Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft
File:                     CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft (raw, json)
Hash identifier:          fuC2BIjmhbI2ASAs7PSyQdpZF9tBOIA6Os9lRWPNdp4=
Subject key identifier:   BB:A1:68:90:35:0D:A3:60:84:1B:D1:49:29:3D:EE:F2:D5:68:C0:3D
Authority key identifier: CE:C2:57:CD:A1:BB:40:12:35:BD:01:14:C1:FA:2B:A6:A9:66:D3:11
Certificate issuer:       /CN=CEC257CDA1BB401235BD0114C1FA2BA6A966D311
Certificate serial:       0A5543EA55821DE848CE9FE943EAEB3BD9F251D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft
Manifest number:          3C
Signing time:             Thu 17 Apr 2025 13:26:00 +0000
Manifest this update:     Thu 17 Apr 2025 13:21:00 +0000
Manifest next update:     Fri 18 Apr 2025 17:05:00 +0000
Files and hashes:         1: 3133312e3130302e3230302e302f32322d3234203d3e20323731363833.roa (hash: ySVkMs4aA5MidBRgBKpOFbv0M80074JIn7NJsrvNpFg=)
                          2: 323830343a376635633a3a2f33322d3430203d3e20323731363833.roa (hash: zzGVKx01JE8zz2qrco8Ii3uzvQuukTR3pLjlltIM+eU=)
                          3: CEC257CDA1BB401235BD0114C1FA2BA6A966D311.crl (hash: fO+PgIRXH4cnYNNX/FCDF0UVlObuRNq9W/n1Z6y56gQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:43:ea:55:82:1d:e8:48:ce:9f:e9:43:ea:eb:3b:d9:f2:51:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC257CDA1BB401235BD0114C1FA2BA6A966D311
        Validity
            Not Before: Apr 17 13:21:00 2025 GMT
            Not After : Apr 18 17:05:00 2025 GMT
        Subject: CN=BBA16890350DA360841BD149293DEEF2D568C03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:36:d4:62:2d:6f:51:b2:95:a3:16:64:e8:
                    26:ef:3b:a7:78:d3:07:f3:8e:cf:cc:28:49:07:00:
                    8b:2f:63:13:da:96:17:bd:f3:5d:5f:4c:41:d8:de:
                    ba:07:f5:27:42:cf:cc:f1:c4:42:a5:d7:cb:c0:2e:
                    05:3f:b1:8f:ec:27:2c:ea:87:a3:07:ef:54:1c:78:
                    22:73:bd:ff:6b:3b:9c:f0:79:f8:f9:02:58:a6:84:
                    6a:2f:b9:83:d8:d5:ef:4a:b4:f4:a3:49:97:ca:ae:
                    37:e0:52:f8:4b:f5:1f:d0:8b:78:34:5e:e5:0b:88:
                    5a:ef:e5:f5:0f:8c:17:fb:50:83:55:ec:f0:50:d4:
                    48:d1:52:f6:64:47:16:ae:88:12:5f:45:44:b1:75:
                    d2:2a:36:80:b7:28:51:6a:22:fb:db:38:60:a0:01:
                    8a:b1:1f:00:91:d6:08:36:6b:63:7d:8b:37:e9:6e:
                    8c:b6:c5:dc:28:b3:fc:e9:24:29:b7:9a:11:76:56:
                    b5:e9:ec:17:1c:e4:3e:61:5b:9c:37:74:bc:80:ca:
                    c5:5a:43:a7:c8:06:1e:40:a3:8e:2c:b7:8e:77:43:
                    d9:7f:68:3e:e3:ec:bd:72:d3:7c:a1:6d:5c:70:56:
                    41:b1:fc:81:85:98:fd:59:5f:bf:86:72:84:ac:fe:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A1:68:90:35:0D:A3:60:84:1B:D1:49:29:3D:EE:F2:D5:68:C0:3D
            X509v3 Authority Key Identifier:
                keyid:CE:C2:57:CD:A1:BB:40:12:35:BD:01:14:C1:FA:2B:A6:A9:66:D3:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:a7:83:1b:e7:52:16:22:17:aa:ae:7e:3c:46:17:be:70:
         f3:60:2b:bd:31:1d:d2:42:2a:ff:72:04:03:77:61:f1:9d:b9:
         93:9c:3e:b4:9b:44:8f:62:4f:38:d7:a1:ef:e2:e4:43:58:71:
         26:65:26:73:51:df:b1:13:e3:1c:0f:1b:c6:2c:d8:b4:08:b5:
         78:35:2d:0b:41:ea:3a:68:d6:81:69:cb:12:43:c3:05:be:2b:
         ef:54:77:cc:ed:0a:f1:39:99:48:b8:3c:60:0f:7e:1e:4e:78:
         58:5b:b5:ca:54:3b:67:6d:9a:44:74:1a:3c:fa:c3:b6:a1:22:
         1b:4b:b0:08:fd:55:bb:94:75:3b:5d:d9:d3:c3:76:30:3a:26:
         4b:0c:15:1f:f2:c9:d4:6f:97:9f:52:df:76:3b:ff:c1:fd:24:
         24:77:df:23:aa:88:96:20:54:13:ea:2c:09:9f:00:03:fa:8d:
         61:1b:79:be:98:06:c2:77:39:07:aa:7b:f7:4e:ea:57:62:e9:
         ac:50:a6:ea:e1:2b:26:d6:fa:7e:87:21:f6:62:13:03:81:c8:
         68:c6:2a:c9:8d:0f:fd:29:74:6b:42:d2:50:87:28:8b:33:3a:
         52:c3:3f:1c:11:6c:27:b6:a4:bc:61:85:5a:51:02:ef:d2:7b:
         c6:19:37:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:47:12 2025 by rpki-client