Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
File:                     B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft (raw, json)
Hash identifier:          CWBAOJOB36hhFNax7kz1LE3vRJeSyL5IcOqs5yV2aeQ=
Subject key identifier:   39:66:50:27:47:5B:CD:DE:5E:4E:6E:42:5C:EC:FC:A0:47:CA:6A:2E
Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
Certificate issuer:       /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Certificate serial:       3C9D0FD9456AFB1E68EDCA066A13C3567B7ECC58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
Manifest number:          3E
Signing time:             Fri 31 Jan 2025 17:54:12 +0000
Manifest this update:     Fri 31 Jan 2025 17:49:12 +0000
Manifest next update:     Sat 01 Feb 2025 18:51:12 +0000
Files and hashes:         1: 3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa (hash: KszOIxvzdb2byYIAkB/jo2J14kAdHgZWkp71wd+hZKU=)
                          2: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl (hash: pyKL+Hu6V/JhJ2o00EYzJQy0/Wu8z1lA88Op/trYenY=)
                          3: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (hash: XcxDfu5Dk/JfCL8RQs0hAY0KSxIgVRPmT1tOWH4+b4g=)
                          4: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: Orbb6MeNodxx3916UDCrBEg7Fpk2zV0yU2VrzE/g0s8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:0f:d9:45:6a:fb:1e:68:ed:ca:06:6a:13:c3:56:7b:7e:cc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
        Validity
            Not Before: Jan 31 17:49:12 2025 GMT
            Not After : Feb  1 18:51:12 2025 GMT
        Subject: CN=39665027475BCDDE5E4E6E425CECFCA047CA6A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:20:07:e5:1c:e1:43:ff:5d:20:b6:10:05:
                    d5:76:13:4c:84:fa:14:71:fd:c2:f9:41:e4:f0:f2:
                    ef:c2:cb:94:25:dd:58:fc:07:b5:4c:ee:cf:37:69:
                    bf:91:8d:c0:20:cc:ec:b1:e8:6d:c0:76:91:2c:7c:
                    03:8b:05:34:7b:3d:b8:b4:5d:d1:d7:3a:07:64:8e:
                    3e:1f:35:59:7a:63:2e:40:d5:96:0d:2f:a2:fa:4d:
                    30:56:9f:7c:f4:a7:c1:19:ee:d8:15:b8:6f:52:ab:
                    8a:57:15:46:8b:cf:6a:6e:6a:97:6a:ef:09:73:84:
                    e4:8d:f2:90:e5:1f:11:af:bc:88:d7:d4:bc:94:9f:
                    da:76:ab:2f:ca:9a:11:54:26:83:30:be:da:39:e0:
                    52:68:8e:1c:b1:d8:57:82:13:67:80:af:19:e5:11:
                    27:1c:72:ca:65:80:c0:0a:83:e0:fe:b7:68:26:cd:
                    aa:9e:2d:97:eb:1b:1a:a6:32:f9:a9:c8:d2:bf:3f:
                    5c:a7:08:cd:f5:5b:36:d1:d2:08:f3:ea:f3:2e:54:
                    bc:c2:55:8a:8c:1c:e8:62:f2:6f:a5:31:67:5f:cc:
                    ee:2d:54:47:e0:51:11:27:04:be:7e:3b:04:89:a5:
                    e1:6f:72:86:da:e1:89:cb:6f:06:09:c2:a8:8a:f4:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:50:27:47:5B:CD:DE:5E:4E:6E:42:5C:EC:FC:A0:47:CA:6A:2E
            X509v3 Authority Key Identifier:
                keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:10:85:fd:c0:4f:8b:a4:b7:0e:9b:f5:ac:a3:0d:84:71:53:
         dc:98:e1:de:6f:33:58:fa:40:25:3b:58:09:8b:8a:19:ff:1b:
         1e:48:ad:da:dc:50:d6:e1:6e:d9:7f:f6:f6:1f:29:05:9b:b3:
         a5:7d:06:70:00:4e:39:b4:e2:29:c2:e4:0d:38:be:05:9b:ec:
         d4:a6:90:5a:20:a4:ac:cb:06:4d:1d:27:0b:53:98:78:71:9f:
         22:e1:1a:16:db:24:98:bb:9d:56:94:ab:77:1e:2e:3d:5a:f7:
         12:09:a3:90:b6:58:58:4a:db:3b:dd:08:e4:97:3f:dd:10:7a:
         8d:74:7b:b7:09:e8:84:3a:77:2c:46:30:06:be:af:35:df:c5:
         9f:e5:f4:ec:7d:ef:6c:7b:63:2f:9e:30:7a:ed:48:90:aa:96:
         6d:d1:21:ff:b2:83:50:b9:32:9a:1a:57:fd:fd:b1:51:50:d1:
         ed:73:e5:79:e8:7e:4e:95:7e:e5:a6:0a:22:2f:a3:c8:85:54:
         7e:e0:17:93:44:16:91:a0:88:96:48:0e:dc:6c:3a:11:3a:86:
         af:b5:48:2e:88:07:99:d4:9f:5d:81:b3:e6:23:ba:a3:ec:1d:
         cb:a7:9c:28:dd:05:00:2c:f0:e4:9f:3b:8e:08:2e:f9:75:65:
         ab:b8:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:51:42 2025 by rpki-client