Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft
File:                     140BB09016E491475222C5C1D5E1A65EC41678DC.mft (raw, json)
Hash identifier:          FPgHo8EUDeeOTXNzCBVXXr6A+sZx7GFfZUIPV7jb21s=
Subject key identifier:   86:6F:C1:E1:C3:96:40:44:5D:5E:C1:8C:EA:5A:A9:EB:33:74:EC:CB
Authority key identifier: 14:0B:B0:90:16:E4:91:47:52:22:C5:C1:D5:E1:A6:5E:C4:16:78:DC
Certificate issuer:       /CN=140BB09016E491475222C5C1D5E1A65EC41678DC
Certificate serial:       0F5CCD432D4F0344FD9A8F1CE694B4C51FEE800A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140BB09016E491475222C5C1D5E1A65EC41678DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft
Manifest number:          37
Signing time:             Fri 31 Jan 2025 05:16:22 +0000
Manifest this update:     Fri 31 Jan 2025 05:11:22 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:22 +0000
Files and hashes:         1: 323830343a346462633a3a2f33322d313238203d3e20323638323136.roa (hash: Bml6DvmGKoW4Lf8/LSH6WfAifTG3d9FiI+9plrscLu0=)
                          2: 140BB09016E491475222C5C1D5E1A65EC41678DC.crl (hash: VFdYUsxRdhncBNBOM6asf+YQAgqwtc0CeuNQ7QGk0TM=)
                          3: 34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (hash: 6EAV9MNo16uluaSjX/q0IgMcBVr+m0i+ndPQyMjrpf8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5c:cd:43:2d:4f:03:44:fd:9a:8f:1c:e6:94:b4:c5:1f:ee:80:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140BB09016E491475222C5C1D5E1A65EC41678DC
        Validity
            Not Before: Jan 31 05:11:22 2025 GMT
            Not After : Feb  1 09:00:22 2025 GMT
        Subject: CN=866FC1E1C39640445D5EC18CEA5AA9EB3374ECCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:b9:e8:dd:15:6a:1e:93:54:2b:11:f4:67:
                    1d:0f:cf:94:bb:6a:1a:91:75:5f:de:b4:10:55:25:
                    43:c3:a5:0e:b4:27:2b:34:f2:3e:5b:8b:cd:35:bf:
                    62:67:38:7b:ab:78:68:eb:57:b5:16:d2:ee:33:5a:
                    e2:16:83:63:39:dd:64:e3:11:25:58:37:ba:7c:a5:
                    9a:1a:39:c1:a0:23:84:a9:ff:c8:66:0b:2f:81:4a:
                    88:8d:08:9d:1e:82:ad:f3:de:70:04:71:36:66:f9:
                    92:4c:e5:d4:be:60:e5:66:79:f6:9e:0d:d7:55:22:
                    46:96:aa:76:aa:18:02:0e:bb:39:41:58:b6:d9:4b:
                    e1:86:1d:1b:55:36:e7:e1:86:be:fe:4f:32:35:b5:
                    39:fe:da:75:2e:92:cb:eb:1b:05:87:37:c7:1c:24:
                    db:a1:12:36:b6:a6:f5:46:61:45:93:71:d5:58:13:
                    16:93:00:4d:13:6e:6f:28:db:b3:e5:11:91:e3:86:
                    7a:53:79:02:1f:ca:da:88:e1:ae:3c:ed:94:f3:0d:
                    06:2c:bf:72:0c:2b:ce:dd:81:50:e5:e0:01:0a:c2:
                    54:1e:92:1e:d2:c6:4b:2c:65:0c:9a:27:d4:98:58:
                    63:4a:fa:76:26:2b:0c:dd:24:44:20:4e:dd:d8:6f:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6F:C1:E1:C3:96:40:44:5D:5E:C1:8C:EA:5A:A9:EB:33:74:EC:CB
            X509v3 Authority Key Identifier:
                keyid:14:0B:B0:90:16:E4:91:47:52:22:C5:C1:D5:E1:A6:5E:C4:16:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140BB09016E491475222C5C1D5E1A65EC41678DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:2c:83:03:14:0a:28:e0:af:23:7e:b8:71:5b:c7:15:5e:
         b5:11:d2:53:36:91:6f:7a:13:db:f6:8e:92:e2:8d:c6:03:03:
         e7:09:36:b4:48:ec:35:a3:b3:3d:81:2b:07:b8:a9:af:83:ec:
         2e:34:12:ad:fb:2b:96:91:a1:ce:3d:aa:17:c6:b0:98:a5:aa:
         f7:bb:d4:a8:c6:47:d7:94:53:ae:51:b4:8d:d9:f7:ad:b9:aa:
         10:5a:17:8f:25:79:99:30:df:b1:76:4a:bc:bd:4b:98:67:84:
         25:81:64:38:a3:d8:9b:e8:e7:89:7c:47:c7:9e:5a:cd:b1:b3:
         e7:a3:54:b4:b9:09:c4:24:10:e5:a5:d3:e0:35:45:f6:e7:30:
         38:f5:58:9d:d0:e5:53:92:b8:7f:1b:aa:5f:3f:ea:ea:5e:a6:
         96:1d:29:6e:83:33:f8:b5:9c:14:90:47:86:74:de:dc:0d:66:
         d1:e8:98:06:dc:e7:55:71:5d:2f:ed:0c:2a:0b:2c:cd:87:ab:
         39:8f:0d:e1:7f:db:b2:bd:b1:8e:1f:32:58:85:aa:54:86:7c:
         8b:94:1d:28:04:a1:e7:98:85:da:3f:6c:ba:cb:f2:23:cd:bd:
         aa:8a:d7:09:1c:87:d3:47:2b:41:92:84:a5:2c:5d:19:3e:28:
         45:89:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:19 2025 by rpki-client