Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.mft
File:                     4852815508EC2F58157FB70DFE5F018163E5DD67.mft (raw, json)
Hash identifier:          VoKz/yj/OvyxymaoPZbZQ3OqzafLnXsOAk49M5KE83Y=
Subject key identifier:   9F:BE:7A:84:3E:B7:0F:8F:F8:51:B8:27:28:56:23:8C:A2:86:24:E0
Authority key identifier: 48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67
Certificate issuer:       /CN=4852815508EC2F58157FB70DFE5F018163E5DD67
Certificate serial:       0402680C4A488AC8DD9E87C90D63AE998BD0F318
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.mft
Manifest number:          011D
Signing time:             Fri 31 Jan 2025 09:37:08 +0000
Manifest this update:     Fri 31 Jan 2025 09:32:08 +0000
Manifest next update:     Sat 01 Feb 2025 13:34:08 +0000
Files and hashes:         1: 34352e3136302e3130302e302f32342d3332203d3e20323638343036.roa (hash: LhZrpqeSO4lxCtDBVjEhNeapL1Ui0EdfsA2d97eTBtA=)
                          2: 4852815508EC2F58157FB70DFE5F018163E5DD67.crl (hash: i9Y2Fho8sjUe0G8mdm3EsoE+Jdsvsw9WidmJN3WQGwM=)
                          3: 34352e3136302e3130312e302f32342d3332203d3e20323638343036.roa (hash: uTbL03jOr1nnQhGn0uyG8p2CnW5LbeOzsZkO7Lal1nQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:02:68:0c:4a:48:8a:c8:dd:9e:87:c9:0d:63:ae:99:8b:d0:f3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4852815508EC2F58157FB70DFE5F018163E5DD67
        Validity
            Not Before: Jan 31 09:32:08 2025 GMT
            Not After : Feb  1 13:34:08 2025 GMT
        Subject: CN=9FBE7A843EB70F8FF851B8272856238CA28624E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:07:f6:91:d4:d8:57:f5:3f:81:9d:a5:3f:
                    68:0e:95:1d:3d:46:39:6a:73:5b:c5:7d:2c:eb:ff:
                    9d:a5:00:49:a7:04:e7:ec:cf:43:46:c7:5f:fe:a3:
                    b9:bd:7e:73:75:59:90:1b:87:5f:e7:ed:a3:3c:58:
                    f0:6c:72:15:2e:eb:44:ea:13:a7:21:c3:cc:49:4b:
                    ec:e9:d8:73:1c:73:4d:7b:77:5d:0c:80:44:ce:05:
                    61:02:d9:2d:dd:42:54:d4:54:69:6d:e2:8e:c8:78:
                    bf:80:2c:1b:de:8a:a0:39:31:25:45:e0:17:23:e8:
                    71:91:3e:a3:cb:e2:68:82:f5:dc:f3:a1:40:b0:2b:
                    64:e0:60:03:e1:4c:38:40:5b:30:21:19:bb:85:f4:
                    21:32:3c:4c:0f:22:85:a0:16:91:7f:a8:60:b2:19:
                    a0:01:44:d9:9a:c2:5e:7e:38:71:19:48:6a:db:a0:
                    c3:7c:ea:fb:61:e7:49:0d:7f:97:1e:95:77:79:dc:
                    43:21:69:4f:67:b5:e9:dc:05:df:0d:06:50:6b:fb:
                    91:13:ae:17:e5:49:78:be:c1:28:79:96:2e:1f:dd:
                    db:e8:fa:d9:64:cb:2d:73:5f:bf:78:c7:9a:5f:ce:
                    8a:85:42:35:49:83:72:f9:e0:b4:ee:2b:70:d8:9a:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BE:7A:84:3E:B7:0F:8F:F8:51:B8:27:28:56:23:8C:A2:86:24:E0
            X509v3 Authority Key Identifier:
                keyid:48:52:81:55:08:EC:2F:58:15:7F:B7:0D:FE:5F:01:81:63:E5:DD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4852815508EC2F58157FB70DFE5F018163E5DD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p6GjMUXaJ7PE6F5UDsopCdLuzJYgY1xtwXfz72bvvAR/0/4852815508EC2F58157FB70DFE5F018163E5DD67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:d2:34:1b:cc:6b:f5:be:50:76:5d:e5:bf:3a:9c:b2:60:
         3f:84:fd:49:dc:7c:56:43:74:c8:a8:c5:03:67:13:e4:9b:f8:
         2a:b5:7a:2f:28:cd:d2:62:d7:80:da:8c:6f:93:03:20:f3:67:
         ff:94:fe:ac:0d:ad:9e:77:7b:3d:b5:f1:cc:01:e5:1a:8c:a4:
         40:4b:dc:6d:27:79:9d:11:fd:d3:02:e4:cb:65:e5:a3:c8:ab:
         72:04:85:9e:f6:2b:aa:f8:c0:54:0b:6b:f6:77:a8:cb:e6:d1:
         f0:b3:65:8f:90:f3:cb:a1:36:7b:4a:b5:91:63:b7:82:07:1b:
         bc:cd:5a:65:5a:e9:4d:e1:10:98:7d:39:23:6f:4d:79:1d:dc:
         e0:36:67:ac:29:f0:c8:a9:9b:0f:a1:ac:8f:60:e0:e1:db:7c:
         ae:58:b9:d5:df:c7:e2:9b:cd:f5:06:67:2e:a9:54:63:d0:db:
         e7:34:3e:20:30:76:2a:be:0a:3f:d7:93:f0:b4:45:01:e3:0c:
         58:94:a1:a9:8d:ad:fc:86:00:89:5c:13:2f:1f:0c:aa:73:cb:
         c3:48:a6:7f:ea:cb:3e:0d:a7:b4:8b:33:ce:ac:0d:21:2c:1d:
         93:b4:f5:45:27:3c:ca:b3:f0:7b:b7:f2:16:0b:be:d2:70:6c:
         b0:6f:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:41:21 2025 by rpki-client