Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft
File:                     AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft (raw, json)
Hash identifier:          8tw6E1low21Yga4bKfOZmyEGIWYbfQbWM4ENedmpCdY=
Subject key identifier:   62:29:DF:87:91:A8:A2:8E:2C:AF:E7:1A:D2:90:69:C3:F3:CE:D8:30
Authority key identifier: AF:2F:E0:67:9E:3D:F8:72:1A:DE:EA:98:24:3A:B2:7A:45:65:F9:F5
Certificate issuer:       /CN=AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5
Certificate serial:       6EE87E0CFBC84F82FD4AD83066D2AB435D074DF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft
Manifest number:          0D
Signing time:             Fri 31 Jan 2025 07:26:13 +0000
Manifest this update:     Fri 31 Jan 2025 07:21:13 +0000
Manifest next update:     Sat 01 Feb 2025 09:39:13 +0000
Files and hashes:         1: 3137392e36332e36302e302f32322d3234203d3e20323731353830.roa (hash: +UtciwWJPEPmd2VjglsTPpItmTUt1SjnPlUoBRj7I30=)
                          2: AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.crl (hash: sTd/3i6dlaF7Y3ZFsx0WKoRNjQA2M0pFiRKYPZs0jAk=)
                          3: 323830343a376463303a3a2f33322d3438203d3e20323731353830.roa (hash: hhHC3fyK9OQR54I1vSpWTIzNk5Hly0Qdl/wJaEy5px0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e8:7e:0c:fb:c8:4f:82:fd:4a:d8:30:66:d2:ab:43:5d:07:4d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5
        Validity
            Not Before: Jan 31 07:21:13 2025 GMT
            Not After : Feb  1 09:39:13 2025 GMT
        Subject: CN=6229DF8791A8A28E2CAFE71AD29069C3F3CED830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:27:70:74:94:61:37:d4:64:6c:4a:2b:ce:
                    9c:60:6b:35:72:e1:78:64:9f:78:08:14:9f:c4:32:
                    39:f6:52:76:cf:c0:4b:4c:82:14:84:db:ef:61:62:
                    9f:a3:c3:58:f7:30:36:4d:5d:b5:cf:50:45:7d:23:
                    e3:a4:9c:e3:59:14:6e:33:74:e2:38:51:ad:06:d9:
                    41:da:de:9b:d0:15:f4:40:ae:e5:e5:8d:2f:ed:b6:
                    6d:2f:5b:d7:a1:45:aa:15:a8:ed:14:e3:9f:43:15:
                    a2:61:b6:0a:c0:dd:a7:2b:21:58:36:3e:a1:27:8b:
                    b3:67:28:ca:68:ea:ee:77:82:07:e4:84:33:03:03:
                    78:41:92:76:7c:15:47:83:61:55:64:16:98:36:ce:
                    58:6b:d8:fe:53:23:b5:ec:f0:f8:5e:e4:02:88:6f:
                    9b:6e:27:dc:94:2a:9b:b0:40:06:15:d8:91:f1:6b:
                    49:51:f5:df:4a:1a:6c:49:2f:e3:33:e5:c8:26:67:
                    45:63:07:cc:0d:97:5c:d8:63:24:16:d8:83:3e:ff:
                    25:da:1a:57:dc:a9:a6:52:6c:91:0c:86:23:5f:51:
                    69:2d:32:d5:51:20:db:5e:73:c4:fe:99:45:a9:f3:
                    bf:50:46:1d:ba:16:34:d4:79:84:6b:b3:02:c5:46:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:29:DF:87:91:A8:A2:8E:2C:AF:E7:1A:D2:90:69:C3:F3:CE:D8:30
            X509v3 Authority Key Identifier:
                keyid:AF:2F:E0:67:9E:3D:F8:72:1A:DE:EA:98:24:3A:B2:7A:45:65:F9:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:69:ae:f8:ea:41:8e:f3:49:52:6e:e2:41:7c:f1:88:c5:
         4a:44:80:46:1d:fd:d4:80:87:11:86:9b:65:df:82:53:6d:0c:
         3a:a9:5b:69:e9:a8:84:d8:73:7b:7d:af:94:51:75:94:b6:c3:
         00:56:1d:07:3c:50:f0:35:f4:e7:61:af:5e:12:b2:19:c5:c6:
         d3:f8:f8:b5:ed:4f:5d:c5:a0:61:b5:24:c1:71:cd:f7:9c:1b:
         be:f9:a8:7c:c2:2c:c7:07:7a:3d:d5:eb:95:2a:86:9b:40:62:
         ad:ee:ed:16:0e:f3:96:fc:57:c5:42:72:44:61:17:fa:f2:04:
         5a:3a:b5:87:7a:4b:b6:33:ef:85:9e:6f:34:e9:68:63:67:e9:
         92:98:19:75:0c:cf:18:5a:5b:0a:f6:84:0b:fe:8c:a8:24:3a:
         17:9d:c8:01:1c:d0:b6:24:28:f8:c7:96:b8:01:9d:90:c2:85:
         ff:c3:84:35:74:98:d7:66:79:d5:51:3e:65:4a:a7:0f:3c:73:
         fd:bc:42:91:9a:51:ca:00:d5:c0:6c:05:2b:5c:29:8c:88:1e:
         74:08:32:13:af:7a:ba:e1:39:d8:4c:99:2c:51:50:5d:02:d0:
         de:bb:ef:41:14:c9:b5:16:95:5b:7f:ec:7a:77:78:27:be:07:
         c5:97:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:18:29 2025 by rpki-client