Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
File:                     BF858D763EACB66391C131531036E078E22F45D5.mft (raw, json)
Hash identifier:          rj8NXjZKGkLz24iRZSsAN+rUHedARFwoXKSpkgj+Dyc=
Subject key identifier:   27:70:89:79:68:D3:30:B8:A7:CF:E8:7A:92:E8:B4:60:67:DC:1C:BB
Authority key identifier: BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5
Certificate issuer:       /CN=BF858D763EACB66391C131531036E078E22F45D5
Certificate serial:       47086D7078A4CA530EA7406AE9E43F1F95424493
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF858D763EACB66391C131531036E078E22F45D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
Manifest number:          28
Signing time:             Fri 31 Jan 2025 08:55:48 +0000
Manifest this update:     Fri 31 Jan 2025 08:50:48 +0000
Manifest next update:     Sat 01 Feb 2025 11:49:48 +0000
Files and hashes:         1: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: AsQR1xL063fQ5oPesbqAY+mOv+UrbzaYsJQw3qOsOYs=)
                          2: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: GrK1Bg3DWvX2hUFTTrQTferad9zq+Y7z1zxAD1x+JHw=)
                          3: BF858D763EACB66391C131531036E078E22F45D5.crl (hash: RusHy2I3jpdU/39m3vBriCm+3C3J1AmqdUMZJ42THeo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:08:6d:70:78:a4:ca:53:0e:a7:40:6a:e9:e4:3f:1f:95:42:44:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF858D763EACB66391C131531036E078E22F45D5
        Validity
            Not Before: Jan 31 08:50:48 2025 GMT
            Not After : Feb  1 11:49:48 2025 GMT
        Subject: CN=2770897968D330B8A7CFE87A92E8B46067DC1CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9f:6e:9c:87:e2:02:d9:ab:58:56:24:21:8d:
                    47:6b:37:c5:b2:eb:e1:f6:2e:9b:95:b4:eb:b2:92:
                    6e:e0:11:b2:b7:33:3c:1b:d3:b2:fa:ee:54:9a:29:
                    7a:96:c3:ee:5f:76:1c:57:62:fa:15:a1:a9:76:60:
                    2e:0e:62:e7:8d:83:a9:b5:5f:91:89:fc:ff:a1:80:
                    30:e7:87:e4:3e:21:12:a9:71:3a:28:5e:84:20:e6:
                    e0:71:3e:37:cc:73:5c:30:c8:4b:64:f1:06:4f:18:
                    31:a9:66:d3:48:1e:9b:47:4e:ee:40:d4:e4:fa:dc:
                    c8:df:74:ad:28:93:48:2e:2c:b6:a3:b0:32:3d:74:
                    6e:9f:92:a6:79:86:e5:f0:f6:4a:aa:02:27:5b:9d:
                    ec:bd:47:41:dd:f4:41:2e:cf:e0:3c:f5:62:ce:fc:
                    ae:71:57:81:3c:dd:d1:a6:9a:f7:51:51:0d:87:38:
                    af:6f:70:9e:60:41:d9:9f:08:6d:d7:cf:9b:63:1c:
                    cc:48:a9:27:53:51:16:f9:eb:dc:e2:14:3d:f0:e2:
                    63:19:95:7b:18:7e:17:a7:52:d7:b0:1a:b9:79:11:
                    93:b5:52:ab:33:ae:bc:5a:10:61:87:25:d2:36:96:
                    4e:62:b9:34:6d:76:88:cd:a7:9f:c7:b1:2b:7d:d2:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:70:89:79:68:D3:30:B8:A7:CF:E8:7A:92:E8:B4:60:67:DC:1C:BB
            X509v3 Authority Key Identifier:
                keyid:BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF858D763EACB66391C131531036E078E22F45D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d5:f8:e8:17:b4:73:71:38:36:ca:4a:4f:da:16:b1:d7:c2:
         33:3f:00:25:f6:39:12:30:27:bc:d6:56:ac:4d:03:d1:73:ae:
         ed:58:8d:21:6f:be:da:4d:83:cf:c2:ce:6a:71:a2:79:cf:d2:
         9f:12:fc:46:8c:8f:f1:40:95:4a:fd:77:4d:8b:3e:b0:86:be:
         a2:d0:97:3e:9a:5c:ec:ab:53:f8:2b:23:13:25:6f:6b:11:59:
         76:03:08:39:a1:82:bd:37:22:31:ef:c3:5e:5c:6f:6e:68:cd:
         e2:ba:5d:70:1a:91:dd:f3:cc:3b:c7:88:07:12:16:3c:1d:25:
         fe:a2:ef:a2:a4:63:05:44:01:b6:c4:cd:44:24:5e:04:0d:33:
         61:c0:98:f6:33:2c:01:c3:83:06:c2:5b:49:66:31:f3:32:ae:
         5a:3c:57:50:3f:52:c1:a1:df:cd:f4:3d:66:1d:b3:20:16:1b:
         01:2c:d7:00:ca:6c:6e:0a:23:36:b1:f2:0f:d2:ef:28:c4:c1:
         95:7f:00:3e:97:e7:fc:84:22:27:48:c2:b9:91:3e:15:51:b1:
         7e:f4:44:bd:d1:99:1f:ab:ea:5a:e6:9e:34:28:3c:c4:2a:64:
         14:6c:b2:53:5b:e9:eb:94:b7:47:4d:7f:61:88:68:14:20:d1:
         26:71:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:10:36 2025 by rpki-client