Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft
File:                     F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft (raw, json)
Hash identifier:          B98W00R3xQxuAJfXExdEnKY42gbwJVj19Sor0GpDhus=
Subject key identifier:   94:18:BB:7B:25:20:5E:4A:A8:18:DE:A5:A2:0B:94:1E:4B:FE:05:A8
Authority key identifier: F1:03:2A:8A:64:5D:69:24:D6:71:2A:3A:9A:17:E2:FA:3F:B1:F2:9F
Certificate issuer:       /CN=F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F
Certificate serial:       5F973815175A95D2F5B5BF81D349B882221F4F21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft
Manifest number:          8F
Signing time:             Fri 31 Jan 2025 16:37:05 +0000
Manifest this update:     Fri 31 Jan 2025 16:32:05 +0000
Manifest next update:     Sat 01 Feb 2025 19:22:05 +0000
Files and hashes:         1: 323830343a383337633a383030303a3a2f33332d3333203d3e20323732323031.roa (hash: qjfT/KEO7UFfq2OMlgCZnXzlqOrA9JTzFiRXHfoLtys=)
                          2: F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.crl (hash: PAld3XCE3PREC7GzoIQw2j0qukIX0wMSrdNdWPcMQgI=)
                          3: 323830343a383337633a3a2f33332d3333203d3e20323732323031.roa (hash: KSeK4lhYmOTdbJQOlr7X8q333VSMjL2Wv4gSWrJVW14=)
                          4: 323830343a383337633a3a2f33322d3332203d3e20323732323031.roa (hash: QksT/OsKq1rSmDwq86szP+CffD4iUMl3k2/XiRivlJ8=)
                          5: 3137392e34382e3133392e302f32342d3234203d3e20323732323031.roa (hash: YoENuY/MT91H/XYvPyN8iSbHEQzqu3e1l+HpJyH9TFs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:97:38:15:17:5a:95:d2:f5:b5:bf:81:d3:49:b8:82:22:1f:4f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F
        Validity
            Not Before: Jan 31 16:32:05 2025 GMT
            Not After : Feb  1 19:22:05 2025 GMT
        Subject: CN=9418BB7B25205E4AA818DEA5A20B941E4BFE05A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:24:7a:34:15:b9:cd:75:c2:4e:52:3b:eb:
                    74:fa:67:33:56:2b:b4:9f:93:4c:d0:f8:c2:7b:0a:
                    4a:32:c0:f7:45:59:9d:2b:e8:76:a1:64:bc:96:55:
                    84:ac:3d:7b:f4:f2:96:6b:48:52:6c:98:4e:1a:5d:
                    47:bf:2f:9b:10:b3:ea:5b:1f:4d:f8:4f:ed:43:37:
                    f5:f5:83:35:9a:21:09:b6:61:ed:d4:8d:60:9f:ec:
                    bf:c5:7f:0f:6c:79:8a:31:a7:c8:e9:dd:e9:1d:47:
                    d1:91:66:68:ee:80:c9:85:86:b9:3c:94:19:44:54:
                    90:95:27:91:86:e4:b3:6a:16:9e:52:22:1f:9a:dc:
                    0e:84:bb:eb:91:c2:17:43:09:ac:9c:92:31:5f:5f:
                    00:7c:f8:d1:28:a9:b5:9d:31:b4:e2:db:aa:1e:3b:
                    e8:8c:ec:c0:a2:62:fb:5c:68:bb:de:91:b8:78:33:
                    10:8a:ec:85:0f:bd:b1:41:19:55:80:97:3a:af:06:
                    22:c7:64:d4:82:9e:63:55:50:e7:25:3c:13:29:04:
                    aa:09:94:ab:79:b1:51:a3:ad:60:d8:18:41:05:5b:
                    83:b4:99:da:ae:15:ba:b3:28:32:0d:2e:87:64:34:
                    54:4d:4f:2e:1e:c0:b4:45:5a:d9:c3:45:c6:94:4b:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:18:BB:7B:25:20:5E:4A:A8:18:DE:A5:A2:0B:94:1E:4B:FE:05:A8
            X509v3 Authority Key Identifier:
                keyid:F1:03:2A:8A:64:5D:69:24:D6:71:2A:3A:9A:17:E2:FA:3F:B1:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:82:a5:ba:6b:ef:7d:20:72:56:5d:56:a7:c3:9a:83:9e:
         42:68:45:9c:76:d4:af:fb:ef:0e:af:2a:13:c5:6b:01:f4:59:
         f0:98:8d:9b:25:74:a0:fe:fd:b8:c7:1e:22:8a:a4:87:41:69:
         d1:81:d1:6d:11:e4:d6:bc:e1:94:8a:a0:98:cf:46:2f:15:7b:
         62:2c:e2:21:68:19:cd:be:49:89:2e:6a:af:ab:2b:38:5b:31:
         7f:f0:06:5e:f1:ca:a5:71:bf:d0:b7:29:27:08:29:6b:87:3f:
         33:e8:a5:4a:99:42:f8:81:9f:81:c4:a8:ef:bd:05:8f:f8:57:
         7b:b4:23:0a:16:5b:3b:7a:ef:7d:91:ff:6d:f8:5d:48:c7:75:
         57:80:ba:13:ec:87:37:a4:01:91:ed:c5:b8:59:0a:11:7f:fd:
         3b:02:8a:88:4d:94:17:94:8a:8f:fb:f5:25:a7:21:01:e2:f8:
         c1:97:b9:94:82:fc:a0:b4:e7:07:89:23:6d:9a:68:06:8d:16:
         31:52:a0:f6:3f:31:94:b2:b3:88:10:7e:8d:ec:14:48:57:96:
         cb:7d:dc:fe:5d:66:f8:c8:2f:11:da:b4:94:38:cb:58:88:ed:
         2c:9c:fe:bb:3f:3c:22:ca:7c:81:17:80:e3:c8:a8:5f:20:ec:
         50:bf:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:29:58 2025 by rpki-client