Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.mft
File:                     BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.mft (raw, json)
Hash identifier:          CT4wD1Xha+T9kozjMxV3ZWFw/ULA6T1VhTZPrCNOkf8=
Subject key identifier:   C8:8A:4C:F8:42:88:0B:23:D8:F3:B7:5C:82:67:F1:27:93:8C:86:DF
Authority key identifier: BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0
Certificate issuer:       /CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
Certificate serial:       28A4BF58F9C5481C0A7E4676B02AE8427DFCDE17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.mft
Manifest number:          9C
Signing time:             Fri 04 Apr 2025 10:50:38 +0000
Manifest this update:     Fri 04 Apr 2025 10:45:38 +0000
Manifest next update:     Sat 05 Apr 2025 12:41:38 +0000
Files and hashes:         1: 323830343a386362343a3a2f33322d3332203d3e20323733383136.roa (hash: UWbrNLomIxmw9XZYl+sIDh5Fth0bYHQRLVz2nFkY2uI=)
                          2: 323830343a386362343a383030303a3a2f33332d3333203d3e20323733383136.roa (hash: wx9aSocJXudWjshj7vGly3yr+HpOmoPD15i7csJm4CQ=)
                          3: 323830343a386362343a3a2f33332d3333203d3e20323733383136.roa (hash: MJb1JDIczLyP6PoweqfidWkdeXdgXZBFgIRCkdqmO5o=)
                          4: 323830343a386362343a3a2f33342d3334203d3e20323733383136.roa (hash: z3YCaXTaEeo1PM5+kK489Sl/kM6HnSwJy3CQncxeWwU=)
                          5: BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl (hash: gye2zQaHpbrNs4U0Gh2jKShhkOldkbarIojTW5e74kY=)
                          6: 323830343a386362343a383030303a3a2f33342d3334203d3e20323733383136.roa (hash: X3MORxJ0y3SkOCrVkt6Ew+CgrJIO1gyP7n/2/sAaD3M=)
                          7: 323830343a386362343a633030303a3a2f33342d3334203d3e20323733383136.roa (hash: z7SsnORDfkalwxkWVdiQq2GD+25/wioRLWhZdK5VlZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a4:bf:58:f9:c5:48:1c:0a:7e:46:76:b0:2a:e8:42:7d:fc:de:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF68C193144B8DD53B0312AA8ACCD5BB59350E0
        Validity
            Not Before: Apr  4 10:45:38 2025 GMT
            Not After : Apr  5 12:41:38 2025 GMT
        Subject: CN=C88A4CF842880B23D8F3B75C8267F127938C86DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b9:de:95:78:eb:02:12:ac:87:a4:99:0b:76:
                    15:72:fe:c3:ad:d4:3e:1a:e9:af:07:dd:fc:9a:b3:
                    a8:51:64:b9:8e:eb:01:bf:f7:7d:56:fa:d6:17:58:
                    43:2f:be:03:1b:43:a9:cb:73:42:b4:ac:23:8c:84:
                    de:da:cb:dc:f0:db:ef:f6:f2:ba:41:a1:cf:77:45:
                    62:3b:af:7d:7e:ec:e2:c7:3a:62:61:d8:a5:9b:b9:
                    3c:d2:97:ce:1c:a6:70:ad:91:86:44:5e:3b:3d:c3:
                    db:f8:71:62:a8:fb:ed:95:8a:7e:43:70:94:5c:9d:
                    c2:39:d6:a4:01:a0:66:5c:53:aa:b6:32:36:c5:7c:
                    26:7d:ad:5d:38:03:f3:3c:ca:d3:18:87:fc:6b:20:
                    8f:d8:31:55:30:20:1a:22:ba:2d:f3:39:ff:67:2a:
                    a4:14:eb:4d:0d:b8:65:8e:ae:71:a7:3b:b6:a9:f1:
                    c4:a4:c3:30:5c:0e:d7:4a:5c:38:b8:51:b6:06:e7:
                    1d:f3:4b:22:23:9b:01:5d:fb:2d:da:7f:81:b9:4d:
                    a1:a7:32:2a:22:1f:39:f1:eb:e4:d1:6b:14:17:ef:
                    ca:b4:fd:3a:b8:01:97:c2:af:39:54:23:b1:db:fa:
                    25:9d:e6:17:3e:26:4b:91:cd:79:4c:a2:cf:6b:6a:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8A:4C:F8:42:88:0B:23:D8:F3:B7:5C:82:67:F1:27:93:8C:86:DF
            X509v3 Authority Key Identifier:
                keyid:BA:F6:8C:19:31:44:B8:DD:53:B0:31:2A:A8:AC:CD:5B:B5:93:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/BAF68C193144B8DD53B0312AA8ACCD5BB59350E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6f:6c:69:18:6a:96:8a:06:37:f3:e0:3b:18:bb:b4:9e:10:
         3c:d5:3c:91:51:3c:23:75:e7:85:d8:5c:59:82:e7:51:04:8c:
         20:3d:7c:58:5d:6d:20:3b:14:1a:c5:e4:9c:90:89:d5:b1:25:
         14:19:c6:42:b1:00:1e:80:71:8b:0b:d8:4c:54:96:14:3b:76:
         c1:3b:4d:5b:86:14:f4:20:a0:07:b6:69:b5:03:d4:a4:fb:8f:
         99:5d:98:0d:5d:6a:68:b5:54:f2:68:f9:df:34:14:33:87:94:
         42:55:0f:2d:e9:8c:ba:8f:92:b3:43:ac:b4:c9:a7:6d:5f:10:
         7c:4b:52:35:13:03:a5:66:f2:df:71:e1:98:36:5c:21:1f:84:
         a5:91:a0:74:a9:bc:02:2c:49:4b:ef:f2:9e:0f:73:6d:41:0f:
         ab:c7:3f:0c:c0:ef:c6:84:e9:0b:fb:fd:10:82:11:fe:df:72:
         04:4b:03:44:90:0a:8d:48:16:03:f9:78:cd:e5:9f:5a:35:21:
         77:d1:72:44:87:c7:4e:5a:1a:91:4c:52:94:27:62:54:b2:9a:
         21:6b:a6:2c:b2:7e:10:ff:78:75:4f:cb:0f:a6:9e:33:9d:10:
         6d:bc:a1:77:0f:3b:2b:7e:0a:dc:e6:7e:9b:0a:18:5f:b6:ed:
         e6:bb:15:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:47:41 2025 by rpki-client on console.sobornost.net