Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.mft
File:                     DDBDF3956666958841B65B1975D5A1B71D720BC9.mft (raw, json)
Hash identifier:          NCuGnsVV3Af9BSyewFb+jb+QgVBeCey2zKn3v8jOQq8=
Subject key identifier:   9E:4C:FD:3B:0C:4B:27:20:A9:15:64:77:90:1B:ED:84:AC:2E:5C:C5
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Certificate issuer:       /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial:       2E60B185560A526700B03EAA0D21E012F1BC0BAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.mft
Manifest number:          2F
Signing time:             Fri 07 Feb 2025 10:16:36 +0000
Manifest this update:     Fri 07 Feb 2025 10:11:36 +0000
Manifest next update:     Sat 08 Feb 2025 10:28:36 +0000
Files and hashes:         1: 3230302e3135302e3235352e302f32342d3332203d3e20323731363730.roa (hash: oQys4EkuR/Bjj8BeVCGTCokpoToG8WyvKGpraYn5tRs=)
                          2: 3230302e3135302e3235322e302f32342d3332203d3e20323731363730.roa (hash: UyFdwAgsBjccSpLKdXEaTK69h1lV2LQcZGUBr+y3zU0=)
                          3: DDBDF3956666958841B65B1975D5A1B71D720BC9.crl (hash: hxygPAmyPsChFVhP+8uCr5ID+FkqMpdUen0+zbFyKLY=)
                          4: 3230302e3135302e3235342e302f32342d3332203d3e20323731363730.roa (hash: 1CUcyryYuj7WKi3goNSFbT57Al8odh8XdxTiiaz5Wzk=)
                          5: 3230302e3135302e3235332e302f32342d3332203d3e20323731363730.roa (hash: 5tLnU1wylmNuGqsEgnA7GMyWj95a68Q3sZCYsyP1E+U=)
                          6: 323830343a376632383a3a2f33322d313238203d3e20323731363730.roa (hash: rEJbEe4GiL/wC+bTnJR7zsFa7Vk5+BLL4BflB1/Y6nE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:60:b1:85:56:0a:52:67:00:b0:3e:aa:0d:21:e0:12:f1:bc:0b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
        Validity
            Not Before: Feb  7 10:11:36 2025 GMT
            Not After : Feb  8 10:28:36 2025 GMT
        Subject: CN=9E4CFD3B0C4B2720A9156477901BED84AC2E5CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:5d:ad:55:e8:65:60:66:e5:97:08:59:3c:
                    dc:26:ee:c7:fb:11:06:1a:cb:29:32:94:68:07:06:
                    f7:77:f6:52:24:a2:a2:1e:22:7f:d5:87:58:fc:b5:
                    3d:84:12:9c:11:f5:4b:ad:aa:0f:aa:60:9f:fc:23:
                    51:64:65:ba:d6:49:9c:a2:e3:74:fb:16:ca:fe:d3:
                    3b:28:dd:b7:7b:58:0e:aa:3c:36:70:d1:37:81:bd:
                    34:b0:55:59:0c:ed:ea:9b:23:a8:6c:e4:02:32:87:
                    09:7c:fa:dd:f9:39:d7:3c:b1:93:0b:2b:90:a4:03:
                    eb:35:89:91:7e:b1:53:bb:22:64:db:71:9a:60:a3:
                    be:d9:d4:ee:9a:21:48:83:8f:26:ae:87:ca:6d:25:
                    24:24:a4:f6:2f:81:5f:42:69:b3:d0:fe:4f:14:7f:
                    97:c4:68:96:31:6b:73:7f:b4:bf:e3:22:d3:03:24:
                    95:73:de:2e:b8:0f:33:8a:b2:16:6f:eb:46:c9:49:
                    fc:7f:53:57:fe:3d:99:e6:3f:33:eb:d9:17:43:0c:
                    51:b9:1f:47:ec:72:ed:2a:50:79:2a:3f:55:05:58:
                    67:5d:bf:a5:3e:b9:86:7b:9f:a0:0f:3a:49:70:aa:
                    9c:01:65:3e:37:39:9b:f7:04:17:80:57:91:1d:fe:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:FD:3B:0C:4B:27:20:A9:15:64:77:90:1B:ED:84:AC:2E:5C:C5
            X509v3 Authority Key Identifier:
                keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:39:bc:02:7f:ba:9d:40:1c:0d:69:d9:1f:18:60:5f:fe:
         52:86:12:f9:44:9b:cc:c6:b1:7d:90:32:d7:bb:88:19:ac:c7:
         51:90:5b:75:10:b6:8c:66:0a:99:11:69:b2:13:f2:d6:72:af:
         e6:d2:44:27:b6:c6:f0:08:bb:9a:28:d9:08:16:09:ba:a9:22:
         7c:5c:d5:b9:90:d3:e7:8b:a2:24:14:68:d7:2c:a2:c9:6e:18:
         1e:5d:9b:41:41:ad:d6:86:e5:3d:3d:b2:ff:80:0f:13:b5:5d:
         53:20:5d:2d:d6:2c:08:50:e9:18:37:d9:6c:b1:2f:1a:66:c9:
         ae:0c:ea:13:18:46:bf:00:7b:ed:51:cf:70:09:aa:46:dd:c2:
         02:c4:53:bc:57:d1:49:2f:f5:6f:6a:b6:cc:f7:45:a1:fe:3a:
         5e:5e:c4:c4:ee:9e:27:7d:ba:91:08:36:c7:9c:a9:6a:97:ce:
         aa:79:e5:0d:87:63:9f:00:38:1e:e4:a0:1f:25:0d:cf:c8:bb:
         04:84:23:8e:cb:b6:67:0d:0a:fc:ba:b4:6c:1c:18:fd:05:32:
         80:ec:aa:03:bd:8a:a8:76:d9:15:d1:b2:56:1f:30:56:b7:8d:
         35:b7:27:29:5f:fc:8f:5b:82:14:e1:da:87:5a:f8:db:dc:8d:
         63:9b:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 17:04:57 2025 by rpki-client