Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/D29E3C98FE6282811CDB0CF1535F8261D2242342.mft
File:                     D29E3C98FE6282811CDB0CF1535F8261D2242342.mft (raw, json)
Hash identifier:          4JXN6iOJ4i6z3QR7zTCb9jHJgJWn8Rw0UX5QXEzVbUw=
Subject key identifier:   3F:AA:FC:3A:8D:96:4F:0A:4D:D3:83:92:7B:12:6A:93:B9:D9:D1:63
Authority key identifier: D2:9E:3C:98:FE:62:82:81:1C:DB:0C:F1:53:5F:82:61:D2:24:23:42
Certificate issuer:       /CN=D29E3C98FE6282811CDB0CF1535F8261D2242342
Certificate serial:       4E50745D614DFA4BB36F88BDFC38F00A42E393CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D29E3C98FE6282811CDB0CF1535F8261D2242342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/D29E3C98FE6282811CDB0CF1535F8261D2242342.mft
Manifest number:          10
Signing time:             Mon 20 Feb 2023 08:00:59 +0000
Manifest this update:     Mon 20 Feb 2023 07:55:59 +0000
Manifest next update:     Tue 21 Feb 2023 10:56:59 +0000
Files and hashes:         1: 3139302e38392e3135312e302f32342d3332203d3e20323730333730.roa (hash: rsu7cOoGQJhgEtbCXNnahq+r4Az4TOgpqjvQJ+l901E=)
                          2: 3139302e38392e3134382e302f32342d3332203d3e20323730333730.roa (hash: vGFHRxUqkC71hRL5pBgT9tW8P2gXIsRG9m1FQ2n12fw=)
                          3: 323830343a366166633a3a2f33322d313238203d3e20323730333730.roa (hash: ezCGut2eNQe0+PZzOdGLvqMr62r6RzcGdvyzM34uzEg=)
                          4: 3139302e38392e3134392e302f32342d3332203d3e20323730333730.roa (hash: NK9W/zqcmm6P905aU4mxNIMN6PQxazQ3p9THOOeA0y4=)
                          5: 3139302e38392e3135302e302f32342d3332203d3e20323730333730.roa (hash: HHF9CzZtifZXlxliZgZ3rlvX/Px5iJ86yoPKw7qeGaM=)
                          6: D29E3C98FE6282811CDB0CF1535F8261D2242342.crl (hash: SthOlUwFHCkEB56xOY0uZ1HaM68Eg57tX9h0RhxNoXs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:50:74:5d:61:4d:fa:4b:b3:6f:88:bd:fc:38:f0:0a:42:e3:93:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D29E3C98FE6282811CDB0CF1535F8261D2242342
        Validity
            Not Before: Feb 20 07:55:59 2023 GMT
            Not After : Feb 21 10:56:59 2023 GMT
        Subject: CN=3FAAFC3A8D964F0A4DD383927B126A93B9D9D163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:94:17:d4:07:35:e5:b4:b5:ef:25:d3:82:
                    13:a3:f6:e8:28:a6:4d:c5:02:d7:d2:2f:3f:cd:2f:
                    c8:b0:29:ac:e8:04:af:71:9c:8f:85:d3:cd:1d:4c:
                    41:fc:96:80:b4:63:e2:f2:47:db:26:00:c4:9d:84:
                    35:6e:41:80:0a:70:4d:7f:2e:86:b2:58:c6:bc:15:
                    ca:4c:47:69:47:fd:2a:e8:6d:7f:cb:4a:08:dc:30:
                    1a:a9:30:66:14:d1:aa:48:4d:db:96:e2:bc:e1:14:
                    a3:c5:b3:bf:8a:79:10:75:07:d3:b7:39:9d:7e:bd:
                    0e:91:2a:0c:0e:f4:3f:f3:b6:9f:5a:97:24:c8:ac:
                    99:0a:4d:25:56:f4:06:00:21:20:a4:40:0c:f4:d4:
                    fa:b8:60:fa:c2:6f:82:b3:43:67:b2:5d:4c:6d:88:
                    e6:e7:80:1b:57:11:ed:8b:c3:3b:43:68:f0:41:38:
                    0a:d5:fb:ae:90:25:e0:e3:07:1b:5d:7f:9b:86:be:
                    b3:64:5a:f9:23:7e:6c:1e:f2:92:cd:7e:a2:bb:8e:
                    72:be:bd:14:27:31:37:ae:6f:6d:35:ba:71:57:b6:
                    14:06:21:bc:aa:6c:b1:c4:3a:10:89:97:f1:52:20:
                    af:ca:fa:cc:f3:66:5a:6e:e6:ca:d8:14:40:32:ad:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AA:FC:3A:8D:96:4F:0A:4D:D3:83:92:7B:12:6A:93:B9:D9:D1:63
            X509v3 Authority Key Identifier:
                keyid:D2:9E:3C:98:FE:62:82:81:1C:DB:0C:F1:53:5F:82:61:D2:24:23:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/D29E3C98FE6282811CDB0CF1535F8261D2242342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D29E3C98FE6282811CDB0CF1535F8261D2242342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/D29E3C98FE6282811CDB0CF1535F8261D2242342.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:45:51:7b:40:c1:a2:1e:91:66:5d:3b:42:c5:6f:2b:e4:b8:
         4d:e2:bd:03:6a:d2:82:de:b4:17:02:a7:18:b6:bc:49:23:5a:
         2e:7b:53:35:8c:43:9b:37:92:9d:dd:26:f7:61:6d:7e:3c:fa:
         72:98:ef:06:b9:0a:d1:c9:e1:87:12:9b:bd:e2:cd:65:69:33:
         ea:78:5f:9b:0e:21:f8:19:17:fc:44:ed:c9:f2:32:4e:43:2e:
         ce:a1:1a:15:eb:73:85:15:2d:a0:58:bd:7f:fc:03:18:9b:06:
         8a:ab:6b:b4:cf:bd:b9:bc:f0:a3:63:6f:56:d0:d9:91:37:67:
         f1:2c:4a:95:95:d4:df:10:2f:cb:33:c6:7e:e8:ea:75:00:8b:
         b5:06:87:09:7f:0f:7f:67:c4:a8:19:de:73:80:ab:c7:99:48:
         11:81:5f:a0:59:3f:2d:2c:d6:63:c0:af:1e:df:fa:4e:3c:b8:
         6b:52:a3:ce:d8:a6:69:50:94:a5:3f:31:49:81:2a:3d:72:2e:
         69:19:88:b7:40:a1:c0:56:4f:bc:e5:1b:0c:1c:af:be:69:ec:
         18:c0:09:aa:b3:43:83:95:1e:87:39:7e:61:28:60:09:b1:ff:
         c9:b0:66:e2:7d:5a:25:aa:89:a4:73:2f:47:8d:86:86:b4:d7:
         70:50:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:42:50 2025 by rpki-client