Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
File:                     9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json)
Hash identifier:          Tr7WoM14BLxJ4QsKLyzpAARUjg9FZ6iEWvhiCxlz29A=
Subject key identifier:   07:F5:79:F6:03:B8:73:05:1C:DC:38:15:74:B3:B3:DE:72:FB:64:20
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       6C0E06C030A78A18ED3ACAB9AAC536FB9E935459
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 17:54:16 +0000
Manifest this update:     Fri 31 Jan 2025 17:49:16 +0000
Manifest next update:     Sat 01 Feb 2025 21:34:16 +0000
Files and hashes:         1: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: Q1hEVTsuLyFppYKVgDI3+N9l+J52P5aA25BwMBKWrFI=)
                          2: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: rrrEOn8EYX7VxsIukYBgE06gtkO8otWtBYx8QQye5w4=)
                          3: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: Cmd04OJAx92pZ3Qfq6xAyxrup8hosLsJeu/0dQ7qTF8=)
                          4: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: Q+hmduLNSECzf2hQISK2GS5iRHcmwTDAD+NNzReH4Qg=)
                          5: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: m2udYBptDBMZentMXcr5c8yk4srZ+XKJTUQFM3elQXw=)
                          6: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: JwF3Yc0Skl0fo8lx+pEGRTVbivZXE5LoaDMWmDboN/U=)
                          7: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: I80SLORz2SXS0OyNEOLUx03qYkqRibTicpGUL22pulI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0e:06:c0:30:a7:8a:18:ed:3a:ca:b9:aa:c5:36:fb:9e:93:54:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Jan 31 17:49:16 2025 GMT
            Not After : Feb  1 21:34:16 2025 GMT
        Subject: CN=07F579F603B873051CDC381574B3B3DE72FB6420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:0b:9c:6e:87:92:74:86:ed:95:17:d7:f8:
                    bb:e1:be:c2:1e:fa:2c:52:cd:ba:44:7f:e4:b7:2b:
                    19:3e:97:27:01:5e:a2:95:eb:e3:b2:59:f5:8f:30:
                    26:fe:9a:7a:1f:56:37:4d:de:4d:b1:d9:df:ee:93:
                    b5:59:f0:c2:57:2f:25:a1:4e:14:a4:ec:b7:84:a9:
                    dc:60:2c:d3:d7:aa:28:41:3f:09:e6:f0:2e:21:1c:
                    48:53:30:69:ea:ee:2b:2b:e0:61:f4:45:e0:7b:a0:
                    62:00:e2:34:3c:19:d2:ea:94:2c:2d:e8:65:28:03:
                    4a:d9:5b:10:8f:89:d2:5d:0c:af:bf:4a:d8:d8:56:
                    b4:45:be:b2:21:49:3c:7b:fd:04:05:5f:8d:c6:1f:
                    4a:b4:d0:f1:06:0a:b1:9f:9b:38:e2:fc:87:03:ad:
                    e0:c8:41:39:41:62:e0:52:21:43:66:54:f3:41:fb:
                    31:a9:89:c1:3f:f0:79:fd:a6:d2:ba:e4:5f:67:19:
                    f7:14:5d:13:91:af:c9:2b:34:b9:9f:c0:5b:7b:3b:
                    e9:a2:d1:b5:91:c2:08:ad:bb:9e:a5:23:bf:79:71:
                    7c:dd:b6:dd:ab:30:0f:17:38:79:97:3c:8f:67:a7:
                    c5:2f:9f:9a:f9:c7:b2:28:ce:12:93:42:f9:4c:36:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:79:F6:03:B8:73:05:1C:DC:38:15:74:B3:B3:DE:72:FB:64:20
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:70:4b:fe:f1:ec:77:8d:b1:fa:d3:ab:a3:ed:e6:18:12:11:
         1b:b2:f0:c6:96:d4:1f:48:a7:0e:e2:3e:bf:d3:26:01:c9:93:
         fa:ed:13:92:7c:9e:b8:d6:00:58:e6:76:50:38:d4:90:74:5f:
         9b:5e:40:99:de:f6:03:84:7f:e4:b0:6a:7b:e4:35:7f:97:2d:
         98:3c:b2:64:22:2d:76:ba:35:79:9c:3c:69:f3:39:be:b7:33:
         71:1e:32:3c:7e:65:8d:71:0b:f4:42:2a:ca:36:92:90:e6:5e:
         c9:30:b2:ca:8d:32:ff:ee:63:c1:57:9e:0c:cd:e2:19:b3:2c:
         12:20:f0:d3:2b:9d:70:f0:8d:f8:09:27:10:53:26:ec:70:28:
         5d:6f:ff:f0:9c:be:02:43:8a:85:1a:cb:a9:ff:6a:48:df:c8:
         27:d9:d9:2f:ef:d5:e3:bd:c7:0b:fa:5c:f6:8b:5a:02:0c:ec:
         75:fe:ee:7c:87:f1:6c:53:16:ad:8c:21:9b:ed:8c:71:78:04:
         c6:7f:b4:06:00:65:98:1a:c3:b8:07:69:1a:99:03:3a:37:39:
         e4:d2:1b:bf:62:7c:fa:c6:8b:1f:05:5d:e0:19:b5:1b:30:da:
         21:4a:bd:39:53:93:ac:05:af:5d:0b:e9:7c:4d:ac:76:53:b7:
         ce:1a:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:20:08 2025 by rpki-client