Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft
File:                     23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft (raw, json)
Hash identifier:          i2OgCQrYOwuigocC4cEUrafg7RQuYt83+LfYVzXomZs=
Subject key identifier:   6D:3E:13:39:09:8C:46:E7:9D:9F:D2:53:1B:9F:45:A9:BB:B2:8E:5F
Authority key identifier: 23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97
Certificate issuer:       /CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97
Certificate serial:       6ECD4C6EB80B7E4D0A390A83D343D0327FA1BBFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft
Manifest number:          0D
Signing time:             Fri 31 Jan 2025 11:42:50 +0000
Manifest this update:     Fri 31 Jan 2025 11:37:50 +0000
Manifest next update:     Sat 01 Feb 2025 15:04:50 +0000
Files and hashes:         1: 323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (hash: k+fcDEgAcH19H2ZMeX8Wy3GyjPtollDjfiUOwCete7o=)
                          2: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (hash: 6cNuXpM/hVKussaKp8OiKygMcJMioHGg827oNChqSVg=)
                          3: 3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (hash: 4AtHEp888/iGAmenD1pUO5ZkZo5aUmW8rKsPYcqy0q4=)
                          4: 23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl (hash: GiHkXd8zo1pJIfGRVr5XPQKLIqSubePc/GZtn3uzVsY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cd:4c:6e:b8:0b:7e:4d:0a:39:0a:83:d3:43:d0:32:7f:a1:bb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97
        Validity
            Not Before: Jan 31 11:37:50 2025 GMT
            Not After : Feb  1 15:04:50 2025 GMT
        Subject: CN=6D3E1339098C46E79D9FD2531B9F45A9BBB28E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:b1:13:1c:6f:1a:65:a2:d6:9e:38:b7:4c:
                    34:2d:75:32:ae:3e:5a:a4:89:6b:67:d2:ec:ba:ff:
                    84:2c:91:7a:6a:4e:49:92:34:23:d2:d2:73:87:b7:
                    3c:16:77:3d:0f:04:be:b6:ca:71:56:8d:43:39:e9:
                    f8:b6:bd:2c:fa:46:1d:3f:c0:f2:6e:41:06:4a:60:
                    a4:1d:e7:b2:78:34:4b:ea:54:f3:cd:67:1f:bd:81:
                    5a:2e:84:36:4f:65:f6:46:35:f4:46:13:7d:94:32:
                    86:29:c9:8f:43:35:fc:04:9f:0c:01:fb:01:bc:94:
                    4c:9b:c6:f2:7f:83:04:b5:b4:66:e7:04:63:17:5d:
                    e4:74:43:19:fe:ca:99:6a:d4:39:14:53:1f:47:44:
                    46:b8:ed:42:27:72:08:a5:21:e9:6c:d0:15:12:9b:
                    15:3d:6e:fe:13:3b:ad:35:5f:8a:82:96:0e:d1:bb:
                    77:04:7c:be:3d:d6:da:80:f7:37:4f:1a:cc:13:e5:
                    16:8c:1a:e9:7d:74:cf:c9:17:cf:67:3a:88:71:d2:
                    7f:82:21:b0:b8:06:f8:ee:8f:00:94:35:64:a2:30:
                    f0:9d:6d:c1:ae:53:81:a3:8b:93:57:05:61:21:06:
                    65:88:8a:6d:f2:cc:c4:ec:b6:90:c6:7c:6c:88:4f:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:13:39:09:8C:46:E7:9D:9F:D2:53:1B:9F:45:A9:BB:B2:8E:5F
            X509v3 Authority Key Identifier:
                keyid:23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:48:9c:71:33:7e:b5:12:38:1f:14:01:bd:3d:38:0d:0a:71:
         1f:4b:81:9e:db:fc:44:25:bd:aa:1d:cf:f1:72:b1:b0:61:e7:
         f3:fd:2f:52:ca:42:4b:4f:92:cb:43:5a:a0:ae:7f:e8:ff:cd:
         ac:12:2c:03:17:0a:59:48:02:44:00:26:8b:10:92:bb:aa:30:
         78:95:13:93:30:fe:b4:6f:40:b0:31:1e:f9:74:65:fb:c0:b0:
         d7:b2:a1:f9:68:e3:d5:74:48:e0:69:34:e7:40:e6:29:ee:bc:
         7b:8f:96:b9:9c:0a:e0:8c:82:66:9c:0b:49:eb:c3:4d:d8:13:
         28:d2:56:fa:26:47:08:1a:78:99:83:1a:5f:a6:8d:f2:5c:3c:
         40:da:f5:04:32:f9:4a:83:a1:47:2e:55:96:4c:d0:6a:03:9b:
         c7:23:5c:38:99:de:9c:05:05:e6:2a:dc:57:fb:f5:a8:2e:7f:
         5b:ff:ef:3c:04:f3:f3:79:51:bd:cc:62:05:e5:34:e9:39:d5:
         56:64:22:7b:e7:46:9b:24:49:68:f1:50:bc:05:52:4f:01:58:
         52:a3:e0:d3:d4:1f:a1:e0:da:24:72:fb:ba:56:40:02:a0:8d:
         88:da:38:d1:f5:30:34:92:e0:fa:62:86:a1:fc:41:f1:3a:ba:
         06:c5:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:19 2025 by rpki-client