Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
File:                     18A4CF42CC304D1E5395D809FDD692A864102BAE.mft (raw, json)
Hash identifier:          TwTZixmQhKvg01IB58AoYp5qwoKJca/j5W9Z3pFnYVk=
Subject key identifier:   28:47:69:82:E3:5E:8C:A0:AF:91:75:9C:B8:33:21:27:CF:65:FD:AC
Authority key identifier: 18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE
Certificate issuer:       /CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
Certificate serial:       435D28A46FD0836A3FE8399DA05AD3DAFF4DBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft
Manifest number:          011D
Signing time:             Tue 06 May 2025 06:25:39 +0000
Manifest this update:     Tue 06 May 2025 06:20:39 +0000
Manifest next update:     Wed 07 May 2025 08:52:39 +0000
Files and hashes:         1: 323830343a363566303a3a2f33322d3334203d3e20323639353234.roa (hash: YwtWVePQryzk7OdLLicpoWAGIU9SEwIerI/rotGO1aY=)
                          2: 18A4CF42CC304D1E5395D809FDD692A864102BAE.crl (hash: icmnwGeDdbnRsbkjsk/SJKoNm7O3GYemTLYvcOHdBx4=)
                          3: 34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (hash: gJIFIK9aFAHb/0LGxIj2bWYjndNDbHONuewCwpY5+iE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5d:28:a4:6f:d0:83:6a:3f:e8:39:9d:a0:5a:d3:da:ff:4d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A4CF42CC304D1E5395D809FDD692A864102BAE
        Validity
            Not Before: May  6 06:20:39 2025 GMT
            Not After : May  7 08:52:39 2025 GMT
        Subject: CN=28476982E35E8CA0AF91759CB8332127CF65FDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:07:e9:9b:be:a8:74:1b:2e:b0:e2:b9:ea:
                    40:a8:94:29:a8:b0:85:55:c1:10:6b:d0:87:8d:78:
                    b6:4c:70:69:78:60:e7:b6:6c:52:90:10:36:45:37:
                    b8:d7:3c:63:c3:b2:c0:5d:cc:d0:84:f3:94:58:3b:
                    5b:60:82:33:ac:03:b6:a9:2e:c6:b5:0e:93:1e:53:
                    fb:13:96:d0:4c:42:ad:08:13:ab:14:41:22:b7:a3:
                    cd:ed:e5:c1:00:47:00:99:df:a7:8b:55:06:bc:de:
                    9f:20:75:12:8e:d1:70:62:52:56:ac:76:11:d8:fc:
                    6c:19:4f:12:30:a4:f9:5e:c5:dc:36:7c:c4:77:75:
                    8b:5d:b9:86:01:b3:75:df:4e:93:1e:d7:2d:2c:d7:
                    d6:fc:25:8d:39:79:00:38:2a:61:81:6a:b8:9d:c6:
                    22:65:8b:cd:24:93:98:06:18:93:bf:c9:45:69:e3:
                    1e:0f:b7:96:6e:07:3d:cb:9d:ff:51:a7:e5:60:dc:
                    bf:12:6c:53:a8:c4:57:22:0c:d3:bc:93:f4:41:c5:
                    40:b8:bc:0d:cc:62:d4:5a:2f:87:d6:49:af:28:21:
                    86:b5:e6:17:e1:d1:0f:1e:39:c0:d9:a2:10:c5:8e:
                    e3:d5:ee:13:6d:11:27:b8:23:b8:d1:4d:93:f8:27:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:69:82:E3:5E:8C:A0:AF:91:75:9C:B8:33:21:27:CF:65:FD:AC
            X509v3 Authority Key Identifier:
                keyid:18:A4:CF:42:CC:30:4D:1E:53:95:D8:09:FD:D6:92:A8:64:10:2B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18A4CF42CC304D1E5395D809FDD692A864102BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/18A4CF42CC304D1E5395D809FDD692A864102BAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:33:7d:28:fd:05:92:8a:b9:3a:32:22:eb:d6:b3:c9:d1:e6:
         e0:60:da:a8:58:65:56:9f:08:2e:fa:93:57:3a:0b:9a:12:40:
         91:85:a0:03:06:d0:4d:3f:bf:40:02:ee:cb:cc:77:ab:20:5c:
         e6:47:09:1b:b9:59:f5:a1:91:82:2d:fe:81:72:2c:ef:f2:55:
         ac:7d:41:92:3c:0d:0d:9e:bc:b3:cb:72:ed:40:cd:9a:e1:34:
         62:68:8b:3b:ab:d2:9e:a6:ed:35:01:a9:77:60:a9:61:cc:39:
         71:16:41:b5:54:e5:3e:80:35:93:f5:c6:03:d3:80:4a:c0:61:
         a6:52:21:3a:21:c2:49:31:5f:10:56:d3:40:27:9c:e8:84:1e:
         5f:19:00:22:65:5c:ec:6b:37:55:bf:bd:bb:7e:e6:ce:e8:7b:
         0a:0a:e1:40:bf:37:73:b0:ba:2e:18:85:42:c9:ea:e6:3c:24:
         a8:d1:0a:64:a5:fe:39:6b:7c:ae:42:7f:da:43:5b:a2:47:5b:
         97:8f:08:b4:16:9f:fc:43:ce:3e:b8:6d:5e:d9:0b:e5:3f:87:
         5a:ec:d6:8a:d0:64:09:7c:94:fe:96:00:a9:d9:c8:79:e1:c6:
         6a:d5:b8:de:7c:1d:4f:f9:d6:bf:28:58:d8:7b:a7:39:dc:2f:
         41:d9:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:40:26 2025 by rpki-client