Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
File:                     0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft (raw, json)
Hash identifier:          YTKiCjdzKLywuf42UfnLfpvqQAuwJxJ84r9ijEEzfy8=
Subject key identifier:   1F:3A:CC:02:71:CC:B2:EE:D9:02:57:65:79:D0:77:0C:8F:AF:D1:FF
Authority key identifier: 0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
Certificate issuer:       /CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
Certificate serial:       3A6586D0E11486B349092690F4104FFBA62C1A58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
Manifest number:          0187
Signing time:             Fri 31 Jan 2025 17:36:45 +0000
Manifest this update:     Fri 31 Jan 2025 17:31:45 +0000
Manifest next update:     Sat 01 Feb 2025 18:04:45 +0000
Files and hashes:         1: 323830313a61343a3a2f33322d3335203d3e20323632373432.roa (hash: m0Z1xYH9oRwGTqO4JbE4FNJcU66v+uOSSRJmxDBCWbU=)
                          2: 0BFDC3A598A7E4C26811166F6E8FA25023A020F3.crl (hash: mMqEWu99bijNBmZ5Krv4WHyLrHnllM/5dmKh9EJGu4Q=)
                          3: 3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (hash: /4OS9PPYaVm/TnXlNiCLfgp5hg/D8UzpH3R15kdx6zw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:65:86:d0:e1:14:86:b3:49:09:26:90:f4:10:4f:fb:a6:2c:1a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
        Validity
            Not Before: Jan 31 17:31:45 2025 GMT
            Not After : Feb  1 18:04:45 2025 GMT
        Subject: CN=1F3ACC0271CCB2EED902576579D0770C8FAFD1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:11:2d:ea:ea:89:a9:6b:94:33:e9:37:57:
                    f6:37:04:51:d1:c6:1f:9c:b8:62:b1:ea:af:99:44:
                    78:a8:5e:dc:4a:b9:70:6c:66:bc:5d:46:ec:fb:14:
                    a4:03:e2:14:dd:8b:dc:fa:57:cd:4a:cb:58:34:28:
                    3e:0c:60:c7:20:a9:04:06:04:0d:33:fa:59:8f:f2:
                    b7:68:8a:1d:3f:7a:a7:bd:94:52:c9:7c:60:6a:c5:
                    e5:9b:82:60:4f:bc:73:c2:b3:70:0d:bf:5a:b9:34:
                    73:7f:70:3e:95:a4:df:3d:cd:34:44:56:d5:24:36:
                    3e:4b:02:2d:be:b1:85:32:6a:f2:2c:0c:d2:71:16:
                    df:4c:33:61:35:57:47:ee:e5:11:e6:cd:27:90:62:
                    0a:73:f5:11:e9:19:e8:a2:c4:1b:1b:ee:79:b4:96:
                    b2:e4:bd:93:13:b9:b7:ae:65:23:5c:ac:a9:3f:32:
                    ff:4d:53:b0:73:f6:e8:43:81:f2:da:73:b9:36:69:
                    8b:dc:3b:91:8c:11:4d:d8:00:60:35:d1:ce:8b:6d:
                    08:c0:10:32:b1:92:ee:28:e3:14:09:4f:9f:d1:4c:
                    61:ce:1b:dd:d4:97:de:cb:0d:f5:e1:e3:5a:35:c3:
                    7e:b2:9f:af:a6:4b:9f:1f:84:04:2d:e4:24:65:89:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3A:CC:02:71:CC:B2:EE:D9:02:57:65:79:D0:77:0C:8F:AF:D1:FF
            X509v3 Authority Key Identifier:
                keyid:0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ed:ab:07:86:03:4c:30:ff:9a:28:c0:9d:d7:cf:2e:bf:68:
         08:2d:a8:de:a8:f3:2b:88:01:15:e7:1b:45:fa:43:1c:e4:b7:
         18:5d:fc:5c:6b:cf:3c:06:f3:30:75:8c:d3:2a:9e:5a:16:17:
         b1:65:b7:45:f4:01:29:fd:af:a9:68:e1:53:35:0b:5b:9b:64:
         59:5d:85:3b:b3:06:d9:77:12:11:fe:6c:b3:0b:9d:bf:31:5b:
         23:f6:a1:e2:0b:dc:99:90:ce:d2:46:d9:be:fa:0a:a1:b7:d7:
         b4:fd:d7:02:9d:49:fc:d1:8a:d2:a3:e7:7e:2f:e9:81:92:b8:
         20:3c:75:4b:40:30:73:b3:fe:96:c0:1d:3b:55:a8:d7:44:ea:
         88:c3:68:71:c1:ed:74:7e:1d:b4:a2:4a:98:89:9a:76:e3:af:
         b4:2c:61:30:76:d1:d1:48:5f:71:e2:9f:d1:0a:2a:1f:65:a7:
         0f:66:2e:c2:c2:10:b8:95:08:f6:80:57:f7:1d:7f:19:4c:0c:
         ee:99:f9:16:8d:4f:18:31:8b:ae:3e:4b:05:cc:08:f1:91:e2:
         82:02:7a:99:93:d6:85:57:c2:bb:ac:97:3d:75:04:2d:d6:93:
         56:e7:55:b9:eb:db:dd:6c:91:2d:4a:09:6b:48:36:44:6e:2e:
         04:e0:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:20:12 2025 by rpki-client