Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
File:                     CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft (raw, json)
Hash identifier:          5+fJmx0GWX48R20gBVDW7mvWfT4vjsgQMaxisQQXhJk=
Subject key identifier:   30:48:DB:55:DF:6C:9B:D8:9D:91:68:7B:6D:01:06:83:F4:3D:54:94
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       66696B5535EAA9F2E48AC01668353C1A5FBB1C4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
Manifest number:          0149
Signing time:             Fri 31 Jan 2025 01:14:18 +0000
Manifest this update:     Fri 31 Jan 2025 01:09:18 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:18 +0000
Files and hashes:         1: 3137372e3130312e31362e302f32302d3234203d3e203533303436.roa (hash: YeSNvYvqBCjMEoK+Q/NJDOiZCK53JOBBsKlvXOvwRh0=)
                          2: 34352e3138362e3134332e302f32342d3234203d3e203631363030.roa (hash: k1hcI9nO9X9S7wh/gHdSapShUnJQXtmpCeggDbpWkbs=)
                          3: 3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa (hash: qMXAgAO+BYJEdMdz8p6FM+YprIAh/MFGlG4IvcfJNBQ=)
                          4: 3230302e33392e36342e302f31392d3234203d3e203533303436.roa (hash: MRcXyI0TlEOfi1NedYnXkpGkWPAoWDvVPDKiC67WdWk=)
                          5: 323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa (hash: 1jZLHeI3moYUonEOUTeh8owqdbmZA9cZxOOkiq6Cwo4=)
                          6: 323830313a38303a3333303a3a2f34382d3438203d3e203533303436.roa (hash: 7B977IITp/ZAZsfynUjTyk6lyqSnirUNhyLE2X1QWIc=)
                          7: 323830343a316630343a3a2f33322d3438203d3e203533303436.roa (hash: 3SlslTfV7qgXhUSvNVGWHN1mhK5XSbvZzPV7YmJswEw=)
                          8: CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl (hash: yfIQclXQJD5GDRBy/I+Efc4Jygxof36kz+VDT7LiHoM=)
                          9: 3137372e39332e3132302e302f32312d3234203d3e203533303436.roa (hash: SJPejeWmrCKU2BVHGCUBvNYhZpJRohjg03NLqxmX0eA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:69:6b:55:35:ea:a9:f2:e4:8a:c0:16:68:35:3c:1a:5f:bb:1c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Jan 31 01:09:18 2025 GMT
            Not After : Feb  1 04:00:18 2025 GMT
        Subject: CN=3048DB55DF6C9BD89D91687B6D010683F43D5494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:a5:ee:c0:7f:a8:5d:cf:f9:0f:f1:e8:bd:
                    23:81:30:b4:90:79:e0:fe:e3:1b:71:93:9c:38:92:
                    50:9a:98:00:5b:67:8b:ce:09:c6:66:60:62:92:07:
                    11:88:de:62:46:7a:34:79:58:db:56:ef:52:2b:d6:
                    a8:fb:53:24:6d:06:26:95:54:81:6d:78:72:c7:ae:
                    f5:be:0f:2b:bf:a7:d7:e2:17:54:10:09:34:28:73:
                    1d:3f:23:63:90:46:59:c0:1e:b7:57:59:4c:b7:c3:
                    57:30:aa:36:3b:5d:0d:f3:74:21:61:58:7c:e1:b2:
                    e6:96:68:e9:51:03:ac:44:1d:e5:44:45:99:ff:b4:
                    34:d6:fc:95:e9:bd:70:9a:69:27:28:58:09:c6:60:
                    28:1f:87:fb:8e:1b:9a:69:cb:93:f5:3f:95:a5:e0:
                    0f:dd:d4:54:a3:b0:2d:1f:ed:b6:9f:5f:a8:7f:e1:
                    38:9d:74:bc:0a:44:b3:71:62:a2:45:4f:d9:08:d9:
                    91:4b:1c:70:da:32:0c:64:e6:f6:81:5b:2d:dc:c8:
                    a4:dc:03:f6:45:1c:67:ba:5b:f6:fa:e6:9c:52:ca:
                    06:25:2a:6b:9b:55:d4:af:87:5d:b7:69:51:d9:46:
                    91:bb:1f:9d:f7:7c:3d:bc:3a:37:f6:48:81:17:b4:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:DB:55:DF:6C:9B:D8:9D:91:68:7B:6D:01:06:83:F4:3D:54:94
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:b4:c0:33:a7:73:fc:dd:14:96:31:b1:45:cc:a7:a7:07:
         14:95:2b:54:a6:54:05:1c:9f:eb:6c:99:c3:ae:f5:71:24:4f:
         b5:26:da:40:09:5c:ec:ea:5a:2a:0c:46:1d:f6:27:0c:75:03:
         db:59:be:16:04:0b:5e:9c:f5:76:be:0f:97:15:da:af:88:0c:
         bb:23:ff:ea:53:61:3b:41:b0:08:04:ad:be:47:68:05:0f:b6:
         5a:bf:18:6f:cb:9a:cd:65:90:9d:09:47:15:9d:cc:34:31:96:
         8e:15:9c:4f:a2:6d:b3:5f:88:0d:63:c0:69:c7:f8:25:49:e9:
         8f:2b:dc:28:e8:9e:42:9d:12:c2:12:c2:d6:4f:d0:7f:7b:8b:
         6b:8e:37:6c:58:50:13:6b:ca:05:d6:73:65:53:39:11:c5:bc:
         65:11:f6:8e:c5:5a:01:04:79:0c:03:96:c6:11:bc:9d:6d:1d:
         c0:03:80:33:54:00:da:1a:18:13:54:c8:ed:26:96:20:e9:e3:
         93:3c:69:a3:ff:d5:a2:58:ac:7a:8a:f3:27:f1:d0:24:3b:b9:
         3c:34:6c:42:be:85:70:03:d9:b4:eb:bc:b8:32:e5:c5:25:59:
         b5:db:22:b3:51:e4:d0:e5:c8:af:14:38:c4:86:11:e3:be:3a:
         89:6f:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:47:57 2025 by rpki-client