Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
File:                     8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft (raw, json)
Hash identifier:          RArZ/9kuFUYMZndb7pyEZMT5WtQq/iQYiD3QulVOLyo=
Subject key identifier:   0A:6D:D5:FC:A1:94:5B:B9:19:5F:5D:CA:A6:56:8A:D4:7B:BD:D8:D1
Authority key identifier: 8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
Certificate issuer:       /CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
Certificate serial:       7B7C0E01E740DCA4E99C4356B0944CDB52AD0181
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
Manifest number:          05
Signing time:             Fri 31 Jan 2025 06:10:07 +0000
Manifest this update:     Fri 31 Jan 2025 06:05:07 +0000
Manifest next update:     Sat 01 Feb 2025 08:51:07 +0000
Files and hashes:         1: 8CE0D131E429E2C41648BC875D900D7A21A1F1C3.crl (hash: 8mo+ynmubXPoHbRns9Yo9JAYlp22M35ZF9PfAXYCmS4=)
                          2: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: /2/9Yd3eXpWjyVvNt7pMpiiLBSQsoJQudEUU0FUchBQ=)
                          3: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: 0vNFsYvMvFJJcCAKJ8FiERbDz24QTy45zq2tH42NpcI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7c:0e:01:e7:40:dc:a4:e9:9c:43:56:b0:94:4c:db:52:ad:01:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
        Validity
            Not Before: Jan 31 06:05:07 2025 GMT
            Not After : Feb  1 08:51:07 2025 GMT
        Subject: CN=0A6DD5FCA1945BB9195F5DCAA6568AD47BBDD8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7c:0a:79:64:22:80:3a:98:a4:51:03:18:34:
                    ef:56:b1:61:17:92:ba:e6:ba:f6:0a:bb:9e:d9:35:
                    87:29:87:d4:cb:f0:80:91:05:4c:50:19:25:07:d8:
                    d7:a7:d8:46:a4:79:24:7c:6e:fc:84:16:cd:d2:c3:
                    ce:97:fa:e6:24:21:71:2a:1a:dd:3e:01:6c:3d:d7:
                    c2:80:87:ea:6f:d8:84:ad:b8:8d:62:83:e1:69:26:
                    81:cf:91:89:6e:04:b1:3a:9f:ad:d3:35:b2:a2:c9:
                    87:70:04:62:6d:f6:bd:20:74:1d:f4:33:be:72:1a:
                    f5:1d:b3:83:42:49:f4:12:d3:e0:07:23:26:58:4f:
                    ec:95:0a:f6:34:56:2a:01:3b:1b:f8:21:a7:3d:09:
                    d8:b3:85:38:74:83:f1:88:8d:7a:9b:34:da:e9:2b:
                    ea:89:c8:6c:6a:4e:95:9a:30:53:7f:ce:68:09:36:
                    a7:46:d7:59:72:c9:fc:df:81:87:86:f0:c6:ac:66:
                    72:a3:58:1d:fb:89:fd:c6:5d:e2:e6:c6:fb:4c:a2:
                    78:4b:7e:53:b5:91:80:67:c7:f6:33:6b:cf:cb:f5:
                    71:a4:7b:f5:41:70:b7:70:2a:e1:9a:d1:20:e6:0c:
                    90:2d:91:0a:49:c9:43:93:7e:fc:2f:5a:16:0e:c7:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:D5:FC:A1:94:5B:B9:19:5F:5D:CA:A6:56:8A:D4:7B:BD:D8:D1
            X509v3 Authority Key Identifier:
                keyid:8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:29:c8:8b:96:da:37:44:00:c7:c9:30:df:9f:86:5d:18:b8:
         b5:4d:81:e0:3c:34:21:75:6e:53:1f:8a:88:21:8b:ae:6f:2c:
         52:b2:ac:d3:62:f8:f5:d4:b3:9f:d3:0c:b0:72:50:e5:e0:27:
         53:b8:80:5f:5f:37:96:66:c5:f5:84:1f:2e:a5:ed:f5:5a:9b:
         dc:3b:32:af:ab:53:da:f8:13:8e:f1:64:15:90:be:eb:0c:ee:
         61:eb:4a:39:0a:30:dc:52:8b:72:01:96:4e:f8:67:e9:7c:db:
         48:ce:89:06:dd:0c:3c:73:55:30:4c:16:ac:94:85:19:77:b2:
         21:33:b2:61:e5:8b:5b:d9:e4:5e:6f:3b:8b:0e:ae:63:a8:9d:
         75:aa:16:37:91:89:b2:02:75:7e:3d:ee:eb:a6:db:bc:ee:06:
         68:1d:a0:b7:3e:43:2e:53:f4:ef:98:db:f1:40:f9:a8:df:9b:
         00:b0:88:07:a3:e4:8b:7d:b6:ec:5c:98:85:24:69:b3:87:9b:
         de:8f:a0:ff:0d:c8:c4:8a:e6:63:25:af:9b:85:60:70:ce:d5:
         55:a0:f6:82:cb:5a:77:53:97:e1:3c:98:12:ab:3b:e8:ba:cb:
         b3:ea:3f:7e:81:64:3c:33:88:9d:aa:c3:56:cb:98:2f:73:96:
         0d:81:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:07:27 2025 by rpki-client