Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
File:                     9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft (raw, json)
Hash identifier:          zOW3ekNDqMh8KJjN2zKb6wU/7YmgX6FN408Bv4HoFq4=
Subject key identifier:   9B:BC:88:F4:41:D5:28:F8:84:5B:83:35:F5:AF:8D:88:81:D8:03:72
Authority key identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE
Certificate issuer:       /CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
Certificate serial:       75E222D6D12EF19D3490C6C4F28107D7009EFE46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
Manifest number:          0191
Signing time:             Fri 31 Jan 2025 14:20:48 +0000
Manifest this update:     Fri 31 Jan 2025 14:15:48 +0000
Manifest next update:     Sat 01 Feb 2025 16:43:48 +0000
Files and hashes:         1: 34352e3232382e39362e302f32322d3234203d3e20323637303538.roa (hash: e8T00rp4qjRV4C0nSc4aQSQDFLMw8xoY/PnRhfHI38U=)
                          2: 9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl (hash: +QshHwUOiRQUuI/25GrX4gVMg8LHVTobci+OW/LYU3E=)
                          3: 323830343a343738303a3a2f33322d3438203d3e20323637303538.roa (hash: MNaZhFKao53N6SKXIe5xpVPAf73l6G8T7+Q9CahWCBk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e2:22:d6:d1:2e:f1:9d:34:90:c6:c4:f2:81:07:d7:00:9e:fe:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
        Validity
            Not Before: Jan 31 14:15:48 2025 GMT
            Not After : Feb  1 16:43:48 2025 GMT
        Subject: CN=9BBC88F441D528F8845B8335F5AF8D8881D80372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:06:74:a2:f4:a1:5c:d4:75:e6:bd:bd:6b:bd:
                    08:0b:ab:9a:40:81:3a:59:e1:c3:b5:c8:b7:5b:e5:
                    ed:34:c1:69:68:f6:f7:a8:ea:49:98:4b:24:2b:9b:
                    cb:a3:dd:16:fb:88:5d:c1:eb:3e:93:00:87:9d:b6:
                    bc:07:e4:66:4a:d4:28:e5:22:8d:72:86:52:f8:65:
                    5e:7c:a8:79:ab:9b:f6:aa:8f:29:a4:c8:be:29:e0:
                    aa:51:9f:48:82:22:d3:a0:f5:78:5a:50:45:71:9f:
                    dd:5a:b1:71:94:70:4a:d7:43:6f:06:e1:97:b0:fc:
                    37:d2:58:ee:dc:4b:1e:fe:f8:c2:c3:f6:ca:95:fe:
                    15:31:26:38:a5:eb:b2:91:99:6d:c3:07:ae:00:55:
                    7c:bd:13:5b:d9:0d:4c:5f:ec:84:01:6f:e3:b3:cd:
                    44:7c:32:9b:4b:c3:46:b8:d1:c9:74:f0:a3:b0:37:
                    47:f7:73:20:6d:05:f2:8d:53:96:81:e4:5d:27:b6:
                    f0:48:be:0b:0e:0e:5e:29:a7:4d:1b:75:32:74:47:
                    8f:8e:c8:60:b5:3a:f9:fa:40:c3:a6:e5:44:4d:60:
                    21:3f:9e:be:ca:4b:cf:17:f7:57:45:f5:25:cb:0b:
                    a0:ba:85:82:d8:5d:8c:e7:de:94:fe:c3:3d:5b:d9:
                    1a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:88:F4:41:D5:28:F8:84:5B:83:35:F5:AF:8D:88:81:D8:03:72
            X509v3 Authority Key Identifier:
                keyid:9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:62:64:8b:76:a3:2f:46:e9:58:c5:6a:ef:69:67:f6:f3:00:
         94:f9:87:f0:39:c8:20:0c:43:45:f8:7f:a2:65:99:b8:f9:7e:
         58:47:a8:f0:67:9c:cf:49:e9:f5:47:40:f8:36:85:f0:c8:36:
         1c:c6:f0:76:1d:45:a9:42:ec:54:e4:9a:41:5a:02:de:d9:db:
         d8:10:f1:15:30:c3:75:40:b3:97:0c:e7:5f:67:3e:d7:90:a4:
         65:2e:f5:08:7c:68:dd:d1:67:dc:c1:27:bf:cd:89:36:36:8c:
         ec:60:73:ea:77:2c:97:a0:b0:57:97:3f:0f:9b:66:eb:a4:41:
         fa:d8:a9:a0:25:9d:4b:bb:0e:0f:46:23:91:e4:b9:ff:a8:4a:
         79:dd:d0:05:91:78:31:d1:9f:82:89:47:a2:b4:86:f7:09:50:
         4f:a3:3e:11:6b:d0:13:cf:49:de:64:3e:c7:0f:a6:8d:c7:f6:
         82:dd:e9:e3:aa:e5:24:b9:1d:a6:3f:fa:ea:bf:84:9a:b6:9b:
         60:75:0e:96:25:45:9e:1e:a9:03:10:79:21:cf:05:8b:a4:5a:
         46:57:10:51:d0:78:51:27:78:13:51:2c:f9:73:b6:ae:83:25:
         d8:d7:26:22:d6:63:fa:1f:ff:54:dd:80:d0:8d:0f:d4:29:5b:
         eb:50:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:27:27 2025 by rpki-client