Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
File:                     0D3D646783321347829AF3DBE2CF61D9810C07DF.mft (raw, json)
Hash identifier:          zc5qsM+w5/uVYsKQyvKJPhgrzaTANbLsxz7kJuxI614=
Subject key identifier:   5B:FE:94:60:34:36:83:C6:80:D4:29:2A:74:77:71:AC:B4:59:9A:9D
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Certificate issuer:       /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial:       09F7B0E0FCE90771D56CF55FC3F65E58C7AC0EA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
Manifest number:          0D
Signing time:             Fri 31 Jan 2025 06:55:25 +0000
Manifest this update:     Fri 31 Jan 2025 06:50:25 +0000
Manifest next update:     Sat 01 Feb 2025 08:05:25 +0000
Files and hashes:         1: 323830343a323666343a3a2f33322d3332203d3e20323633383636.roa (hash: 3b5SMS2DTjjRxX3pSpDvA5Ns0EVL7q4htdfrAqyTHzg=)
                          2: 3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa (hash: uOTCXcJUdwGtc94NsKtNIejlJ++NnNHAphQPM/+CB4A=)
                          3: 3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa (hash: D/r0y3N2RH60nODdsXf1TrEtigqlC3rNydMzBYzg8zM=)
                          4: 3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa (hash: YIKTebQ591d26o5lMq6zjNC+Rl5EiFbDG9Vs+KYFP6k=)
                          5: 0D3D646783321347829AF3DBE2CF61D9810C07DF.crl (hash: Vv6lNy/Z1cj8SLC2O+eFdoLde5IBZiIGHBFiZw1jpG8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f7:b0:e0:fc:e9:07:71:d5:6c:f5:5f:c3:f6:5e:58:c7:ac:0e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
        Validity
            Not Before: Jan 31 06:50:25 2025 GMT
            Not After : Feb  1 08:05:25 2025 GMT
        Subject: CN=5BFE9460343683C680D4292A747771ACB4599A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:3f:37:e0:fe:c0:54:d5:8d:b9:25:1a:5c:
                    56:66:a5:12:f8:20:ca:65:29:35:27:46:51:2c:23:
                    c0:3d:e8:a9:3a:7e:ed:ed:8c:d4:f4:da:f4:05:dc:
                    3b:6c:48:e7:52:30:6c:a2:a0:e4:88:df:20:b8:61:
                    4f:d3:a3:9e:b3:d2:f9:58:23:91:53:22:3c:29:41:
                    4d:28:16:98:df:1b:34:9b:ae:02:a8:92:43:de:a4:
                    41:cb:e0:39:c7:e7:fb:6b:0a:f7:69:70:80:11:51:
                    20:2c:73:82:e1:ef:5d:b0:58:42:a1:d4:1b:8f:e4:
                    60:32:1f:b9:10:0c:c4:0f:1f:63:96:a8:e2:b3:46:
                    f5:71:4d:a2:87:17:f1:e6:a0:e7:eb:82:68:e6:a8:
                    f1:b2:e3:30:3d:4e:ed:24:85:da:72:07:30:6b:ac:
                    1b:ab:47:6b:7a:2e:6d:3a:ae:55:1b:41:95:af:38:
                    6c:00:14:77:9f:99:8a:c1:0a:84:85:77:e1:6a:ba:
                    7d:a4:58:9a:f6:e0:76:09:2f:1a:8d:1d:b6:22:b2:
                    a7:d0:b3:45:ed:84:1b:c2:68:28:11:07:0e:8e:b1:
                    ee:c1:7f:bc:a9:ba:dd:97:e0:5b:13:15:a7:25:3d:
                    a8:ba:08:9c:99:4e:3a:c3:ed:50:4d:bc:7c:af:86:
                    7d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FE:94:60:34:36:83:C6:80:D4:29:2A:74:77:71:AC:B4:59:9A:9D
            X509v3 Authority Key Identifier:
                keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d7:e3:92:d4:97:8a:81:35:c3:4b:fe:e6:8b:bb:81:63:3f:
         a5:cc:e7:75:a7:73:4b:b9:cd:aa:8c:68:60:87:02:92:16:58:
         2f:5c:0c:68:dd:79:07:0e:5f:b6:cd:84:f4:f0:dc:e1:7a:1b:
         f0:eb:cd:c2:39:03:e9:e5:09:7c:92:0d:d2:3f:ee:b8:70:49:
         34:6f:87:67:44:b9:57:3f:ce:f0:9a:ba:3d:f8:f3:ff:35:81:
         1a:6c:79:0c:ce:fb:8f:ab:8a:b4:94:f1:5e:92:2c:8a:81:df:
         58:4f:e5:63:b0:12:ad:cb:12:e7:c6:2d:00:bd:63:55:44:a9:
         04:9d:66:0d:63:8a:ae:9a:4d:77:1a:80:65:3b:3d:44:a5:ef:
         33:39:d7:c0:fd:57:fe:d8:45:3b:54:fc:ae:8e:1f:58:aa:9e:
         55:23:87:1b:24:65:95:66:05:01:ba:34:f9:4a:65:b8:56:d1:
         44:8c:d0:41:ef:62:e9:40:0f:db:a2:74:6f:65:a0:8b:fe:81:
         22:8e:9a:c4:62:ea:c1:0a:44:96:0c:99:f7:20:08:4f:70:90:
         4d:fa:ff:6e:2d:9f:70:2b:7b:f2:ad:79:67:88:9f:6d:e0:72:
         6f:dc:41:56:9a:54:29:41:f0:49:24:49:c5:cb:a4:80:80:ab:
         9c:5a:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:02 2025 by rpki-client