Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft
File:                     3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft (raw, json)
Hash identifier:          fi6NdPuyZtaQYq/AO6KfmvFaKvC6viIw5DpPU+RgT5E=
Subject key identifier:   20:B4:24:3B:0B:8E:85:9E:CD:0B:D9:90:2A:4B:97:BA:99:F1:C2:57
Authority key identifier: 3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97
Certificate issuer:       /CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797
Certificate serial:       6309EFF720B2B4A8379ADC28B698F17E51E081E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 13:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 12:55:16 +0000
Manifest next update:     Sat 01 Feb 2025 14:14:16 +0000
Files and hashes:         1: 323830343a336335343a3a2f33322d3438203d3e20323636323034.roa (hash: xgIHf5cyQbiEtbaycgGI7pyuxO5renK9Vy8rL7x5BSU=)
                          2: 3E9ABEDC7E771B85710E3E49ED20657F04DA1797.crl (hash: RlmCdpqjb1Y4MahUDxRtPyR0FcCI0xHjR88B3clSZ0g=)
                          3: 3139302e3132332e3139362e302f32322d3234203d3e20323636323034.roa (hash: 9/8f1yiTnYV6kvKHJakzCpRxPR0PGt5d/XQHgEclEbg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:09:ef:f7:20:b2:b4:a8:37:9a:dc:28:b6:98:f1:7e:51:e0:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797
        Validity
            Not Before: Jan 31 12:55:16 2025 GMT
            Not After : Feb  1 14:14:16 2025 GMT
        Subject: CN=20B4243B0B8E859ECD0BD9902A4B97BA99F1C257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:c3:9a:3a:83:9c:64:ab:26:22:c5:f8:94:
                    1c:07:05:ee:19:7d:60:e8:d9:42:b2:4d:56:88:88:
                    d4:e0:1b:22:ba:aa:b3:8a:e9:50:f1:bd:db:68:e7:
                    17:a9:d4:83:f1:c4:82:41:b6:78:59:33:93:ae:fe:
                    8e:24:af:49:4f:08:f2:44:4a:1f:03:6f:1d:e2:3e:
                    76:fe:58:c5:04:1b:b9:87:16:a8:1d:6b:4e:07:9e:
                    1d:74:b2:dc:6c:50:a3:3c:48:ea:68:ba:67:36:25:
                    d4:11:fa:bf:b0:fb:4a:ed:6f:0a:f9:af:b1:f0:a6:
                    aa:f0:1f:4c:ad:d7:48:40:7b:a9:14:d7:4f:b0:03:
                    78:84:2d:e2:4e:0e:f6:4f:b2:33:51:61:41:6f:ad:
                    52:f9:58:82:0c:40:57:45:48:d3:e3:31:02:9f:d8:
                    34:13:77:a7:2e:9f:66:2b:fd:86:25:d4:26:90:dc:
                    ac:a8:8e:ca:8b:8a:48:fe:c6:ff:2d:c5:0c:88:86:
                    ef:e4:f5:c8:56:aa:34:06:18:d4:77:25:74:9f:99:
                    ee:07:1d:6b:17:a1:8e:5f:c3:d9:d9:e0:64:4a:f2:
                    57:15:75:58:f9:16:6b:05:a2:b8:f7:14:bb:8a:6e:
                    87:1d:3b:9d:af:66:71:f1:8c:7f:e9:a6:dc:0a:18:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:24:3B:0B:8E:85:9E:CD:0B:D9:90:2A:4B:97:BA:99:F1:C2:57
            X509v3 Authority Key Identifier:
                keyid:3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:29:30:0d:9c:5d:6f:d0:7d:de:39:20:4c:45:27:75:e8:82:
         67:0d:cb:5a:80:2e:9e:40:06:1d:5f:ad:95:b4:f7:54:98:46:
         69:78:62:5d:5b:27:f4:eb:de:e9:9a:a3:e7:b0:7e:d4:17:79:
         83:dc:36:4c:f0:40:2d:d5:68:11:a9:30:45:9f:eb:17:0e:eb:
         b8:9c:7a:4e:96:c7:2c:a6:eb:b7:70:09:bb:4a:9a:0c:1d:1b:
         64:dd:0a:4f:48:c8:8d:4a:bf:00:22:48:53:82:c6:12:85:aa:
         76:98:3f:e8:54:83:99:ef:2f:ad:c8:4d:a3:83:b0:db:af:d1:
         ae:3e:cd:d1:a4:31:04:2f:30:b5:6d:8f:9b:1d:e4:b3:b0:4a:
         e2:cb:bb:e5:08:cc:fd:8e:ea:da:5a:25:d3:f7:64:63:19:a0:
         06:c0:5e:33:e8:82:61:56:f2:ea:bb:1b:73:38:8d:0d:d3:56:
         15:18:cd:27:f9:a7:03:2f:5d:f9:01:c6:28:05:90:7d:fb:55:
         66:a3:51:e1:36:49:df:c6:27:46:3e:7f:95:be:4d:1a:45:48:
         80:9b:8d:a7:5c:45:16:06:d3:91:af:e4:97:a6:86:8e:75:da:
         0e:0b:49:2c:ba:1c:eb:75:e3:1a:f6:dd:00:ef:f1:0d:de:c8:
         40:8f:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:35:52 2025 by rpki-client