Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft
File:                     2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json)
Hash identifier:          F/CDEr6PQOP7nVnZfV64JyqToQsxrHThx1Gj61HrEHI=
Subject key identifier:   7C:72:FA:AF:54:E3:AB:C7:9A:15:E5:5F:C4:FC:F1:8B:9A:C5:C8:B4
Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
Certificate issuer:       /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Certificate serial:       129CC9B2F63912BCAC1A883200CC8D4C7A7F703A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft
Manifest number:          0187
Signing time:             Fri 31 Jan 2025 07:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 06:55:53 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:53 +0000
Files and hashes:         1: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: 5ba7IaKOMgg05glzLzNzJDooqPn0CfKUdz1ZRFwxd3I=)
                          2: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: qzHYB48JPWBFbNR6JwWWaAlo7HtVjlWMDJKsnF53KhA=)
                          3: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: FQW6y868bi9yjTdWXfzdiiqWV+8Oyh5xV2feYcO3s4w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9c:c9:b2:f6:39:12:bc:ac:1a:88:32:00:cc:8d:4c:7a:7f:70:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
        Validity
            Not Before: Jan 31 06:55:53 2025 GMT
            Not After : Feb  1 10:01:53 2025 GMT
        Subject: CN=7C72FAAF54E3ABC79A15E55FC4FCF18B9AC5C8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:d3:2c:a0:25:51:4b:5c:74:27:0a:92:50:
                    62:c6:71:86:da:ff:bd:4d:27:6a:05:46:ac:dd:3a:
                    61:17:d5:57:3c:69:43:65:cb:15:7c:e3:d8:56:8a:
                    55:18:56:1d:83:58:87:fb:55:e2:0b:d0:b3:de:04:
                    c9:b3:b1:0f:44:d0:9b:da:90:9d:ba:98:40:43:44:
                    b4:2f:8f:9e:e4:16:79:23:00:59:ae:4b:81:68:4a:
                    d1:16:56:02:e9:79:9a:b5:5e:f2:02:ba:38:3e:e1:
                    70:e4:7a:c6:58:d2:45:c1:db:f7:f5:81:b6:ed:cb:
                    90:7c:a2:df:cb:6c:b0:13:6d:85:fd:b6:9f:ac:1d:
                    61:39:e8:1a:60:0f:dd:2d:b5:c2:96:9a:f4:16:c8:
                    2f:15:4b:58:2b:71:1f:61:5f:a1:1e:fa:80:f4:12:
                    3a:15:d9:65:b1:9e:b8:19:71:0a:bb:e3:4d:9d:86:
                    7a:0b:71:bb:8f:dc:21:ff:94:44:f4:c0:5e:d6:16:
                    78:47:87:f4:59:a5:88:cb:46:0e:41:7f:9c:07:a9:
                    83:7a:c1:9c:c9:38:54:f5:44:af:08:a7:03:06:e3:
                    82:2c:92:ae:e8:9c:5c:f6:3a:04:40:5d:93:d5:8f:
                    6e:d6:c3:65:8a:96:d7:b2:72:cf:ea:3f:55:5c:07:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:FA:AF:54:E3:AB:C7:9A:15:E5:5F:C4:FC:F1:8B:9A:C5:C8:B4
            X509v3 Authority Key Identifier:
                keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:14:1a:82:5e:65:b8:24:31:6b:72:19:2e:65:7a:b8:0c:83:
         a7:ad:00:70:34:d4:fa:21:b4:f1:2b:38:3d:f0:de:c0:09:2b:
         e2:84:51:cf:c6:b3:2b:74:72:31:21:2b:69:d4:57:3c:f8:9e:
         0b:b7:28:19:32:e0:42:f5:be:8c:75:6b:58:31:7a:cd:71:53:
         98:e5:b5:2b:d3:34:1a:8d:7f:5f:8b:cd:70:54:76:55:5f:12:
         35:36:94:6b:1b:84:d4:5d:a9:ae:45:15:b8:d8:0d:4c:fb:2a:
         2d:03:d7:f0:e5:dc:01:0e:1e:f1:50:09:e2:a4:93:20:e4:2c:
         18:82:8d:0c:11:7b:89:b3:58:2a:69:1a:60:b0:9a:2c:94:3a:
         73:0c:38:79:3f:2e:ab:00:0b:d7:e6:8b:4b:b4:6d:f7:ae:3b:
         38:5b:d3:9a:13:7d:35:8c:03:2b:e4:06:21:5f:71:04:cc:17:
         d8:f8:2e:44:eb:02:ac:07:8c:77:32:78:66:dc:48:6d:54:d0:
         2a:e3:d0:3e:fa:46:0b:21:c5:8a:78:2d:7f:e0:89:dd:14:20:
         25:de:b0:76:6a:59:43:eb:2d:fc:a0:9b:5d:c1:1c:a0:f5:47:
         b5:3f:d0:f3:75:de:53:3f:8f:d6:92:9f:70:d6:10:44:4f:49:
         2d:6e:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:32:54 2025 by rpki-client