Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft
File:                     E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft (raw, json)
Hash identifier:          CB9emmNbs/8E1lbQJVf61tVHxsRkvYetrp/8JLIMxLk=
Subject key identifier:   C9:85:02:FC:55:3F:C4:78:7B:A6:C8:28:43:26:25:89:2C:5D:84:E5
Authority key identifier: E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB
Certificate issuer:       /CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
Certificate serial:       128CE774AE8697BC9FEF0B3601DE150874050881
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft
Manifest number:          2A
Signing time:             Fri 31 Jan 2025 14:49:10 +0000
Manifest this update:     Fri 31 Jan 2025 14:44:10 +0000
Manifest next update:     Sat 01 Feb 2025 16:02:10 +0000
Files and hashes:         1: 3137302e3233332e3233362e302f32322d3232203d3e20323635303938.roa (hash: +GgPt4l0/gpSl1kzXcIHfFA6xsMu6RYpIl9EA51zwtc=)
                          2: 3137302e3233332e3233382e302f32342d3234203d3e20323635303938.roa (hash: mS63lFnIA0WJW4Ovi/dT7PTBSLSD0hTjMlhoVv3sMfk=)
                          3: 3137302e3233332e3233392e302f32342d3234203d3e20323635303938.roa (hash: UN4owLfRqiIneT0DfPq2vVX4FHWO1yUHswhijyhk3uU=)
                          4: 3137302e3233332e3233372e302f32342d3234203d3e20323635303938.roa (hash: zRiTx8AU63VgcimgDgqo4uGEGIIZcSXEXvKh8SznhCY=)
                          5: 3137302e3233332e3233362e302f32342d3234203d3e20323635303938.roa (hash: wOR1ic3k2E0w0QmBMRkZFM2vWRGN6iHaD8ieeHE/G0s=)
                          6: E9BD4A328B09F70063C93430A11B2332DB5EE4BB.crl (hash: bHQ0YSFg0dBtVqxTa1R0/RTL5ksO6c2D9ll4RpOasyo=)
                          7: 323830343a333263633a3a2f33322d3332203d3e20323635303938.roa (hash: Z5NQIM5artudNusHiJKhW8zFINK+vL44IeEr8RpUarw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8c:e7:74:ae:86:97:bc:9f:ef:0b:36:01:de:15:08:74:05:08:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD4A328B09F70063C93430A11B2332DB5EE4BB
        Validity
            Not Before: Jan 31 14:44:10 2025 GMT
            Not After : Feb  1 16:02:10 2025 GMT
        Subject: CN=C98502FC553FC4787BA6C828432625892C5D84E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:d8:b9:99:88:75:0c:9b:a2:6b:b4:58:6d:
                    58:90:0d:9d:40:c0:04:f3:ed:b8:c3:d3:4b:6d:ce:
                    e0:3e:6c:b1:1a:a4:fd:85:c4:e4:3f:98:0a:cb:bb:
                    74:6e:c4:79:99:0c:b8:75:18:da:2e:40:44:50:bb:
                    84:aa:39:05:bf:ec:bd:1d:b1:ca:50:5f:b9:45:6e:
                    15:fe:32:03:32:52:a6:19:1b:f7:4b:24:fa:19:0e:
                    ca:54:0b:0f:95:bc:79:79:0d:f7:33:15:1a:b9:f0:
                    d8:a4:e6:b6:bc:55:b4:1b:d8:43:4f:5d:f8:47:db:
                    7c:20:09:3e:5f:f9:75:0e:ac:dc:3f:27:ed:6a:d2:
                    f8:cd:27:6f:ea:ff:a7:1f:a9:ba:e2:ef:61:a7:d0:
                    d1:d2:38:35:48:69:33:81:b0:ce:8d:24:b5:e0:d1:
                    df:89:ee:e9:01:74:5c:f2:69:3a:3f:0f:14:38:39:
                    e3:29:05:fe:16:dc:1d:fe:f3:af:0e:51:fb:27:7c:
                    5c:28:02:08:7e:e6:d3:78:21:12:bd:94:8a:3d:b2:
                    85:3f:63:e2:a6:41:78:24:ac:c2:c3:d7:49:b2:e7:
                    68:c8:91:2b:24:a4:bb:ec:94:39:ca:8b:2a:ec:b1:
                    55:a4:05:7c:bf:b1:37:13:54:6a:c5:e3:9c:ca:15:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:85:02:FC:55:3F:C4:78:7B:A6:C8:28:43:26:25:89:2C:5D:84:E5
            X509v3 Authority Key Identifier:
                keyid:E9:BD:4A:32:8B:09:F7:00:63:C9:34:30:A1:1B:23:32:DB:5E:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/E9BD4A328B09F70063C93430A11B2332DB5EE4BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:08:7b:f8:7a:08:a9:2d:18:d3:c9:5c:b9:98:8d:2f:6d:
         be:00:3e:51:1c:6a:3f:06:92:0c:67:f4:06:23:c2:d3:6a:a3:
         13:c1:fa:42:49:ac:e5:bc:f7:e8:9b:ed:0c:e0:36:7a:f4:55:
         c5:83:f8:6f:0a:81:7a:80:4e:4c:41:78:8d:58:68:c9:fe:d9:
         14:ce:c7:7b:df:aa:82:95:3c:ce:63:fe:b4:64:66:91:e2:c3:
         c2:6d:c9:c6:7d:e0:c7:d7:60:72:7d:96:30:28:05:81:aa:d7:
         c8:c6:ea:b0:3f:22:41:b7:86:1c:c9:24:01:ba:69:fe:b4:8f:
         d8:9e:f9:a4:b5:c8:fd:66:da:be:dd:b4:85:4f:8e:93:3d:97:
         fd:91:13:53:fe:85:73:7a:a6:f5:96:dd:06:f6:eb:c7:08:fe:
         8d:e5:6a:fa:81:c2:8d:da:f3:1b:8d:5c:19:77:94:7d:f7:d4:
         4b:10:65:b8:02:b8:dd:7e:d3:06:f4:5f:f9:90:4f:d4:ef:66:
         de:07:bf:a5:aa:47:ce:30:13:47:b3:00:6e:db:38:db:15:6a:
         9a:3a:0c:1e:82:8f:aa:2b:8d:ba:f5:88:fe:8f:91:59:3d:58:
         fe:8c:e6:61:ae:7d:32:ba:cf:c1:d6:27:1e:b7:1e:c0:92:f9:
         8f:02:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:25:33 2025 by rpki-client