Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
File:                     CC96ED49391396FC76164F871315FEAD2DEE5F35.mft (raw, json)
Hash identifier:          Rj3Owjrj6nWLkT/lNDipK2rJ55gQ70+4KuJ4LA5OHx8=
Subject key identifier:   D2:F4:2C:32:68:E3:77:09:97:DC:81:0D:CA:13:D1:3A:FA:E0:5E:75
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Certificate issuer:       /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial:       2B8BC498F97C14450DA84EE72A21DA4178BB4B26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
Manifest number:          B4
Signing time:             Fri 31 Jan 2025 16:44:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:39:50 +0000
Manifest next update:     Sat 01 Feb 2025 16:51:50 +0000
Files and hashes:         1: 34352e3232362e36332e302f32342d3234203d3e20323636393635.roa (hash: tVRD7kZtNKCdL9cuw4t6LIcLyF0nhr0NYPV99tpSZ+E=)
                          2: 34352e3232362e36322e302f32332d3233203d3e20323636393635.roa (hash: jn+IVSgIJBejsrNDbeTtAF6j+bWUyvppUoM3jTkU8Eo=)
                          3: 34352e3232362e36322e302f32342d3234203d3e20323636393635.roa (hash: YUXAylwyy/bKyUHiJxpnxO1POYEVuMUDtHYc6AhZkME=)
                          4: CC96ED49391396FC76164F871315FEAD2DEE5F35.crl (hash: n0UfqePblD63x/8e7g0uMMq6eE8pJ5Q7A4etysKc1Uw=)
                          5: 323830343a343630633a3a2f33322d3332203d3e20323636393635.roa (hash: OznZVr/X5rqwoiVuc0W4AUGw80TlQei/7qNILDYCbcE=)
                          6: 34352e3232362e36302e302f32342d3234203d3e20323636393635.roa (hash: 7S/3GEhcKyUOomtDxw45aWMrBJLrfVkjAlUH2rcv6sM=)
                          7: 34352e3232362e36312e302f32342d3234203d3e20323636393635.roa (hash: /swjDXrj7b/G9bFBFdHbQ+BWJYOUly1PrHXp0njQgOk=)
                          8: 34352e3232362e36302e302f32332d3233203d3e20323636393635.roa (hash: 3+v3q7X6PUh3laQo830MHjKyj13pW7R9PT8rcieknVg=)
                          9: 34352e3232362e36302e302f32322d3232203d3e20323636393635.roa (hash: RxVkvKWzH0/g+lWedZ60uXmtsngtB/6VDhSkz6twazQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8b:c4:98:f9:7c:14:45:0d:a8:4e:e7:2a:21:da:41:78:bb:4b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
        Validity
            Not Before: Jan 31 16:39:50 2025 GMT
            Not After : Feb  1 16:51:50 2025 GMT
        Subject: CN=D2F42C3268E3770997DC810DCA13D13AFAE05E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:fa:dd:bc:96:c2:a0:47:bb:d0:d2:de:3c:
                    d4:67:d0:01:c8:1f:b8:47:53:95:59:c5:27:40:82:
                    5e:7d:ab:2f:89:42:8a:cf:20:9f:73:dc:2e:67:3e:
                    12:ae:d7:c0:5e:b4:7e:97:75:e1:c6:c8:6d:dd:b5:
                    bb:8e:90:05:54:d9:37:ed:16:73:4a:6f:b7:e5:41:
                    a9:34:29:04:77:3a:ff:fb:01:00:dd:c6:8f:23:31:
                    ea:80:b8:88:4b:33:b2:63:a6:8f:78:d6:69:67:16:
                    ce:7c:61:e5:4a:c2:ae:1d:c0:e8:ba:cb:e5:fa:38:
                    b3:45:64:3d:b4:fe:71:ae:91:7b:49:4b:28:06:80:
                    27:fd:c8:b3:b4:98:43:ad:dc:5b:a7:3e:d2:75:70:
                    7b:f7:29:30:7a:50:b5:1a:78:bb:1f:3e:66:63:01:
                    c8:82:20:7e:cc:eb:25:43:2b:0b:c1:f3:21:e8:d9:
                    ae:d7:c4:82:34:23:11:b4:14:b1:c3:41:d6:32:1b:
                    14:b0:be:c1:d8:3b:19:95:4c:cb:e7:ec:8b:91:a9:
                    00:19:29:d5:68:b4:e1:4c:01:54:57:f2:91:36:c4:
                    e1:26:7a:17:d8:18:fc:fe:38:f4:68:3e:b2:0b:d3:
                    4a:97:3c:0c:d7:76:7a:ab:22:b1:9b:bc:41:40:82:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F4:2C:32:68:E3:77:09:97:DC:81:0D:CA:13:D1:3A:FA:E0:5E:75
            X509v3 Authority Key Identifier:
                keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f7:19:d4:70:34:9e:fc:32:2d:5f:90:89:b8:9a:b3:f7:1e:
         d7:bd:ea:8e:ef:23:d0:c4:3c:83:c3:3b:3b:24:61:82:b5:57:
         ab:c1:06:81:21:95:82:78:e7:11:01:5d:04:3b:d2:1f:b9:99:
         36:8f:e3:1c:19:85:eb:00:b4:b9:52:3c:d7:ea:4c:49:36:3a:
         cd:7f:9f:79:0d:10:1d:4d:26:9c:34:d9:e5:69:b1:de:34:fa:
         fb:5a:0a:92:a6:cd:c2:e9:59:1e:94:32:e3:a8:bf:58:6c:30:
         f1:39:98:6d:b6:fa:7f:02:d6:6b:8d:03:fa:87:9f:18:b2:1b:
         fd:3e:4e:47:11:c7:03:91:94:91:af:ec:6d:48:a9:d8:cf:53:
         d5:de:4c:19:95:64:ae:1c:9c:96:22:3e:3d:e6:57:fa:ed:05:
         8d:8a:d3:20:ea:e6:ac:6e:57:ef:34:8c:39:d2:a5:3f:3b:b8:
         c7:b4:a1:99:29:b3:29:56:06:8c:bc:20:46:93:15:7a:a5:c9:
         92:66:06:ed:8d:28:ae:a5:f3:54:29:06:97:08:91:82:70:7e:
         71:83:24:bc:36:3e:a1:55:f4:6a:23:80:c7:ff:8d:ac:66:8d:
         7b:58:20:34:64:d5:00:0f:d7:ac:57:2e:3b:d9:fd:e5:af:a8:
         68:7f:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:57:08 2025 by rpki-client