Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.mft
File:                     D14EC644659D1E0D5F095439C95C32C828BB5478.mft (raw, json)
Hash identifier:          SSsCJNf+tmN409/6+u7d/3shwOuIkVh0Ab8ck5kcHC0=
Subject key identifier:   DA:04:66:88:FC:B8:47:F5:D6:13:35:20:F4:1B:47:38:E5:C7:4E:58
Authority key identifier: D1:4E:C6:44:65:9D:1E:0D:5F:09:54:39:C9:5C:32:C8:28:BB:54:78
Certificate issuer:       /CN=D14EC644659D1E0D5F095439C95C32C828BB5478
Certificate serial:       13B511279414022D186AF8DF7809DB374935D0EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14EC644659D1E0D5F095439C95C32C828BB5478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.mft
Manifest number:          12
Signing time:             Fri 31 Jan 2025 12:44:01 +0000
Manifest this update:     Fri 31 Jan 2025 12:39:01 +0000
Manifest next update:     Sat 01 Feb 2025 13:36:01 +0000
Files and hashes:         1: 323830343a363736633a3a2f33322d313238203d3e20323639363237.roa (hash: NhiemtXWUdGKvgpGqI+SGDr6cVNPzqXLUNmpYq3wpg8=)
                          2: 34352e3139302e35322e302f32322d3332203d3e20323639363237.roa (hash: y0JmpBQ0t1dmSS9usEDqJ02++4hjZQW9sJG/KxsoUmw=)
                          3: D14EC644659D1E0D5F095439C95C32C828BB5478.crl (hash: HFaFEabWha+j9uUn/b8ST+41e6gxLxcq7QFhnksf9AI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:11:27:94:14:02:2d:18:6a:f8:df:78:09:db:37:49:35:d0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14EC644659D1E0D5F095439C95C32C828BB5478
        Validity
            Not Before: Jan 31 12:39:01 2025 GMT
            Not After : Feb  1 13:36:01 2025 GMT
        Subject: CN=DA046688FCB847F5D6133520F41B4738E5C74E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:11:2e:df:d2:3c:a2:a1:3b:d7:5b:73:46:0b:
                    0a:ae:4f:a5:f0:48:71:6e:23:38:da:50:ea:82:49:
                    64:a5:f6:85:c1:b5:45:9c:b1:b4:c2:b2:e7:40:8d:
                    9d:9d:59:23:79:dd:b9:cb:e0:a3:e2:f8:e2:5c:52:
                    fe:c6:50:a8:26:74:44:d6:01:9e:fc:7c:72:29:ec:
                    66:9d:85:5e:7d:26:64:0f:25:15:2d:c8:52:fa:7b:
                    b9:2c:79:4b:4a:8d:fe:fa:2d:c3:77:d9:76:ef:07:
                    ce:89:fc:85:d3:97:5f:84:93:b5:ef:7c:e3:34:89:
                    14:51:99:be:54:05:aa:1f:02:9c:c9:25:a0:3d:57:
                    c9:50:c0:77:3a:fa:bb:b7:2b:2a:de:b8:02:1b:fb:
                    ab:71:63:ca:df:19:9f:fc:29:17:44:2b:ea:04:fa:
                    4a:1e:5f:6c:ae:03:da:2b:2e:f9:08:e6:c0:4c:18:
                    0f:7c:72:47:d8:ad:b4:35:84:29:3a:ff:27:4e:8e:
                    16:e2:44:83:2a:5a:97:aa:40:fd:56:06:e3:59:90:
                    50:31:fe:27:05:02:ea:14:ee:99:4f:a1:a2:88:1c:
                    93:bd:cd:50:51:22:69:0b:bf:33:e4:27:13:a9:ea:
                    db:56:99:ac:6b:14:0f:85:0b:6d:9e:dd:f0:d8:69:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:04:66:88:FC:B8:47:F5:D6:13:35:20:F4:1B:47:38:E5:C7:4E:58
            X509v3 Authority Key Identifier:
                keyid:D1:4E:C6:44:65:9D:1E:0D:5F:09:54:39:C9:5C:32:C8:28:BB:54:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14EC644659D1E0D5F095439C95C32C828BB5478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/D14EC644659D1E0D5F095439C95C32C828BB5478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:f0:81:fd:c9:70:20:0b:ae:37:6c:f7:54:14:32:8a:67:67:
         b5:e9:67:e5:7c:a2:72:e5:bb:43:76:ae:9a:60:ba:89:1a:b4:
         83:03:fb:c3:c8:ed:2d:fd:74:ff:6f:e9:cc:c7:c8:28:87:e0:
         82:cd:86:bf:bc:da:73:d8:e3:5f:9d:63:6c:f2:cb:2a:8a:01:
         b2:b4:f6:3f:6e:39:2e:f2:52:bb:23:92:f0:06:ba:13:9d:e8:
         c5:eb:22:4b:30:da:6a:38:c0:8d:70:35:be:b3:08:b2:4c:bd:
         b7:9b:e8:63:a7:54:22:cf:6d:fa:3e:33:af:40:8c:14:3b:04:
         2c:16:ed:de:8b:2f:0b:77:bf:4b:f8:e9:81:9f:9a:fd:f7:09:
         93:af:b8:38:ec:89:92:98:6d:ff:3a:b1:67:e8:90:48:1a:ab:
         38:84:6d:63:1f:c9:a6:66:1f:e1:4d:e2:26:55:a9:1f:17:87:
         ab:6e:ff:97:c0:02:ff:3b:62:a2:52:5b:6d:99:0f:2a:e0:e6:
         f4:1b:bb:f7:55:1d:7b:fb:ae:22:73:49:fe:4d:bd:98:ae:9b:
         8c:54:43:44:46:f7:c3:20:d9:7a:4f:20:d2:c4:ad:f7:68:b2:
         41:68:d3:2b:b7:6f:65:07:53:41:63:4a:6e:b3:40:58:e9:f1:
         ce:f9:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:55:27 2025 by rpki-client