Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft
File:                     3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft (raw, json)
Hash identifier:          jVkrRQfq6MkdIK7BSI6Z9o8CtY3oY8Bhrrc3gjBR5W4=
Subject key identifier:   3B:93:48:E4:63:A1:60:70:F5:B3:86:F0:A8:6D:17:69:05:D3:21:6C
Authority key identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A
Certificate issuer:       /CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A
Certificate serial:       57E92FB5FFEBCE3A38F0E5D825B41F66C46A545F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft
Manifest number:          0284
Signing time:             Tue 29 Jul 2025 20:07:51 +0000
Manifest this update:     Tue 29 Jul 2025 20:02:51 +0000
Manifest next update:     Wed 30 Jul 2025 23:40:51 +0000
Files and hashes:         1: 323830343a333863633a3a2f33322d3438203d3e20323636353032.roa (hash: C6cWb5tmxGM0R2y1xyu0jRkkIO0m2htiUCIjUNYPIQs=)
                          2: 3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.crl (hash: t3bNxYKIamY6pcsIcxESoGDmMd5PUsu6mVRihicLbLE=)
                          3: 3137302e3234342e3137322e302f32322d3234203d3e20323636353032.roa (hash: iJvgdlatCjENtKEKUUCbciu6RBbn72tp0F/fnuKKlqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e9:2f:b5:ff:eb:ce:3a:38:f0:e5:d8:25:b4:1f:66:c4:6a:54:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A
        Validity
            Not Before: Jul 29 20:02:51 2025 GMT
            Not After : Jul 30 23:40:51 2025 GMT
        Subject: CN=3B9348E463A16070F5B386F0A86D176905D3216C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:b5:fc:28:a4:9b:41:83:ad:77:4d:16:89:
                    1f:8a:93:66:48:f3:6f:d7:75:bb:14:38:bb:8f:47:
                    f4:c7:d5:5e:d6:4d:72:c1:60:f5:ff:68:42:c8:9e:
                    74:db:f6:b3:7f:17:de:ac:c1:84:3d:b5:d7:30:88:
                    87:8e:aa:2c:50:34:e3:0d:c4:d3:5c:db:5f:59:cc:
                    bc:0a:c7:13:a3:a4:93:d8:93:29:53:d2:08:9a:fb:
                    2a:a9:a0:24:02:bf:81:fb:39:79:5a:f7:96:d2:4e:
                    16:34:cf:b7:1d:20:61:79:67:3b:ae:98:6c:47:29:
                    dc:1a:ce:53:1a:f5:c7:2a:4f:4e:de:1e:b0:7f:2f:
                    cb:86:21:49:a4:f2:5e:9d:cc:7f:53:c9:f4:f3:35:
                    49:6a:d0:8d:44:90:86:06:c7:58:93:5e:ea:45:2a:
                    29:24:bd:46:a1:77:2b:71:81:30:ab:9a:c3:d9:a5:
                    45:0a:b5:b3:0e:a9:3e:3b:03:7f:f7:1c:1e:c3:02:
                    85:76:a2:fb:61:be:8c:c6:9d:ac:dd:c2:8b:5b:01:
                    71:a7:f3:54:75:1e:78:a0:57:5a:4f:d9:8e:b3:b3:
                    8c:a6:63:fa:1b:7e:27:8a:34:4c:1c:e6:45:40:31:
                    44:0c:6f:15:93:da:6d:15:91:2d:31:ad:56:fd:6b:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:48:E4:63:A1:60:70:F5:B3:86:F0:A8:6D:17:69:05:D3:21:6C
            X509v3 Authority Key Identifier:
                keyid:3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:81:aa:84:98:b0:18:4c:d5:59:b6:dc:2e:15:e1:3e:d7:cd:
         d6:b5:bb:c3:10:f2:9e:c7:a8:2f:dc:0a:35:03:fa:7a:ca:67:
         1a:ed:35:d0:cb:80:03:c8:72:86:da:43:9f:02:66:69:04:90:
         41:48:6b:c0:15:61:50:0e:3d:fd:da:85:bc:bb:bb:17:48:10:
         e0:b5:bd:97:2d:ef:13:2a:41:83:d6:65:75:29:87:ee:34:a4:
         26:70:39:43:93:4a:f3:57:33:0f:5b:e8:bd:b2:f8:9f:fb:29:
         b0:dd:23:69:c6:dc:75:3e:ff:51:10:21:fc:ea:2a:09:fe:f3:
         cd:18:9b:0b:9b:f0:09:29:b0:8d:79:78:c1:0d:69:9e:d5:8c:
         8c:22:64:8f:35:a1:e7:d9:73:38:a6:e9:91:70:27:fa:9d:23:
         4e:1c:d5:1e:c8:52:4b:86:c1:2b:b4:47:e2:93:fb:82:b5:6d:
         44:8b:7d:f6:2f:62:f2:cc:0e:1d:99:41:13:71:75:16:e4:62:
         e6:20:ce:a9:ce:39:ae:a2:82:9b:2d:21:0f:b5:66:85:0c:98:
         4a:49:ea:93:5f:fc:59:97:c3:2a:3d:9b:c9:27:99:f3:ac:00:
         e3:db:07:79:40:9d:ef:dd:1e:f1:3f:41:9f:11:ab:09:b6:f4:
         0c:1f:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:34:33 2025 by rpki-client