Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft
File:                     D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft (raw, json)
Hash identifier:          3Hg7YpSW7TLn290aMrESKlG/kzhiJSVd4IACA1AIBvc=
Subject key identifier:   1C:DB:C8:BA:03:C5:2A:41:E3:86:68:44:F1:05:CA:ED:D5:69:95:3D
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       6B2CF422D678C4A3A40ABA165A1451885879A403
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft
Manifest number:          019F
Signing time:             Fri 31 Jan 2025 16:48:00 +0000
Manifest this update:     Fri 31 Jan 2025 16:43:00 +0000
Manifest next update:     Sat 01 Feb 2025 19:08:00 +0000
Files and hashes:         1: D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl (hash: G+Mx7AS7fDDChwd298wwgFy9YbP/4kij8bIcd5+ehoc=)
                          2: 323830343a376562303a3a2f33322d313238203d3e20323731363431.roa (hash: c2i1lwNtBHwC6Epls9deH0WlsPvLAAKfUK6lmZNxPXw=)
                          3: 3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa (hash: h/yOU+BsuM0lafGvOlyEtlIG9nfQLGkyUEcGyEN/dOI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2c:f4:22:d6:78:c4:a3:a4:0a:ba:16:5a:14:51:88:58:79:a4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: Jan 31 16:43:00 2025 GMT
            Not After : Feb  1 19:08:00 2025 GMT
        Subject: CN=1CDBC8BA03C52A41E3866844F105CAEDD569953D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:01:a2:32:1d:b6:bf:44:e6:73:cd:01:68:
                    c4:ed:e7:3b:29:3c:ea:db:19:c7:de:25:17:38:45:
                    ab:58:4c:38:c8:b2:e6:58:99:52:90:af:40:16:80:
                    7e:49:28:02:9c:7e:07:18:94:1b:7b:11:fb:ef:57:
                    2a:41:8c:74:00:50:7b:0b:05:a4:e7:57:1c:44:61:
                    24:fa:9d:6e:f0:05:8c:05:77:e5:aa:c4:c4:69:47:
                    8d:b4:ae:db:9d:22:6a:de:7e:8a:f0:e7:da:70:48:
                    47:6b:b8:66:7f:39:d5:fb:53:68:7d:8e:dd:7f:b7:
                    3f:2e:17:e5:4e:43:93:e5:a0:0f:87:3f:36:ab:4e:
                    73:5f:5c:78:fb:74:de:68:b0:67:e4:1b:ce:90:28:
                    e1:32:f5:4e:e4:69:40:15:c1:9a:62:e7:70:fc:5d:
                    de:78:f6:bb:2e:1c:06:a8:f9:1c:f4:45:de:a3:17:
                    d9:fa:1c:9a:32:71:1d:7f:c2:95:ba:70:c4:b8:ec:
                    99:ab:5e:de:da:df:c8:6e:96:05:be:f3:1f:b1:23:
                    18:18:ed:dd:2d:b7:f2:79:22:d8:ae:f9:32:9f:03:
                    87:04:ee:1b:69:4c:df:4e:59:45:5d:a1:01:b5:22:
                    cf:30:dd:40:76:0e:38:8b:6c:89:ac:5d:3f:14:88:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DB:C8:BA:03:C5:2A:41:E3:86:68:44:F1:05:CA:ED:D5:69:95:3D
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:58:1d:72:91:e5:d5:65:3e:c4:b0:23:61:94:ba:ec:e3:
         05:bc:77:70:61:7d:00:b1:e7:dc:b2:bf:ca:93:3f:61:05:e1:
         2d:17:c6:5f:e0:1b:ec:5f:9f:36:2a:fb:a8:a4:60:db:0e:a9:
         a4:0b:05:8c:f4:b3:74:fa:7e:f5:f6:f2:b6:d9:eb:a2:23:29:
         be:fd:fb:af:6e:f5:fc:9f:c6:fa:12:fe:6d:f8:87:59:3a:3a:
         53:a7:3c:11:11:15:63:5b:c2:19:f8:7e:24:28:37:2c:4c:68:
         cc:06:97:10:28:12:83:9b:3f:2b:65:8a:90:19:e6:4c:c3:a6:
         b4:b9:43:79:cb:89:64:66:1b:9d:d3:02:24:81:ba:3f:06:a1:
         b9:34:78:fb:c9:4a:04:2b:72:7a:c6:d1:16:c7:3b:96:12:ee:
         e3:51:fb:59:e8:cf:36:a2:66:c9:d5:52:1f:30:fe:13:43:c9:
         68:cc:45:a7:f0:6a:17:82:7e:96:d8:55:7f:a3:e1:64:48:29:
         50:ba:a2:3e:71:20:42:fe:e7:49:9e:75:af:30:a4:1f:3e:05:
         ba:7a:14:be:4b:08:54:65:c4:bb:65:a8:be:bc:32:d5:10:b7:
         ba:1a:47:30:65:86:8d:37:dd:49:be:d6:d5:02:ef:61:dd:69:
         58:3c:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:06:54 2025 by rpki-client