Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft
File:                     025F1CD695A03927B6C43B9CCE128361E24CC47C.mft (raw, json)
Hash identifier:          0cyHLvz45m76WLgNzZJTh4c1yR5piTc7XEaoI6m8N4g=
Subject key identifier:   59:B9:FC:EC:B6:0C:14:EA:FA:19:B4:83:86:2D:5B:82:52:C5:EC:A9
Authority key identifier: 02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C
Certificate issuer:       /CN=025F1CD695A03927B6C43B9CCE128361E24CC47C
Certificate serial:       5E04979C76E54CA1E63EA1B74CD1F835760497F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft
Manifest number:          77
Signing time:             Fri 31 Jan 2025 08:41:00 +0000
Manifest this update:     Fri 31 Jan 2025 08:36:00 +0000
Manifest next update:     Sat 01 Feb 2025 10:33:00 +0000
Files and hashes:         1: 3137302e38312e37362e302f32322d3332203d3e20323636333934.roa (hash: wvA5Hzn+0u7XENCLypkz0h5GItMUCoBMCPVnh3nV9W4=)
                          2: 025F1CD695A03927B6C43B9CCE128361E24CC47C.crl (hash: mbvev/3g0SKtVV6jmiE0sLlizFZSLsfkADIdJP8jGEA=)
                          3: 323830343a333732633a3a2f33322d313238203d3e20323636333934.roa (hash: K6wPwmTo00RyeVoQrDt24ww2pkC9ts/mzsDgqaFom3o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:04:97:9c:76:e5:4c:a1:e6:3e:a1:b7:4c:d1:f8:35:76:04:97:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025F1CD695A03927B6C43B9CCE128361E24CC47C
        Validity
            Not Before: Jan 31 08:36:00 2025 GMT
            Not After : Feb  1 10:33:00 2025 GMT
        Subject: CN=59B9FCECB60C14EAFA19B483862D5B8252C5ECA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:95:39:22:e7:07:c5:d1:49:c2:8b:86:72:
                    39:e3:4b:4e:b3:d5:22:4f:c8:e7:d6:f0:b2:23:b0:
                    52:ab:60:2a:5d:a5:da:e0:f0:93:f8:54:6f:3d:76:
                    b3:7e:5f:30:18:17:42:59:29:3d:54:60:7a:d5:52:
                    34:ee:49:2b:ae:02:ea:78:b8:01:49:b3:a2:fd:b0:
                    d0:dc:59:7e:d7:07:cc:ae:20:fe:ec:cc:4f:50:a9:
                    02:43:4a:8e:db:89:57:19:e5:93:94:11:14:ec:7c:
                    73:7c:07:12:64:f6:4a:46:17:43:05:68:9d:aa:6c:
                    1b:9f:dd:89:75:f4:d0:e9:d6:8a:5c:a3:42:79:60:
                    96:0a:e5:63:85:d0:99:4f:9e:40:76:6d:26:40:a7:
                    ab:66:eb:9f:5e:38:e8:4f:b8:df:f7:00:ee:35:56:
                    43:61:b7:d7:1b:b9:36:02:40:60:75:ab:4a:bc:a2:
                    59:63:12:c3:7a:56:aa:4b:8e:14:06:71:5c:fc:35:
                    a3:72:92:2f:17:77:39:89:b6:f5:b0:86:a1:29:60:
                    0d:40:d1:5b:a0:1e:de:f2:da:d1:da:42:58:b8:bb:
                    81:1d:82:4a:fb:21:ef:9c:06:52:5d:fa:37:25:36:
                    27:17:b3:39:0e:75:71:13:60:d0:b3:f9:14:83:14:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B9:FC:EC:B6:0C:14:EA:FA:19:B4:83:86:2D:5B:82:52:C5:EC:A9
            X509v3 Authority Key Identifier:
                keyid:02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:53:22:29:a2:57:fd:56:d5:82:0b:60:33:0b:e7:38:d8:
         ae:c3:9f:16:a3:97:fc:f0:64:9e:b9:91:9a:52:e1:08:18:f0:
         7c:bc:10:cc:48:03:0a:5c:a7:b9:a7:5d:0a:96:7f:90:7b:30:
         bd:72:8a:6d:5d:d1:ad:57:2c:bf:52:ab:db:6c:4c:74:59:a2:
         88:77:83:57:72:cb:1f:0e:64:7d:d8:00:d2:c9:2e:19:91:98:
         12:b6:9d:9e:6b:ab:8d:ca:0c:61:2a:89:a4:95:0d:26:92:a1:
         15:54:dc:2f:7b:da:33:58:45:77:ec:08:30:c2:dc:83:aa:fd:
         e3:92:fa:6e:55:ce:7f:4f:80:11:bf:25:de:0e:7a:b1:5c:c8:
         0a:b8:e4:0e:62:70:28:a2:b7:5a:04:81:12:f6:0d:24:78:da:
         92:f9:b4:f0:7e:18:00:5f:64:bb:18:46:b5:f4:5c:d6:5f:6f:
         17:e4:0d:07:70:4f:8b:e6:c0:c5:90:7b:85:fa:4f:07:a2:ba:
         b9:cf:87:1e:46:64:ec:d7:8a:46:b7:5c:7f:78:0d:fc:4b:8e:
         c6:82:4a:07:c9:e7:d2:64:9d:57:e1:5c:a4:b1:f7:01:24:93:
         f7:ce:0b:f7:b7:31:77:fd:92:cc:29:1e:b4:ff:c7:df:a0:9c:
         1e:d7:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:57:47 2025 by rpki-client