Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.mft
File:                     2D5218850067B1879FF7D928A844733CA008C908.mft (raw, json)
Hash identifier:          n3NFujgcnPzp3tUVlL4Cb2xhD6dCn5lFdwb5ulDL4b8=
Subject key identifier:   26:A3:57:B9:04:84:93:CC:21:94:81:66:FC:40:DC:DE:EC:EC:20:DE
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Certificate issuer:       /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial:       4F8EB57CB246EB3F441A4DF49B59226A2318AE5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.mft
Manifest number:          11
Signing time:             Fri 31 Jan 2025 05:40:17 +0000
Manifest this update:     Fri 31 Jan 2025 05:35:17 +0000
Manifest next update:     Sat 01 Feb 2025 07:35:17 +0000
Files and hashes:         1: 3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa (hash: knlSiayZa56wfBQZY3T2ldMHiUPHLzr5JjZ7MOWKcqQ=)
                          2: 2D5218850067B1879FF7D928A844733CA008C908.crl (hash: F9tQ7IxBpRGoUak/V4xnZbYUVkxS+TQyAq2Agl9CWT8=)
                          3: 323830343a3930383a3a2f33322d313238203d3e20323633303437.roa (hash: mCYiAtu6sdqakJ+N2F4QnZO5Hg/TZvqO3gdlF6mDOBg=)
                          4: 3137372e3132392e3230382e302f32312d3332203d3e20323633303437.roa (hash: xjp3G2uxpcJW16YRqGAJMM4i15uV2TPMooSRUPvK1wY=)
                          5: 34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa (hash: wW1AYRIWnLT2+9i255d3wrWlJgs7R8uYiDTp+MQiIbw=)
                          6: 3137372e3132392e3231322e302f32322d3332203d3e20323633303437.roa (hash: pY+BxtqK2jZIfSHUVqLDhXZiX8cixTtLdRslgTuVBkY=)
                          7: 3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa (hash: nAX8NdETHfp6usKCKvHg4s7lantwEyLYOHxmOREIUC0=)
                          8: 3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa (hash: VlC4X0ybM7sHWCD7Vke0M7gQdTR8wgcm/+71sOZGhJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8e:b5:7c:b2:46:eb:3f:44:1a:4d:f4:9b:59:22:6a:23:18:ae:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
        Validity
            Not Before: Jan 31 05:35:17 2025 GMT
            Not After : Feb  1 07:35:17 2025 GMT
        Subject: CN=26A357B9048493CC21948166FC40DCDEECEC20DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:12:46:cb:b7:60:71:37:73:1e:9b:50:ad:
                    6b:2e:cf:69:7f:3e:8e:74:d0:98:3b:72:d8:bd:d7:
                    5c:bf:86:7f:02:ed:6a:7a:4d:09:48:d5:70:b8:21:
                    e7:c3:dd:45:5e:b1:df:44:91:bf:23:da:8b:1f:73:
                    6b:97:d1:1a:63:03:2e:78:12:eb:29:62:e2:19:00:
                    ad:bb:4f:7d:58:fc:c9:2f:cb:86:a6:58:bc:8f:22:
                    4c:90:74:a2:96:26:c7:78:1f:92:37:72:72:79:49:
                    1d:9a:c1:89:fb:7b:d2:81:9e:9e:0f:fc:54:f9:7d:
                    85:8b:b0:20:d1:4d:47:cd:ee:41:83:53:89:52:14:
                    77:45:65:ff:56:4f:54:b1:a8:11:58:2a:40:6c:1f:
                    f9:09:06:5f:ed:d7:c7:28:01:98:bf:05:5a:ae:bc:
                    39:e9:c5:79:f3:55:87:6b:12:51:b0:32:65:39:4c:
                    50:2e:a2:7f:4f:7b:d8:19:9c:3f:6f:79:de:56:b4:
                    5a:16:65:8d:cf:16:09:01:66:1b:25:88:eb:3b:21:
                    cb:74:1b:aa:d8:b1:65:9e:04:b4:11:51:45:bc:57:
                    e6:5a:c0:be:aa:d3:95:20:e9:48:32:de:ee:95:23:
                    79:dc:ad:0b:b1:69:16:ea:a6:81:23:a6:3d:d4:78:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:57:B9:04:84:93:CC:21:94:81:66:FC:40:DC:DE:EC:EC:20:DE
            X509v3 Authority Key Identifier:
                keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:f8:3c:cf:39:48:15:d7:81:25:b8:38:16:22:6d:bb:10:
         54:e5:90:3b:43:e7:ed:ec:67:17:97:cc:45:36:05:47:4f:18:
         d3:fc:73:1d:fb:06:14:1d:e3:7c:77:03:10:67:ec:d9:3c:0c:
         4a:da:55:ca:b4:8c:24:90:52:b4:6b:2b:a2:bf:fd:69:62:a4:
         93:3d:37:00:df:e8:60:f8:8a:c0:7e:e3:fe:98:12:c4:eb:34:
         70:60:08:00:e4:8c:48:39:ba:9b:4d:89:e4:54:98:cd:5b:13:
         4f:dd:77:8b:2b:43:f8:0c:b7:d9:0c:c6:7b:bd:12:a7:8d:0c:
         d9:b1:a5:bd:12:ff:17:01:76:8d:5e:ca:aa:58:11:b9:7a:62:
         87:4a:2e:6d:3a:03:40:27:6d:0e:2e:59:42:d9:84:54:48:04:
         aa:cb:be:05:6a:5d:12:ab:c6:a5:bc:f5:aa:72:35:7f:0d:a7:
         0a:ef:3d:b5:4b:a9:16:e1:3e:ec:c4:c7:88:35:28:87:56:6d:
         fc:ef:a9:03:7c:47:32:13:ec:a2:67:25:f1:5b:0a:94:3e:9f:
         8e:ee:27:b8:a4:3c:91:a7:05:7c:94:83:8e:4b:8b:0a:e3:a2:
         f5:ec:fb:31:a6:e2:87:a0:a6:18:0f:89:6b:14:b9:23:78:50:
         f3:6b:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:56:07 2025 by rpki-client