Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
File:                     677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft (raw, json)
Hash identifier:          joZrZXxoUd9xSqQtOsDlLLAw9QPgFH2XQEATXFW82zo=
Subject key identifier:   34:83:19:48:AA:99:35:A9:E3:7A:9B:F2:75:0E:EF:57:4D:30:42:C8
Authority key identifier: 67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
Certificate issuer:       /CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Certificate serial:       40B397D017D6B296B6ADD11C2F596573127DE2A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
Manifest number:          19
Signing time:             Fri 31 Jan 2025 07:46:12 +0000
Manifest this update:     Fri 31 Jan 2025 07:41:12 +0000
Manifest next update:     Sat 01 Feb 2025 09:56:12 +0000
Files and hashes:         1: 323830343a353665303a3a2f33322d313238203d3e20323638303239.roa (hash: +KqSK0dwXPn3Or4fdl27epYyLQTJZE9FNRT+x58Aht0=)
                          2: 677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl (hash: v73k8++W4U11VHAv92rFsSPM49wxn7r44Rh74VFeh40=)
                          3: 34352e3136382e35322e302f32322d3332203d3e20323638303239.roa (hash: vVHa43rKpGGbpv4Z9qchlES0Se/oYCQmYzzkcjNjt6c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b3:97:d0:17:d6:b2:96:b6:ad:d1:1c:2f:59:65:73:12:7d:e2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
        Validity
            Not Before: Jan 31 07:41:12 2025 GMT
            Not After : Feb  1 09:56:12 2025 GMT
        Subject: CN=34831948AA9935A9E37A9BF2750EEF574D3042C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:2c:e5:8b:d9:5f:02:08:39:ab:6a:3d:d4:
                    a6:49:71:0d:09:70:79:b7:00:06:ff:c1:92:9f:0d:
                    88:17:b9:34:3d:10:ba:3f:31:18:e7:71:1a:47:42:
                    bb:44:4e:16:58:01:3d:99:a0:dc:9a:de:ca:ef:b5:
                    94:55:24:66:c3:71:23:75:3e:dc:88:f0:d6:ba:07:
                    3a:78:a7:e2:25:ec:88:e9:c9:c0:88:91:96:2e:79:
                    b6:a7:f0:32:ee:e3:e5:ab:a8:a2:d0:39:26:1f:8a:
                    fb:26:e4:ab:c6:27:f1:b2:48:4d:53:b9:56:d4:8b:
                    20:42:59:52:5b:72:fa:01:63:44:c0:5a:f8:ea:ce:
                    6a:c9:46:b5:df:39:52:0a:7f:69:4f:32:0a:14:72:
                    b0:e5:0b:e1:47:7c:28:bc:ec:d2:b3:83:0f:f0:0d:
                    62:d9:b3:70:b4:51:01:84:c9:0d:42:78:38:9a:a0:
                    fc:b4:66:63:d8:86:4a:72:23:74:16:ee:77:c6:4e:
                    05:44:3a:5d:22:e2:b2:9e:9d:35:86:f3:3b:e7:15:
                    55:5b:a6:1e:13:c6:c2:89:4b:46:34:a8:8a:e1:35:
                    23:32:6a:25:c5:8c:f0:85:3d:ce:ce:e1:e1:ba:49:
                    89:47:73:20:21:1b:4c:89:3b:b0:b2:04:f6:1d:d5:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:83:19:48:AA:99:35:A9:E3:7A:9B:F2:75:0E:EF:57:4D:30:42:C8
            X509v3 Authority Key Identifier:
                keyid:67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a6:1b:03:66:d2:66:46:12:8a:6a:04:ba:e8:fb:e8:e3:83:
         dd:4c:da:a5:3c:83:4a:27:7d:43:70:a5:80:c3:f8:29:29:a2:
         1e:e5:fe:d9:6b:c0:f1:7c:a4:75:4f:75:7e:e0:51:ef:d8:db:
         09:81:4c:4f:66:87:65:ef:e3:7d:fb:4c:1e:30:9f:0c:d7:db:
         ef:1f:65:36:b3:97:97:59:a2:82:f2:10:d3:65:e1:4f:b1:92:
         a3:be:a5:1c:46:f9:2b:00:9f:ba:1d:58:a8:d7:a0:c7:00:f9:
         74:36:72:4a:f0:95:ee:34:8f:ba:f1:5c:0e:99:2a:aa:f7:15:
         91:6c:df:10:1d:ec:41:81:2c:3e:41:10:e2:2c:8b:31:e8:1c:
         2a:6e:60:47:f3:a5:a4:6b:a2:8e:a1:da:b0:fd:da:4e:a3:f4:
         5d:68:06:28:55:d9:68:10:f5:de:6e:29:77:5b:58:23:7e:ff:
         4e:41:4e:d9:0e:96:a3:30:6b:be:42:f5:61:8d:87:f8:6e:75:
         19:be:c5:43:dd:6f:2f:e1:d1:fc:2c:3f:ba:b0:35:3b:ee:c9:
         8e:57:cc:92:d6:7e:14:bb:39:61:0d:c8:5b:2d:f5:b3:4f:f8:
         b2:42:6f:ba:f7:26:d4:c6:3e:4b:f8:fe:2d:f8:d1:b2:da:8c:
         2e:33:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:52:19 2025 by rpki-client