Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
File:                     D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft (raw, json)
Hash identifier:          RzcHnKnXj3tqWYa1hrnmmiegC3QuGmQiXrcjwNBQZY4=
Subject key identifier:   44:AC:66:63:8F:1C:91:8B:EC:2C:77:26:F1:3D:F6:DE:66:7A:AB:E9
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Certificate issuer:       /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial:       4B8E29C30A6C0DFE8A26E5745CD3C61FC6B01403
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
Manifest number:          9E
Signing time:             Fri 31 Jan 2025 12:01:42 +0000
Manifest this update:     Fri 31 Jan 2025 11:56:42 +0000
Manifest next update:     Sat 01 Feb 2025 13:45:42 +0000
Files and hashes:         1: 3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa (hash: QeFy7cYl0XnlcH1ZGkwal06H9BHk388j5lSYQqT27k8=)
                          2: 3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa (hash: naR7xR43BZEpNhhT5KuYQe/gTN8cI2HLX66xREWgjjs=)
                          3: 3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa (hash: Wi8vLudRym45QpZbnkXNi5r1mHPhMxWe2InXef5cwXY=)
                          4: D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl (hash: mmHAT1JaYmI5u2dRJV9gvHlGGgt4a9N/NrqaxfN0uxQ=)
                          5: 3133382e3235352e3136312e302f32342d3234203d3e20323633393735.roa (hash: 9Wdtn5TGQFLob7UNT+7f/2qrsX7Ta2dLiSV/5vNnPvQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8e:29:c3:0a:6c:0d:fe:8a:26:e5:74:5c:d3:c6:1f:c6:b0:14:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
        Validity
            Not Before: Jan 31 11:56:42 2025 GMT
            Not After : Feb  1 13:45:42 2025 GMT
        Subject: CN=44AC66638F1C918BEC2C7726F13DF6DE667AABE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:8e:31:c4:32:04:cc:90:a4:64:6b:d4:9b:
                    a0:75:22:74:a6:e3:66:2e:0c:5c:db:03:6e:89:f1:
                    21:ac:1d:cf:ca:fd:87:2b:f1:60:e4:21:63:72:59:
                    fa:ea:2f:a0:25:3a:24:d9:94:9c:50:8b:13:0e:03:
                    a9:64:11:42:85:a6:94:1f:ba:4f:47:e2:f5:9d:73:
                    a4:29:43:77:49:6b:0b:2a:7e:fc:6c:80:13:7f:36:
                    39:fd:09:35:cb:9d:1e:e3:0b:af:92:d8:ec:f9:22:
                    cd:6f:e3:9b:0e:d1:3b:b9:61:c5:8a:35:75:bd:8b:
                    4f:14:d9:7b:81:fc:9a:69:98:0c:19:39:09:11:12:
                    8b:84:1b:a8:f0:3c:41:7e:cb:0b:e3:64:40:91:3d:
                    1d:43:bd:7c:36:ec:ab:c9:41:e4:5f:85:11:58:8b:
                    45:71:b4:e7:67:c9:7d:d8:54:24:91:64:f6:68:4d:
                    f3:5f:77:38:61:07:81:a0:08:7b:f1:cd:0c:a8:00:
                    fe:f9:90:1e:d7:59:a7:b3:e2:a5:4c:93:6e:0d:0b:
                    fc:66:1f:d0:29:3a:ae:64:b5:fe:e3:ff:d7:8a:a5:
                    5d:60:32:78:1a:4c:fe:6f:d1:a7:d9:74:9e:e7:f8:
                    92:79:bd:e8:22:a9:14:94:2f:9e:c7:33:68:86:66:
                    7f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AC:66:63:8F:1C:91:8B:EC:2C:77:26:F1:3D:F6:DE:66:7A:AB:E9
            X509v3 Authority Key Identifier:
                keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d5:5b:8c:28:8c:35:79:59:6a:c6:6b:41:5d:94:81:ee:c2:
         3c:30:69:e4:36:1d:d1:8a:dc:3b:25:42:5a:66:70:8b:4b:1e:
         17:75:65:88:eb:ea:ba:0d:a6:a7:02:32:7f:dd:8e:20:7f:e1:
         9d:a9:fa:bc:f1:5a:38:30:ad:3d:8f:67:81:f9:c2:c4:be:28:
         f6:f0:a2:a3:de:5e:19:36:52:99:44:58:57:95:ad:70:15:ec:
         21:0b:5a:0a:da:57:6c:f4:e3:cf:c7:13:14:58:83:0d:8d:3a:
         e9:8e:33:82:97:7a:df:85:a6:2f:90:a5:ab:4f:0b:9c:e1:e1:
         06:c1:67:a4:f7:68:5d:6f:1d:25:08:80:59:c7:af:1e:82:09:
         76:5d:81:6c:ef:47:86:76:1c:e8:4e:36:db:d8:29:f2:10:4c:
         d1:aa:64:51:57:0c:06:8c:49:e1:bc:0b:a8:28:e9:28:ad:a2:
         9c:fa:43:c6:c6:ac:e9:4a:db:17:30:ab:36:b4:d7:f0:d3:9b:
         1e:9b:1f:14:e4:9f:12:07:e2:69:b8:10:5d:03:61:0b:ba:4f:
         f4:dd:cd:2d:5c:06:f7:8b:c3:33:fb:3c:1b:f4:96:a2:78:f5:
         6c:9e:d1:8b:1d:dc:e2:da:10:9f:7c:1b:11:a1:ec:ad:bf:67:
         e6:22:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:39 2025 by rpki-client