Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.mft
File:                     BBFD07829824ED2E39C17D185BBAD3FFD99DE265.mft (raw, json)
Hash identifier:          ShKtIBD/pf5969U5etlqodWxzO7tt8JEKbl7vb0EdzM=
Subject key identifier:   80:C0:3F:30:3C:7B:5B:60:04:80:11:3D:CE:BE:E1:F9:38:A2:89:96
Authority key identifier: BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65
Certificate issuer:       /CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
Certificate serial:       529138832CF43A5D4E45A3DC34923153A18153EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.mft
Manifest number:          07
Signing time:             Fri 31 Jan 2025 17:35:08 +0000
Manifest this update:     Fri 31 Jan 2025 17:30:08 +0000
Manifest next update:     Sat 01 Feb 2025 19:13:08 +0000
Files and hashes:         1: 3137392e36332e34382e302f32322d3332203d3e20323732363734.roa (hash: WWTp0wlKDlxvtmract7gaffOsSewkMkboOFAshaQ0pM=)
                          2: BBFD07829824ED2E39C17D185BBAD3FFD99DE265.crl (hash: 1hgZU7UjtPP4onxzpY9v9kUJ3MFQfQo9VDMub3fdOlU=)
                          3: 323830343a383665383a3a2f33322d313238203d3e20323732363734.roa (hash: da6MzxLwOScB6Z/r2uOLB2vU4keDm/PQNp3NlnxITB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:91:38:83:2c:f4:3a:5d:4e:45:a3:dc:34:92:31:53:a1:81:53:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
        Validity
            Not Before: Jan 31 17:30:08 2025 GMT
            Not After : Feb  1 19:13:08 2025 GMT
        Subject: CN=80C03F303C7B5B600480113DCEBEE1F938A28996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:83:08:09:94:7f:df:91:a8:f2:2d:6b:34:
                    78:e3:37:08:74:5b:4c:98:76:9a:10:10:64:a2:c8:
                    13:ee:cf:a0:74:0d:05:dc:b6:a9:80:6e:f5:d7:0f:
                    dc:8e:68:c8:79:ac:d4:9b:3a:0b:05:67:d7:fe:72:
                    73:4c:49:a7:bd:7f:47:1a:8f:91:5a:c6:53:be:ef:
                    cb:03:cf:d8:be:c1:c9:65:4e:4d:99:39:96:5b:dc:
                    28:9d:05:cc:9d:78:ce:2c:84:2c:10:44:e4:7e:ff:
                    1a:de:90:3c:df:12:42:b6:1c:66:72:41:93:04:d8:
                    b1:4b:2c:bd:49:5c:45:b4:a2:18:c5:43:c0:50:eb:
                    f9:09:7d:88:a9:7a:37:d5:f3:45:ff:53:b9:09:16:
                    6e:e6:ae:be:16:22:0f:e8:1b:95:3f:64:30:9f:44:
                    03:c8:8f:35:18:94:f3:68:d0:87:43:0b:a1:c7:c5:
                    7b:f1:18:8d:26:f4:be:86:35:c2:ef:23:cb:73:b0:
                    bd:27:37:9d:1d:e6:4f:d3:de:02:a2:da:45:0a:77:
                    de:66:2c:db:68:65:ac:b9:60:fd:89:73:1a:c5:e0:
                    a7:8d:6f:a8:fc:3c:d4:f6:36:93:ee:2d:c5:42:ed:
                    3b:87:b5:d0:f8:0b:0c:94:38:b0:ff:18:3d:76:42:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C0:3F:30:3C:7B:5B:60:04:80:11:3D:CE:BE:E1:F9:38:A2:89:96
            X509v3 Authority Key Identifier:
                keyid:BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7f:ef:8c:85:7b:24:44:0c:5e:0e:6e:c9:e4:a2:fa:b8:6b:
         99:fa:ed:d6:e0:78:90:6f:17:79:2d:f1:4a:f8:59:27:00:49:
         34:34:28:f7:aa:a6:d6:d4:e0:4c:4e:c5:e9:f6:24:31:05:23:
         e5:a5:6b:17:7d:bd:e7:d0:04:eb:cd:59:65:1d:4b:94:b8:d4:
         02:9c:89:e8:a4:83:94:bd:0d:95:47:7c:ac:00:e5:d5:d4:75:
         a4:64:6f:98:52:00:fa:54:1a:d9:68:a7:47:b3:0f:0b:b1:1a:
         79:2f:37:1a:27:7c:8b:ad:62:69:ed:1c:c8:37:0f:90:45:10:
         ab:4d:82:cb:ec:37:9a:8b:98:27:5d:cc:a8:c4:67:17:e2:d8:
         2c:5a:95:22:9b:2d:83:bb:f4:3f:59:e9:0c:a8:30:f9:a1:a3:
         0a:bb:8f:a9:9b:53:4d:a5:ec:fb:4f:9e:42:ba:75:80:e5:33:
         d2:4c:61:b1:05:5b:12:46:96:16:2f:66:b9:76:ec:41:3c:01:
         12:d6:a2:5b:98:ba:35:3b:2d:3b:d7:5c:a5:21:ca:ef:b5:88:
         b8:dc:08:e9:99:82:b0:12:42:34:7f:17:7e:86:79:1e:e7:b5:
         ab:76:f1:9c:35:87:af:77:65:68:1f:ab:f5:bc:03:c5:34:ae:
         01:1f:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:51:42 2025 by rpki-client