Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
File:                     8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft (raw, json)
Hash identifier:          vRNbxvqZbxcWUBnExMzp8EM/1Weo1mLGf1C5g0VC2TA=
Subject key identifier:   83:C9:F5:B2:0C:F2:20:5B:02:A7:DC:3D:D1:17:EE:32:AE:B8:DC:D1
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       209C6D235B44E308640345F43F4DD4835CC77F74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
Manifest number:          0147
Signing time:             Fri 31 Jan 2025 18:22:44 +0000
Manifest this update:     Fri 31 Jan 2025 18:17:44 +0000
Manifest next update:     Sat 01 Feb 2025 20:58:44 +0000
Files and hashes:         1: 3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa (hash: vdfeU+i6AkiBuO6BJNNFK6EFx3FWjkqzGgsPQKdGdrk=)
                          2: 3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (hash: P5p4D+MumPOZtyTvd2kf7GfQ8evq+5b4LClehjwomfg=)
                          3: 323830343a336265343a3a2f33322d3438203d3e20323636313738.roa (hash: XOS4w9pZZ3ikRbPrdzlz/Pp9FvhpTXZw84WHUsKDzOw=)
                          4: 3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (hash: THzsd+6sUt20AUSH4DmMLsGOcu6kYfFMmO1mWjj0S0M=)
                          5: 3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (hash: +YZh8J+CtdHGGXjlgvEKRqtx6gjBc/SpIAm7NuXkENE=)
                          6: 8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl (hash: 1FHnXd6e53kxzxF1UCu9L7E5Kt6D4w437B86990wqGI=)
                          7: 3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (hash: h5x+9NRH+FO64SoO6f6czTtZKAFOKpZ7jhRD8MRnWhs=)
                          8: 3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (hash: lnF099SxrYG7McFIdyMKXcf+H3sW51G2+quYvrWS42s=)
                          9: 3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (hash: M7HnJX7Fipbuj/PwIyy+GP0UiAIroUHZsCeeP6QoI2c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9c:6d:23:5b:44:e3:08:64:03:45:f4:3f:4d:d4:83:5c:c7:7f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Jan 31 18:17:44 2025 GMT
            Not After : Feb  1 20:58:44 2025 GMT
        Subject: CN=83C9F5B20CF2205B02A7DC3DD117EE32AEB8DCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2e:4c:34:ad:a3:f9:ad:5e:0c:d1:dd:63:16:
                    8d:ce:95:73:ec:69:2d:fd:02:c2:13:bd:9c:c0:6c:
                    14:d0:a6:d2:f9:3c:98:0d:48:8d:4b:18:d1:ea:44:
                    40:66:ae:92:6b:85:8e:ca:d2:39:64:7d:51:a2:7d:
                    e1:c6:88:fe:7f:61:24:34:ee:c0:4f:34:e6:7f:c6:
                    f6:91:7f:d8:30:1c:92:45:df:b7:19:34:24:b5:89:
                    0d:f2:c6:f7:df:74:05:04:1c:b2:78:b7:df:73:27:
                    05:12:ce:70:5f:b1:cf:72:a8:64:7b:80:78:ed:d3:
                    43:ca:b7:f7:9d:7c:e7:a9:4c:78:05:00:c2:88:f6:
                    db:5a:47:ce:3d:bc:17:b3:a9:55:39:21:67:e9:31:
                    49:c7:b9:37:cc:7d:de:73:7b:38:bb:5d:e8:31:96:
                    27:6c:ac:c2:81:75:9d:87:df:fe:f2:be:e2:73:52:
                    86:19:21:87:b3:e0:60:41:f3:3a:e5:89:92:7a:9d:
                    fb:cd:85:d8:5e:c4:4e:19:96:39:36:3b:4e:f5:5d:
                    27:9e:d0:2f:6e:41:79:bc:fd:4a:61:7f:11:af:72:
                    d0:cf:6f:6f:ed:d2:d9:64:23:11:aa:a7:64:91:b1:
                    7d:01:b5:b0:74:99:10:2b:3e:1d:96:11:c6:9b:e2:
                    f9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C9:F5:B2:0C:F2:20:5B:02:A7:DC:3D:D1:17:EE:32:AE:B8:DC:D1
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:36:7a:67:00:f4:2a:20:4f:c3:7b:30:67:58:05:ab:f6:
         98:e7:f8:17:cc:5f:3d:e9:20:af:13:77:6f:4a:1e:9a:02:f4:
         bc:94:17:0a:ee:fd:55:d5:23:99:55:60:10:a8:6a:1c:6e:4f:
         d1:57:26:fd:df:2c:aa:d4:e2:87:21:86:54:18:2d:e7:55:96:
         f8:32:e6:c1:26:f1:2f:84:d2:b0:3c:4c:d8:4c:c6:02:62:38:
         81:dd:0c:95:18:af:25:d0:05:a6:eb:55:c2:c6:2e:64:7b:5d:
         64:a5:fb:2e:89:7e:54:71:20:b5:5c:14:60:93:5b:22:27:0f:
         17:43:49:b4:23:8a:b9:89:ef:a6:81:13:3c:a1:87:bf:63:11:
         42:f4:14:71:6e:6b:9a:ad:a6:2e:94:45:99:14:13:8d:7e:d4:
         e4:df:25:d7:0a:bd:53:63:cd:95:f1:fd:9c:0e:6b:5a:6b:98:
         0b:73:f9:43:b3:8e:fe:65:a6:f6:84:c0:4a:ce:66:4e:a1:b3:
         4e:58:9f:75:11:d7:ea:d2:a0:fd:c0:3a:b0:57:44:39:3d:9a:
         dc:34:d0:0e:2f:81:02:41:8f:57:35:6d:0a:6b:b6:cd:5a:26:
         27:07:f7:fb:63:a9:4e:53:7a:80:2e:fa:e8:f4:0b:90:3c:db:
         3b:38:bb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:39 2025 by rpki-client