Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft
File:                     85A7E0A72BD08974369104FECCC3D14C543F54FC.mft (raw, json)
Hash identifier:          sETQuU2mViRvZ9fCUoPD9H7qHj8hCC4P6Jkd7Tk2VMQ=
Subject key identifier:   7D:A0:B1:67:13:E5:1E:3F:24:34:00:18:BD:91:80:E8:59:46:C9:12
Authority key identifier: 85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC
Certificate issuer:       /CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
Certificate serial:       5D961B5170B9A0F0D9A8888127183A67FCDC6A21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft
Manifest number:          CD
Signing time:             Fri 31 Jan 2025 09:08:09 +0000
Manifest this update:     Fri 31 Jan 2025 09:03:09 +0000
Manifest next update:     Sat 01 Feb 2025 12:09:09 +0000
Files and hashes:         1: 3137372e382e37312e302f32342d3234203d3e20323733363633.roa (hash: FH+mJPMjkGQRfKjlYxJlPGhmpf4zTUjKPJoepdYnSoA=)
                          2: 85A7E0A72BD08974369104FECCC3D14C543F54FC.crl (hash: Z/+LPSu2YOzo4ez4Nf93/JYJmmKfvCq6d+tBwtFw0qg=)
                          3: 323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa (hash: jPok2DRAbHNTT06MR4H6b871/3vK/HRAJsBnu8Fq8p0=)
                          4: 323830343a386135383a3a2f33322d3332203d3e20323733363633.roa (hash: Ga45aDIXwjlsq0qZqcdCWKyFgfaw6Xfto/DU5niQG+Q=)
                          5: 323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa (hash: ZK5sG8vfq5Z0a6AldFvFtJb4f/Z0Em/TYxagJK2Km3I=)
                          6: 323830343a386135383a3a2f33332d3333203d3e20323733363633.roa (hash: IZ2woYHZNEaBt1PvzhcQ4tKNX4K6uO6bjcxSh3vNyy4=)
                          7: 323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa (hash: HTBt4QnSL3Etbg4kYS/t4g9a2GDuS0W8TKMQfxdKckE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:96:1b:51:70:b9:a0:f0:d9:a8:88:81:27:18:3a:67:fc:dc:6a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
        Validity
            Not Before: Jan 31 09:03:09 2025 GMT
            Not After : Feb  1 12:09:09 2025 GMT
        Subject: CN=7DA0B16713E51E3F24340018BD9180E85946C912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:b0:ab:27:7f:4d:97:28:ab:61:15:8e:5b:
                    b5:7d:cb:b4:06:07:d9:1b:65:79:91:2a:5e:79:81:
                    45:74:46:14:cd:9d:4f:29:9a:00:33:df:8c:fc:71:
                    45:f3:10:3e:63:a8:6d:56:c0:b6:18:fd:f3:90:0d:
                    ff:ec:f9:4b:69:9b:33:de:f9:0a:d9:ea:33:f9:3a:
                    1c:71:e2:b6:3a:48:28:b5:97:bb:86:c9:77:b9:e7:
                    59:f8:20:09:ab:a6:f9:57:7e:f6:05:ee:94:13:8d:
                    77:4d:95:a6:5b:db:50:57:9b:4b:7f:90:68:33:78:
                    55:cf:dd:80:f3:af:88:06:e2:d8:3c:ec:84:48:33:
                    8d:16:18:6f:fc:20:ab:5f:ab:ab:2e:4e:c5:72:d6:
                    60:11:c1:2d:e3:c2:06:10:28:92:04:08:61:fb:9d:
                    fc:5d:62:e2:52:a0:28:84:17:79:87:d1:8e:06:4c:
                    a9:2c:f0:bd:96:72:26:b7:92:08:2d:51:86:e7:28:
                    26:eb:5f:37:a7:07:5a:28:80:f6:3e:ce:10:2f:f9:
                    f7:05:7b:19:90:02:56:07:69:b0:28:16:d2:2e:4f:
                    91:43:c0:6b:bd:98:e8:ad:db:75:8f:d7:cc:59:3b:
                    27:7d:94:43:99:2c:6f:87:29:7c:c1:70:54:2a:18:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:B1:67:13:E5:1E:3F:24:34:00:18:BD:91:80:E8:59:46:C9:12
            X509v3 Authority Key Identifier:
                keyid:85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:97:c5:3a:b6:e2:a7:b7:f4:26:9c:11:c6:88:bc:50:85:84:
         26:fd:db:39:54:ae:42:db:69:2d:04:40:26:94:42:5d:79:18:
         5c:4a:a6:b8:59:85:31:ee:b3:11:dc:85:eb:ad:d4:84:8f:46:
         c7:53:63:6e:79:23:e6:bc:3e:4a:3e:0f:00:fd:e9:90:99:18:
         7d:81:e8:ef:86:07:a3:38:d8:5b:a9:82:3a:7c:5a:1d:ea:de:
         30:43:7d:48:24:9c:fc:48:6c:6e:74:85:82:2c:b7:52:85:48:
         bc:af:a3:ec:24:72:62:4a:aa:35:c8:ec:04:98:44:00:3b:01:
         65:93:99:1f:df:8e:56:9c:49:45:d0:d1:b2:3b:95:db:d2:e6:
         48:07:51:b7:b6:c8:70:ae:fa:53:a9:c0:f3:67:5b:a6:8b:37:
         63:b9:b8:c8:99:c2:fd:ef:77:09:3e:23:7e:6f:8c:5f:1e:20:
         f3:63:da:10:cc:ab:af:61:5c:ff:7e:68:9a:a7:03:ad:ef:b7:
         aa:65:58:8c:34:1b:e5:45:47:1d:1e:de:eb:77:10:6a:40:f1:
         d6:42:e2:04:f8:ed:88:37:d9:07:53:7d:e4:93:5b:d3:36:ba:
         4e:ed:11:bd:b8:1d:6f:a2:44:60:e7:d9:95:6c:49:04:79:8a:
         a9:16:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:08 2025 by rpki-client