Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft
File:                     8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft (raw, json)
Hash identifier:          vr3iBz76YCerldbYzR/UcqZljKE7ScuptNyCreSKaz0=
Subject key identifier:   27:D0:B1:52:72:C9:B1:C1:C5:FC:8B:59:B5:A4:E4:48:3C:CB:F1:75
Authority key identifier: 84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34
Certificate issuer:       /CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34
Certificate serial:       49DA8BA1DC363D189792DEB7D7E6E47E38C0BDC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft
Manifest number:          017A
Signing time:             Fri 31 Jan 2025 07:42:17 +0000
Manifest this update:     Fri 31 Jan 2025 07:37:17 +0000
Manifest next update:     Sat 01 Feb 2025 11:40:17 +0000
Files and hashes:         1: 3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa (hash: d2xVGm7YFvkNs3By6FOCt2fuV2G1oav2ZfrYI9eorXQ=)
                          2: 8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl (hash: INFg/9h6zc1gdyQ7zwJEKlxrPD7fg3RJd6R4MGYT9/k=)
                          3: 323830343a323630383a3a2f33322d3438203d3e20323634333139.roa (hash: UGVI5VYP9UWM5uxG1BC9ywkbpo8IOcRpMW/p19VuFX4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:da:8b:a1:dc:36:3d:18:97:92:de:b7:d7:e6:e4:7e:38:c0:bd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34
        Validity
            Not Before: Jan 31 07:37:17 2025 GMT
            Not After : Feb  1 11:40:17 2025 GMT
        Subject: CN=27D0B15272C9B1C1C5FC8B59B5A4E4483CCBF175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:1a:ed:e5:b9:c7:71:64:b9:0f:d3:80:ca:
                    4a:21:30:39:ee:bd:05:15:9e:dd:4b:e9:85:d1:11:
                    95:21:5c:94:0a:ad:85:f7:07:ad:49:09:89:1f:34:
                    d7:d5:ac:25:95:ab:6a:f1:bf:00:3c:9f:b2:c6:1d:
                    05:9e:f8:b0:a6:68:58:33:02:cc:89:a5:db:08:ce:
                    97:56:3d:e9:8b:80:a8:46:26:ab:91:df:87:90:32:
                    3a:23:00:e0:22:24:90:01:88:f6:f5:5e:22:0f:d4:
                    fe:7a:68:cf:89:df:4e:c2:8d:d6:d0:a6:73:18:44:
                    7e:71:a2:3e:7f:1e:07:33:68:9d:8f:0e:3c:c5:ff:
                    02:8c:b2:0b:65:c2:4c:55:a5:12:69:a1:db:5d:c1:
                    68:47:a2:a3:d2:ae:7c:24:96:fc:34:03:89:56:84:
                    7e:02:1a:ed:66:99:96:1a:30:6e:15:5a:71:ae:ee:
                    63:50:c5:5a:37:3e:76:b8:5e:bf:17:e8:1c:d0:91:
                    15:b7:c7:06:43:a8:ee:0e:bf:2e:62:9e:38:ec:66:
                    21:b3:95:eb:e6:be:42:06:01:bd:bf:57:cb:7b:86:
                    08:f9:43:ec:23:f2:8f:c3:e5:61:3a:dc:a5:dd:05:
                    20:a1:7c:3c:b5:8d:0e:c6:2d:0e:28:c0:a0:ac:a8:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:B1:52:72:C9:B1:C1:C5:FC:8B:59:B5:A4:E4:48:3C:CB:F1:75
            X509v3 Authority Key Identifier:
                keyid:84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b6:f3:47:b2:3b:1f:71:39:4f:c8:7d:1f:a1:8b:88:a8:50:
         3b:0f:ea:ad:a6:f4:e5:29:cb:49:97:25:9a:24:b6:be:59:9c:
         f1:0d:5c:5e:c5:bb:a0:04:8f:ea:7d:e9:f5:51:b8:e7:be:bc:
         34:3e:c5:bf:15:54:94:a7:a6:24:05:df:db:98:ba:75:44:9b:
         dc:dc:be:fc:35:fc:ad:4b:c7:af:8c:d2:28:ae:35:fb:75:3a:
         27:78:c9:d3:50:ed:7a:18:65:91:87:d5:b8:9f:e6:bc:d9:a0:
         a7:07:e4:59:13:f6:b5:e8:70:ac:cf:06:5e:8a:e5:9b:e9:f2:
         46:15:65:fe:3d:5a:8d:ed:1b:6b:66:d4:80:76:1b:59:21:72:
         0a:8f:54:44:7b:7b:6a:00:72:2c:4b:83:cc:b6:91:07:25:76:
         aa:dd:e8:3e:43:65:a8:21:b2:b6:da:e7:ca:01:a4:fe:6d:f3:
         e3:b8:dc:7d:e4:c5:a6:e1:89:74:ca:6a:29:cb:69:d6:cf:9c:
         e2:a1:83:4b:6e:ad:90:ad:e9:d1:6f:f4:63:ba:5d:a5:9d:29:
         67:d0:65:23:54:14:3c:69:5e:8b:55:ab:e8:36:c6:76:8b:e5:
         7f:09:a4:39:c8:6d:af:9b:34:d3:69:55:2f:f9:0b:61:8d:46:
         ef:ca:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:02:35 2025 by rpki-client