Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
File:                     8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft (raw, json)
Hash identifier:          ygPBw0K1lDqiQODcm5pektHcs2tNetEKVSNp9mvp1CM=
Subject key identifier:   2D:09:A7:EB:51:FC:5F:E5:3F:A7:BE:F8:4A:17:EC:F7:97:CB:D6:09
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       4B431D9F6CAF3A01AB12AE99FA97854C32903BE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
Manifest number:          63
Signing time:             Fri 31 Jan 2025 05:26:10 +0000
Manifest this update:     Fri 31 Jan 2025 05:21:10 +0000
Manifest next update:     Sat 01 Feb 2025 07:12:10 +0000
Files and hashes:         1: 34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (hash: +raqE/PUXBx1Kk3zDOMGbSVI/vA7wVW8e9yoPylvwAk=)
                          2: 323830343a343536383a3a2f33322d3332203d3e20323636393234.roa (hash: LqNikUH+FQPHvRTTyL/8nWto6W6PpPIqR1tG/K6xvvk=)
                          3: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (hash: JJ7dMEASrz7PjFciXcQgrWuYAyyTaRde/Jb/deddWWA=)
                          4: 8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl (hash: 03CnTjxtJZT/66hCO5oKfPaNGiW4jXPaQyLFvgbWj58=)
                          5: 34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (hash: JPWYWnoduo4hPPNwBYavT0tuoXAueB3exfHCEz+xmuc=)
                          6: 34352e3232342e33342e302f32332d3233203d3e20323636393234.roa (hash: 50LUilMwy3INHVn7s3i3w8sCoTODJUymEI2BRnZ4yyY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:43:1d:9f:6c:af:3a:01:ab:12:ae:99:fa:97:85:4c:32:90:3b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Jan 31 05:21:10 2025 GMT
            Not After : Feb  1 07:12:10 2025 GMT
        Subject: CN=2D09A7EB51FC5FE53FA7BEF84A17ECF797CBD609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:f1:84:59:61:8c:2d:d1:25:d9:d2:7a:a8:
                    e1:3e:94:a5:0a:ed:39:6a:b2:d9:1b:3f:a6:d2:44:
                    2a:b9:8d:c2:f1:1e:31:ae:11:a6:7b:7a:f2:60:b6:
                    8a:72:ee:0f:15:1d:d4:82:1e:ce:cd:f1:d2:45:8c:
                    05:79:d5:06:c1:3d:3b:b9:65:e7:52:43:50:37:ea:
                    38:21:a1:01:0a:e8:02:82:db:52:75:b4:12:9f:fb:
                    ad:58:af:87:e5:f1:b7:b2:9c:de:e7:f5:93:c1:86:
                    92:b6:de:71:54:b0:08:b7:9b:1a:a0:6e:93:90:a2:
                    55:bf:66:30:0e:1e:22:1e:8f:a1:2a:9c:81:83:09:
                    09:03:b7:d5:47:92:6a:69:d9:ff:59:82:ad:a2:65:
                    d4:51:fd:a7:eb:cc:17:0f:73:ba:ec:3b:dc:44:47:
                    35:56:41:86:6a:ce:f1:da:0c:ce:60:0d:26:63:e2:
                    f7:fa:41:01:7d:e8:37:55:d6:2e:45:14:56:e0:87:
                    d5:12:cf:66:f1:d9:71:cf:83:1f:2a:a5:d7:43:b6:
                    5e:41:44:87:44:9f:81:a5:90:d8:6f:70:8e:91:18:
                    65:67:1f:c1:2a:94:58:7d:39:20:3c:53:4a:55:20:
                    b6:fc:09:44:31:73:73:14:53:75:5f:d0:f9:be:98:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:09:A7:EB:51:FC:5F:E5:3F:A7:BE:F8:4A:17:EC:F7:97:CB:D6:09
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:63:b3:d4:1e:47:8e:2d:95:32:1d:a1:1b:21:36:d3:88:
         b0:1d:85:f6:1a:0a:42:a0:f9:16:9d:06:52:bc:00:e7:55:ab:
         ac:62:93:3f:96:67:88:f6:ff:6f:9a:56:fe:1f:ee:fa:01:61:
         c7:bf:f9:f5:17:f5:1d:a8:ff:83:94:e6:85:8f:b6:19:eb:66:
         bf:2c:40:ec:c2:4a:07:54:aa:9b:7e:df:5d:23:be:3f:2a:c1:
         a7:ec:1c:9f:3b:e9:53:45:66:d7:ea:dc:68:91:1b:ae:a7:6c:
         da:52:18:3b:3e:c0:0a:66:1f:6c:37:88:45:fe:e7:fd:13:64:
         ba:d6:9c:f0:b0:ef:63:92:fc:ad:f9:89:84:48:a0:1b:ad:08:
         6c:cb:fe:b7:91:bd:4b:ef:a8:f3:41:a6:9e:08:81:4c:28:84:
         fc:e4:9d:ee:2f:ce:5f:71:1e:ae:e2:43:a9:13:ab:58:33:4d:
         ed:8f:e9:b2:0e:04:fc:d5:22:3b:bb:d8:72:06:d5:94:77:ab:
         be:2d:16:ca:08:08:c5:51:ab:95:dd:ea:9d:92:77:04:72:3c:
         05:d6:2c:68:ad:16:5f:85:23:db:5a:23:14:12:eb:60:30:8c:
         0d:83:0e:df:ff:3f:99:94:84:d2:11:92:36:48:21:fe:a7:2f:
         cd:da:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:37:38 2025 by rpki-client