Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.mft
File:                     4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.mft (raw, json)
Hash identifier:          qvVPepmDY0KlYgf6IKwpEeiWTs4ewqORcXit0zgE1K8=
Subject key identifier:   30:B6:CC:EC:5D:45:32:5C:F2:4E:57:19:5F:2A:61:C9:71:A5:44:74
Authority key identifier: 4B:C8:5D:25:1A:FF:6A:91:EA:FA:C4:B1:5C:1D:7C:15:FD:7B:8A:BB
Certificate issuer:       /CN=4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB
Certificate serial:       4F10A6A9F88B1B42D4E435CE2FA7336AAD016E34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.mft
Manifest number:          A7
Signing time:             Fri 18 Apr 2025 09:18:38 +0000
Manifest this update:     Fri 18 Apr 2025 09:13:38 +0000
Manifest next update:     Sat 19 Apr 2025 13:02:38 +0000
Files and hashes:         1: 4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.crl (hash: wTRNZA8wfWrtV3cZcZWYqgzpnhXupO4TyctlM0M20c0=)
                          2: 323830343a3337633a3a2f33322d3438203d3e203532393831.roa (hash: Zxp5gjp3ixEkri29zxZgs/Dc1qWtuaC1RFUNy87jgoY=)
                          3: 3137372e32322e33322e302f32302d3234203d3e203532393831.roa (hash: hlyJE8XybuF27fxRiseVxUrOj79M5Zbz0+Iu3L8ZTso=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:10:a6:a9:f8:8b:1b:42:d4:e4:35:ce:2f:a7:33:6a:ad:01:6e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB
        Validity
            Not Before: Apr 18 09:13:38 2025 GMT
            Not After : Apr 19 13:02:38 2025 GMT
        Subject: CN=30B6CCEC5D45325CF24E57195F2A61C971A54474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:01:81:1e:0e:44:ac:7d:b8:cd:c6:c0:70:
                    50:82:98:63:0d:1b:20:7a:d0:0c:68:b2:5d:e5:ea:
                    da:35:6f:29:66:50:ca:dc:0b:a4:ab:a4:32:a1:ae:
                    85:5a:e3:bb:ae:ad:8a:11:28:14:e6:fa:e0:61:1a:
                    8a:8f:7a:04:b8:2e:72:1d:86:fe:65:f3:51:88:34:
                    5b:60:4d:ae:a8:08:06:e7:2d:23:c9:04:3b:8d:bf:
                    9a:37:f4:3b:ea:64:8f:54:5a:ab:fc:3d:58:08:9b:
                    5f:6f:96:fe:49:f9:18:dd:a3:08:d2:ce:6d:a5:ed:
                    41:f6:39:22:d0:21:a0:a2:99:7f:9f:c1:09:28:61:
                    bb:28:ee:3b:06:85:67:45:95:13:4a:1f:cb:0f:6f:
                    ba:3e:07:49:5b:18:f3:1f:d1:ef:13:83:d1:ac:82:
                    88:94:80:5f:22:d7:11:8f:1a:bc:b8:2f:0f:12:ac:
                    4d:ca:94:0b:5c:75:a8:87:d6:17:ab:e6:15:15:d3:
                    f8:97:3c:d9:f6:85:06:8d:ff:6e:0f:a1:e2:1c:5c:
                    96:81:bf:35:46:48:a3:2f:b9:05:07:ef:6d:52:38:
                    d5:93:8a:e3:48:db:a6:81:47:4f:71:8b:f3:26:84:
                    33:c4:32:ab:11:3c:e6:35:c9:d4:69:e5:3c:36:1d:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B6:CC:EC:5D:45:32:5C:F2:4E:57:19:5F:2A:61:C9:71:A5:44:74
            X509v3 Authority Key Identifier:
                keyid:4B:C8:5D:25:1A:FF:6A:91:EA:FA:C4:B1:5C:1D:7C:15:FD:7B:8A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:03:6e:48:e3:e0:ee:d1:dd:b0:db:31:82:96:60:a3:90:d6:
         4f:59:5b:87:ba:6e:cc:bc:6b:42:5c:dd:97:38:b9:a2:67:ec:
         ff:c5:94:65:94:83:d2:bd:02:60:8a:0a:14:51:56:79:c7:3e:
         c5:99:36:61:d7:80:eb:51:0d:b5:19:5a:ab:b3:30:47:bc:25:
         d4:f6:a0:87:d2:00:06:00:dc:97:84:48:af:d2:7c:a3:68:8f:
         50:80:02:a2:8e:fd:05:c4:a2:b5:df:df:9a:f8:31:7f:b7:fa:
         1e:c9:7d:9e:48:cc:34:47:73:49:30:99:0d:9c:0b:5a:e7:64:
         15:9f:68:32:4d:fc:0d:bb:ef:38:a2:e1:03:a5:ab:65:a3:b5:
         13:6e:8f:11:07:d5:3a:70:8c:44:11:c0:0d:7e:e3:a1:af:10:
         a7:76:ff:55:9b:2e:7f:b8:63:15:eb:27:c2:0b:bb:7f:bd:71:
         df:39:c7:5f:76:e1:c5:42:dc:a4:24:1f:f9:56:7c:92:06:08:
         25:65:82:6d:6e:2b:cb:1f:61:3d:b4:94:29:17:10:78:8e:75:
         43:c2:14:fa:27:a8:85:cc:54:ce:3f:7d:6f:18:95:bf:c8:78:
         85:17:91:07:83:61:d9:ed:a4:8b:84:4d:1b:77:c2:c4:8d:2d:
         89:36:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:17:30 2025 by rpki-client