1:ab:7b:aa:ac:eb:ce:9e:ce:
         26:2f:8a:d5:84:1d:fd:0c:f8:2c:ea:0c:68:25:37:7b:52:d8:
         e3:9f:47:a3:6f:a2:85:90:f1:b6:72:a6:ed:d4:ce:48:41:cd:
         cb:84:d6:54:80:f5:23:3d:37:02:3b:d7:ee:5d:c3:e0:66:16:
         d1:ab:57:8d:22:d7:4f:0c:61:21:ef:83:c5:8f:82:14:ee:9f:
         d8:0a:f9:08:08:92:76:7f:72:18:30:b2:5d:19:0d:97:5c:c0:
         c6:99:21:ab:06:01:5f:82:ab:64:40:58:be:15:fd:c9:fc:35:
         9e:aa:c6:5b:98:7c:f9:54:a6:5d:e6:80:fd:cc:94:94:b1:57:
         ca:7a:97:dd:b8:6f:33:37:1c:5c:d7:91:7a:2c:21:81:fe:39:
         e8:83:4d:04:9f:0d:ca:be:b4:cb:61:79:fc:16:34:7b:fb:ae:
         f6:bd:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:01:45 2025 by rpki-client