Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
File:                     2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json)
Hash identifier:          ZHw8woXrwzQAa12ts+DPaDtnI9jaPH+I1BFUGtjoCYE=
Subject key identifier:   DE:65:BB:F5:18:8A:B5:14:48:BA:12:82:47:A8:C3:EA:27:9E:DF:A2
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       6E2C9B40F0E1E82E71D5A69728732823BEBA2DF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 16:10:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:05:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:24:19 +0000
Files and hashes:         1: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: ltGU9TfadFSytyS3qZ3OpJbFMrYDtGE03CwrDtct9x0=)
                          2: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: NgAWVGgwKoKx9CeAC9Lb75j265fiBWCDU7GoTPV1iws=)
                          3: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hA7z7gFEAl4e0Vd21ho9YyTZKrpOWO4ubNHsCDtD3CU=)
                          4: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: AOEiMjPwvGQ2WWh1fjR8HS6XgJ2/wZLeqE4cnWeszyo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2c:9b:40:f0:e1:e8:2e:71:d5:a6:97:28:73:28:23:be:ba:2d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: Jan 31 16:05:19 2025 GMT
            Not After : Feb  1 16:24:19 2025 GMT
        Subject: CN=DE65BBF5188AB51448BA128247A8C3EA279EDFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:6b:ac:f3:14:80:93:fd:49:fd:cb:da:c4:
                    6a:61:26:5c:1e:1e:c5:fd:23:d9:8b:f7:be:3a:52:
                    61:25:10:16:d3:7b:a6:f6:f3:00:86:d1:41:5a:90:
                    8f:18:b2:42:91:c7:6a:1b:d8:a2:f0:f0:ef:52:7d:
                    c2:20:63:7b:9d:70:a1:e2:bc:2e:00:8a:7a:d2:8e:
                    49:3e:ef:ea:67:43:f9:c4:52:f5:a2:23:61:c6:12:
                    03:5b:42:c2:c6:20:37:a4:58:4b:29:de:49:8c:eb:
                    d5:74:e5:88:78:af:32:0b:c2:27:93:c1:a3:03:62:
                    e5:34:a4:e9:e0:bc:b6:84:35:6a:ff:59:db:ff:8d:
                    d5:01:db:f8:6e:a6:2c:e2:93:3c:72:de:4b:62:60:
                    a6:68:18:94:63:4f:d4:83:61:fd:61:0c:4c:71:da:
                    76:d3:e5:a2:91:b6:38:5e:08:43:f8:7f:ae:c8:e1:
                    a3:21:93:8d:ff:50:5a:48:24:f3:fc:57:04:4e:84:
                    8e:15:f4:bc:ec:90:c2:ec:93:a5:0f:7a:cf:02:cc:
                    8b:2b:7e:25:bb:62:41:b3:27:2a:07:c5:22:90:18:
                    5d:d4:38:dd:e7:eb:5c:8d:91:20:cf:52:09:83:d2:
                    52:87:ea:3a:1c:8b:40:0c:3c:a3:4a:fc:14:f4:f0:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:65:BB:F5:18:8A:B5:14:48:BA:12:82:47:A8:C3:EA:27:9E:DF:A2
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:aa:fb:5c:d6:85:a5:35:39:f6:8a:dd:c3:f4:8f:79:85:
         5d:32:a6:fe:09:26:d4:4a:71:d2:6d:61:85:b9:7f:64:0d:85:
         7b:46:9a:19:65:a8:7e:43:ed:58:93:8e:7d:b8:22:e8:7d:d6:
         41:9e:8f:69:f7:f5:5a:e8:21:c5:8a:40:d9:53:b1:9d:a8:16:
         11:08:cb:d8:1e:d0:05:bc:db:cb:c3:7d:17:9e:25:0f:a7:4e:
         e6:0a:fd:d9:31:82:94:d7:20:4e:75:91:88:d0:ae:50:ef:80:
         0c:e2:ca:f0:61:52:57:56:7d:00:20:5f:da:35:2e:10:8d:52:
         ed:07:9d:9f:4e:70:54:64:c8:16:84:a3:ec:5c:de:42:27:a4:
         87:70:48:7f:11:4a:a1:7b:77:e0:8c:f4:8e:fe:f9:ca:96:4d:
         67:38:d4:44:69:7d:17:1b:48:c8:63:7d:9f:c6:0d:7f:41:2a:
         78:ce:21:d2:f5:f9:9d:ab:49:2f:04:8d:bc:1b:2c:c6:17:a1:
         8b:38:e1:72:76:23:46:fb:08:8b:57:21:b7:10:2a:33:46:cb:
         b9:e9:6f:9d:ce:f0:72:79:e2:65:d2:23:6b:d4:23:c9:cc:f7:
         33:bd:77:d8:ff:42:fe:10:27:04:87:8c:2f:85:06:dc:f9:fe:
         0b:fd:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:58 2025 by rpki-client