Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
File:                     CBB8A038671DF77F8F9579424916B82CCF45F66A.mft (raw, json)
Hash identifier:          Eu+Ge8Ag7LhYsXC6RDmXX2W2WcbUtPlYD3fEPyOrYfI=
Subject key identifier:   01:21:A0:39:FB:AF:86:CC:3F:2E:1E:2B:F6:69:00:80:74:CF:52:6A
Authority key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
Certificate issuer:       /CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
Certificate serial:       22DFFE29AAD3384323316BD6BAFA14E774D870EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
Manifest number:          014A
Signing time:             Fri 31 Jan 2025 02:53:21 +0000
Manifest this update:     Fri 31 Jan 2025 02:48:21 +0000
Manifest next update:     Sat 01 Feb 2025 03:51:21 +0000
Files and hashes:         1: 323830343a323664633a3a2f33322d3438203d3e20323633383631.roa (hash: YEtwDiRrHGxh30QKAkY7vTgW/uKrAbQFlKcTmg/GvvA=)
                          2: 3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa (hash: ulyarJcPLCoJKmhfI5sU6iMdxgSKZKJLk7GS7grmJIM=)
                          3: CBB8A038671DF77F8F9579424916B82CCF45F66A.crl (hash: qzJY9LwfZodw1xi/iOUv0V2ewyhQ36lGqOuEKFnENTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:df:fe:29:aa:d3:38:43:23:31:6b:d6:ba:fa:14:e7:74:d8:70:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
        Validity
            Not Before: Jan 31 02:48:21 2025 GMT
            Not After : Feb  1 03:51:21 2025 GMT
        Subject: CN=0121A039FBAF86CC3F2E1E2BF669008074CF526A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:c5:a2:b4:a9:c0:67:58:30:91:c9:4a:13:
                    97:40:68:9e:af:d7:be:f0:7a:62:59:2b:43:56:0a:
                    11:65:3a:79:a2:dd:17:42:0b:bf:f9:c8:d0:48:e7:
                    99:44:d8:46:67:44:ae:4d:ed:67:65:29:15:b0:40:
                    57:53:ea:b0:36:ba:b0:f4:5d:d6:2d:d4:c6:96:bc:
                    74:f0:0f:b2:88:4a:40:60:93:ee:71:27:04:a0:97:
                    0e:80:71:f2:fe:66:a4:ab:16:f6:42:07:98:90:b7:
                    05:76:cc:b4:c5:06:1f:14:8e:9a:4f:b1:e8:e1:f4:
                    3b:b9:45:6a:2d:8a:2e:c5:26:24:f3:1d:c8:e4:f1:
                    32:6f:ab:25:29:81:a5:ac:aa:4f:72:33:79:7f:a2:
                    6e:d5:d6:7d:38:09:30:cf:22:be:62:fd:af:5d:7d:
                    dd:a9:6d:7e:00:af:07:eb:b2:c2:c6:a5:93:5b:40:
                    fc:50:07:18:03:bb:d2:39:c5:f2:ba:30:da:4b:cc:
                    d2:b2:2d:33:81:ca:df:4e:ee:ea:82:c3:00:de:ad:
                    b6:8b:a7:f5:c1:3b:9d:57:8b:e0:7a:88:2a:e8:15:
                    ca:b0:a4:52:82:2a:d2:44:ec:f5:90:77:58:06:52:
                    d5:71:6e:81:ed:da:02:c0:a2:de:bf:4d:b6:0b:7f:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:21:A0:39:FB:AF:86:CC:3F:2E:1E:2B:F6:69:00:80:74:CF:52:6A
            X509v3 Authority Key Identifier:
                keyid:CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:0d:eb:25:a2:f3:79:d4:89:df:90:a0:83:e5:4f:29:b4:
         55:dd:55:c3:c6:ac:9b:3a:89:a4:76:3d:01:7d:85:6f:6a:09:
         c3:27:78:42:64:a4:ca:28:2d:5e:c1:ce:f0:f3:f3:fd:9d:3e:
         c0:02:ca:08:39:71:32:87:fb:0e:7b:78:7a:7b:c7:13:08:3b:
         68:23:df:92:d1:b0:8d:99:aa:50:7e:25:b4:d2:c3:ff:02:80:
         9f:6e:56:19:0d:46:b0:3b:f3:7f:ff:66:da:cd:7f:7b:2a:ea:
         db:75:2f:06:a8:c0:95:07:1a:55:6c:bc:a1:98:d4:44:92:ac:
         27:a8:d3:53:19:55:79:87:8b:7e:b5:ec:9a:5e:ec:6e:b0:41:
         bf:51:7d:32:a2:1d:c3:cc:72:52:c9:8b:e3:be:00:9a:1b:45:
         29:e7:67:35:15:27:87:26:08:7b:97:df:ed:47:7b:a8:4d:d6:
         2b:b2:9c:f2:c8:03:4d:8d:ad:e8:c2:98:88:2b:f0:64:c4:c3:
         24:52:d4:3b:a7:90:bf:4a:f0:0e:85:fa:09:43:22:e4:6e:78:
         56:01:9a:d1:fb:3f:87:28:3e:16:b8:7b:d8:9c:ca:6f:73:06:
         bf:01:5e:8f:82:14:22:77:ab:43:c0:17:7c:4d:9c:18:44:14:
         cf:e9:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:08 2025 by rpki-client