Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft
File:                     0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft (raw, json)
Hash identifier:          pIIZsFV9cP2M3rQosy41BcY0q9vwIJJo3olR7PoXMb8=
Subject key identifier:   C0:9B:2D:89:C2:E9:C9:EC:15:FF:FB:48:20:D7:05:69:77:C1:22:4F
Authority key identifier: 0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC
Certificate issuer:       /CN=0D9A4BD6F2310AD615675874C9AA26E744205AAC
Certificate serial:       506FB3B683F0D55C6B8A0F0E2DD6641AC4780017
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft
Manifest number:          B5
Signing time:             Wed 11 Jun 2025 22:06:27 +0000
Manifest this update:     Wed 11 Jun 2025 22:01:27 +0000
Manifest next update:     Thu 12 Jun 2025 22:20:27 +0000
Files and hashes:         1: 0D9A4BD6F2310AD615675874C9AA26E744205AAC.crl (hash: 9csoIp0SEtzBUhpiJHxP8eZxViHGtY2/LMjZFOvSr4k=)
                          2: 323830343a366466383a3a2f33322d3438203d3e20323730353637.roa (hash: lyrsv1Nw2TUVJluB9JqIqHS8NbS1KGzu5cy2eTOsBFw=)
                          3: 3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa (hash: dn3WYXJyj65U1zFjuNpdTIpCem+Ty5L2NVXRyajJX1w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6f:b3:b6:83:f0:d5:5c:6b:8a:0f:0e:2d:d6:64:1a:c4:78:00:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9A4BD6F2310AD615675874C9AA26E744205AAC
        Validity
            Not Before: Jun 11 22:01:27 2025 GMT
            Not After : Jun 12 22:20:27 2025 GMT
        Subject: CN=C09B2D89C2E9C9EC15FFFB4820D7056977C1224F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:1f:ce:e8:4a:6b:a5:3d:48:d9:dd:32:de:
                    eb:81:e6:1a:cb:d6:4b:a3:7d:4a:07:aa:3f:d3:b0:
                    51:e0:73:ec:18:aa:31:19:bc:6a:76:cb:8e:d4:84:
                    a8:e9:8d:56:60:18:b8:6c:bf:a8:9f:2c:78:ce:87:
                    98:2d:24:6b:53:19:a3:93:73:51:e2:15:81:76:d3:
                    29:cb:e2:52:98:47:a0:df:8f:5e:0a:6a:40:88:03:
                    53:58:c4:eb:c7:dd:38:4f:6d:e1:7a:57:6f:2b:26:
                    0c:1b:7b:7b:53:8e:c1:01:43:5f:9e:14:78:02:3f:
                    0e:39:29:8e:59:2b:14:f7:99:7f:6e:62:16:55:cf:
                    f2:a0:95:50:e2:ae:23:4d:1e:b8:e3:87:78:9d:f5:
                    a7:cc:4a:d7:0a:f8:e2:ca:1a:c5:9d:2c:1b:5e:9b:
                    4e:5d:56:47:f3:33:af:c5:ec:88:49:ba:69:ca:0e:
                    cf:82:cc:f0:91:01:ce:3f:a1:9e:73:29:98:33:93:
                    73:87:f9:21:65:14:56:25:ac:43:2a:a6:19:22:0b:
                    39:d2:d7:ff:15:93:ac:1b:3e:ca:db:07:c6:00:ba:
                    13:f6:40:05:5c:7b:e2:06:9d:14:83:5d:1d:bb:59:
                    6b:f4:26:6f:12:b6:81:0a:1d:c9:f7:b6:0b:d2:8b:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9B:2D:89:C2:E9:C9:EC:15:FF:FB:48:20:D7:05:69:77:C1:22:4F
            X509v3 Authority Key Identifier:
                keyid:0D:9A:4B:D6:F2:31:0A:D6:15:67:58:74:C9:AA:26:E7:44:20:5A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D9A4BD6F2310AD615675874C9AA26E744205AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/0D9A4BD6F2310AD615675874C9AA26E744205AAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:25:ca:a5:1c:b2:5e:88:e6:0b:ad:c8:ad:84:e3:0a:2a:
         69:a5:07:6e:61:69:e9:3c:8a:f9:3a:6e:50:7a:be:66:ae:2d:
         35:df:4d:a4:bd:29:23:7f:13:df:48:bc:fe:05:11:62:a2:98:
         d5:f9:bb:4d:2e:2d:4d:eb:82:4f:04:50:49:e3:52:4c:e8:34:
         fb:b6:c9:e2:80:d9:84:31:23:93:0b:2c:a3:3d:69:39:f3:ee:
         6b:25:33:17:5d:52:45:3c:6b:d8:ef:77:5f:39:e8:13:e4:22:
         fd:36:0e:d7:8e:6c:d3:3a:03:05:45:86:77:f7:97:20:29:f8:
         2e:fa:36:1e:c7:13:80:9e:79:62:52:81:f6:fe:c6:97:22:1a:
         93:cc:4f:27:fe:c3:ce:95:b9:c7:01:e7:f8:bb:53:a8:19:51:
         8a:a1:09:1d:41:27:12:f9:dd:aa:e6:dd:6d:0d:d2:66:6d:94:
         6e:28:82:91:42:ab:da:a0:83:bd:2e:f6:bc:73:09:f0:15:e7:
         ae:e5:fc:45:8a:07:0e:ee:a9:f9:ed:ba:d3:f7:d2:67:12:fd:
         80:70:d8:c3:62:c4:bf:57:ff:7a:1c:a7:1a:72:ae:e9:a0:88:
         a9:a8:92:9e:49:09:00:4d:68:fc:03:e3:fa:58:7e:9e:73:63:
         77:3b:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:23:35 2025 by rpki-client