Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
File:                     B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft (raw, json)
Hash identifier:          sdoA7/JZ/lrM9VMlo7DokJdfVZsxcroCwXS2vQzXbJU=
Subject key identifier:   D2:B1:C6:D2:65:FB:AF:96:4D:7D:A6:57:D3:D1:24:A6:99:FE:0E:26
Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Certificate issuer:       /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Certificate serial:       7AD5BA1E7ECE4426FF1BC08E71EC9E99949F66D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
Manifest number:          0109
Signing time:             Fri 31 Jan 2025 07:50:58 +0000
Manifest this update:     Fri 31 Jan 2025 07:45:58 +0000
Manifest next update:     Sat 01 Feb 2025 11:15:58 +0000
Files and hashes:         1: 34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa (hash: becHvy/dCjtpQF+4gHEGN3zy1Feww1IODc0cNhKeTmE=)
                          2: B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl (hash: 1ZZfsVjVPTOqMDJOFQbPItcRt+2ASpTVyc7/SqjQC3A=)
                          3: 323830343a353330343a3a2f33322d3438203d3e20323638353537.roa (hash: mAKzHnCVAIzpxLDgVonf54u/5mV3BfiQFhtp9tZEdZg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d5:ba:1e:7e:ce:44:26:ff:1b:c0:8e:71:ec:9e:99:94:9f:66:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
        Validity
            Not Before: Jan 31 07:45:58 2025 GMT
            Not After : Feb  1 11:15:58 2025 GMT
        Subject: CN=D2B1C6D265FBAF964D7DA657D3D124A699FE0E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:cb:c0:1d:3e:b8:39:2e:c0:15:8c:9a:2f:
                    cc:e2:98:11:cd:0a:48:b3:7b:26:e4:f9:d7:3a:6f:
                    97:18:62:47:84:71:0f:21:81:b4:84:1d:4e:d4:dd:
                    c1:a3:4f:be:70:c2:83:f1:c1:9c:ac:d2:c3:97:22:
                    b1:6a:76:55:a4:24:07:0b:29:cd:27:fb:20:24:68:
                    34:f9:59:e0:59:01:49:13:bd:83:97:26:78:b2:5e:
                    5c:02:56:64:c4:95:3f:9f:d1:81:59:31:8f:c0:f5:
                    cd:2a:b8:11:11:ab:55:1b:61:12:17:7a:a5:7d:55:
                    cd:5a:66:e2:8f:3d:33:43:a1:12:29:24:23:83:19:
                    57:24:46:85:ad:4a:9d:b0:39:00:92:31:a5:b8:41:
                    fe:18:2e:0d:42:96:4e:bd:bd:4f:6d:bd:27:67:7b:
                    b4:50:4a:7b:76:10:50:0d:0f:5c:5b:ff:2c:61:ca:
                    b5:91:61:ab:3e:ca:a1:2b:00:4f:bd:06:2d:37:09:
                    57:20:71:45:a3:02:3c:5c:4d:b3:6b:29:b2:48:a8:
                    a2:fe:4e:31:d8:37:77:73:89:1a:e4:9a:c1:50:6b:
                    83:9e:a7:80:dd:d4:36:e6:0e:19:97:33:99:9f:b4:
                    7f:d6:fc:b7:88:a6:fb:56:37:6c:e0:2c:19:f7:58:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:C6:D2:65:FB:AF:96:4D:7D:A6:57:D3:D1:24:A6:99:FE:0E:26
            X509v3 Authority Key Identifier:
                keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:1f:87:01:28:56:89:f4:04:05:c7:40:3c:51:7a:2d:06:
         24:3d:38:4e:2f:aa:c4:2a:9e:5a:77:db:a9:54:3d:cc:f5:85:
         b3:7e:db:f0:c7:e6:c5:bb:36:56:2a:af:4b:68:d5:f5:97:0e:
         00:0e:a1:30:12:a6:29:d4:d4:90:e7:1c:6e:bc:aa:a9:11:c9:
         32:77:e1:be:03:28:00:96:e1:b4:a3:64:20:ec:b1:f0:d0:d8:
         d5:4f:01:71:8b:73:6d:5a:a1:18:b6:c5:f1:d5:9f:10:89:cb:
         fb:98:d1:c0:f2:43:95:35:e0:9e:2f:f5:2d:65:aa:87:89:3d:
         52:bb:c5:b1:26:04:74:0d:a4:fe:7d:70:85:96:55:47:bf:b6:
         87:23:5c:28:1a:43:c6:22:0f:5d:8e:34:91:cd:ce:94:35:e0:
         03:91:f3:31:fc:7d:67:d1:82:55:04:0c:5f:90:fd:5c:a9:4e:
         85:ea:5f:60:26:c0:04:fa:44:2e:5b:e2:eb:44:15:e4:2e:da:
         3f:41:8a:13:0e:41:ac:c3:30:18:41:d9:9f:09:9a:1e:fe:cc:
         e0:ee:ec:91:f1:8a:f5:a3:40:13:6f:3b:3e:49:68:3a:9d:2b:
         a2:01:ac:da:48:1f:f6:e1:9e:9e:06:5e:61:16:74:ff:20:33:
         86:7c:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:56:05 2025 by rpki-client