Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
File:                     06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json)
Hash identifier:          WWBsm4veAtd0rwgcMJXZKBJWmBNSk4+SwT7NBxtIrBI=
Subject key identifier:   2E:30:5B:3E:E1:3E:01:82:C2:87:E8:0C:0A:E2:29:FE:6E:7A:EE:86
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       5C9C4F0CE3ABEBB3088A4D8C882A323101F5816C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
Manifest number:          8D
Signing time:             Fri 31 Jan 2025 10:47:19 +0000
Manifest this update:     Fri 31 Jan 2025 10:42:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:23:19 +0000
Files and hashes:         1: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: +dy0OguRHHodpvI7m+maVRaKu+AFPlpY/u0O/GjQHAk=)
                          2: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: Mxi2oYUcC0tVu2iqeeWdp3ClxTUYDbZ9okKyj4sXEkU=)
                          3: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: M5hBf8sBNi6/oq7AprV5Am9TiLrx3NpGRnhuqPlNE6E=)
                          4: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: 796yusbbPZ/62GBpJks3J3pz4e0+5gB+NVAL+An9w5I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9c:4f:0c:e3:ab:eb:b3:08:8a:4d:8c:88:2a:32:31:01:f5:81:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Jan 31 10:42:19 2025 GMT
            Not After : Feb  1 12:23:19 2025 GMT
        Subject: CN=2E305B3EE13E0182C287E80C0AE229FE6E7AEE86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:b8:e1:59:ec:c3:a5:58:39:a9:0d:73:e2:
                    3a:e6:da:04:d7:4d:4b:9a:ae:b6:19:0c:b7:4e:35:
                    05:7a:b1:5b:0e:2b:f7:6e:a7:f7:0a:5e:15:cb:54:
                    c9:41:64:ed:c5:c7:69:a2:26:ed:d0:db:b5:9e:a5:
                    e1:37:bb:08:25:ec:9e:30:86:ae:0c:9a:73:0f:d7:
                    dd:a8:b8:68:d1:0f:77:17:b6:2e:fc:2c:a8:4d:0d:
                    73:ce:1d:71:9d:50:22:c9:1b:f3:09:8e:ec:35:7c:
                    f9:f3:5d:8a:37:ae:5a:fc:76:30:b2:1c:39:cc:ed:
                    73:8f:b3:a2:6f:a1:af:64:84:cb:36:94:dc:66:6f:
                    8c:86:2f:9a:1f:31:2c:77:82:7b:7d:09:ec:44:b0:
                    47:b7:33:42:c6:06:91:4b:93:c6:49:ea:12:b0:69:
                    ef:4f:41:a4:10:72:90:d9:b8:09:fb:47:ea:fa:0b:
                    b0:b0:15:71:94:c8:36:75:63:a7:8d:4b:2f:8d:3f:
                    a4:b8:3d:f8:19:64:e5:e1:fe:b9:88:c5:b1:bb:83:
                    56:7b:d0:65:26:b1:94:cf:20:c6:2b:ec:f3:56:7b:
                    ba:1e:66:64:1c:5a:22:00:ad:c1:5e:14:41:ff:b3:
                    a0:71:44:24:f4:82:1a:4b:f7:f4:a3:8f:89:77:2f:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:30:5B:3E:E1:3E:01:82:C2:87:E8:0C:0A:E2:29:FE:6E:7A:EE:86
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8a:9b:d7:65:db:3d:31:b1:08:97:40:f5:5b:3b:71:bf:fc:
         d1:29:2d:21:bd:63:d1:30:d1:3e:9b:b2:55:5a:ef:c4:87:7b:
         e6:40:ed:0d:db:8c:cf:05:b1:0d:22:43:c5:80:c9:27:7e:1f:
         f9:90:96:28:d4:f1:b6:47:e9:cf:dc:c1:ef:03:de:ac:21:35:
         27:b1:b8:e6:d3:ad:3e:04:33:61:36:96:67:be:19:a3:d4:1c:
         d7:c5:72:06:bc:66:3e:b9:d9:3d:cf:7e:d7:9c:c5:20:60:0e:
         7d:38:40:02:85:d1:c0:87:39:ae:25:67:e6:e2:c6:05:56:3e:
         c7:38:84:ca:bd:ca:6d:3f:d3:12:13:01:5e:37:eb:42:85:79:
         7c:ab:88:2c:d3:b6:14:50:25:24:e2:ff:b7:c6:ba:24:68:4d:
         aa:d2:12:98:b5:d8:0f:8b:c0:7c:90:20:96:a6:24:5c:5d:1f:
         ca:86:5a:4c:61:5f:98:3f:7d:99:ca:c8:16:73:c8:13:38:e8:
         af:e7:52:c6:c7:a3:0d:3f:4f:e5:aa:4d:46:4c:96:7c:57:bf:
         ed:3c:e2:a7:4c:38:a8:86:13:dc:9a:3e:d1:84:4d:f8:42:77:
         be:e7:c0:02:99:d1:3a:8d:6c:b2:dd:7e:df:72:ac:b7:94:a4:
         3e:c0:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:58:31 2025 by rpki-client