Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
File:                     0B7D5851E99113F3832ED12CBE5DB4437990968F.mft (raw, json)
Hash identifier:          p+KjLHBBbfTjwbfMScmbyswc07zz46OaqprZh/LM61c=
Subject key identifier:   79:7F:06:5A:59:EF:21:60:07:E7:BE:BE:2E:67:8B:A5:33:FC:02:B9
Authority key identifier: 0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F
Certificate issuer:       /CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
Certificate serial:       3F1B2A9E5F61300BA6653214D5883F1E601A8DD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
Manifest number:          018F
Signing time:             Fri 31 Jan 2025 07:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 06:55:34 +0000
Manifest next update:     Sat 01 Feb 2025 07:45:34 +0000
Files and hashes:         1: 3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa (hash: GGbW4Qy9zqoQlbnqqeOtsHnahJAFLAgLctNPxaaHNQw=)
                          2: 323830343a376531303a3a2f33322d313238203d3e20323731363030.roa (hash: dI8Pc2jiyrETOgVB+nBWfx7a0nMhDp4sqJJgGXhRkzI=)
                          3: 0B7D5851E99113F3832ED12CBE5DB4437990968F.crl (hash: ae4NeCrVqAFf5uPiK6YXXceDee98IUnR+Xezra5sCrc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1b:2a:9e:5f:61:30:0b:a6:65:32:14:d5:88:3f:1e:60:1a:8d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
        Validity
            Not Before: Jan 31 06:55:34 2025 GMT
            Not After : Feb  1 07:45:34 2025 GMT
        Subject: CN=797F065A59EF216007E7BEBE2E678BA533FC02B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:17:88:6a:64:99:10:5f:78:3c:a9:60:83:
                    53:cd:be:97:06:57:2a:01:f6:51:fd:b2:73:12:9a:
                    5f:e2:37:9b:5f:20:6b:ed:ee:27:58:9c:7b:4e:ea:
                    69:3a:9e:04:86:a0:15:fc:30:f2:6c:02:54:bd:eb:
                    10:4a:4a:25:82:67:4f:d4:0a:b8:8c:45:c4:85:23:
                    86:36:52:de:82:08:a5:cc:df:39:db:fa:64:3f:76:
                    c0:3b:3c:c9:08:4b:96:2c:7a:d4:b5:e1:55:18:37:
                    5f:46:7a:79:5e:e7:1e:69:fc:6f:43:d8:90:e6:c0:
                    3f:f2:13:34:2f:f5:c1:ce:08:f1:1b:71:47:8a:4b:
                    ce:bc:fd:93:b8:f1:3b:a4:a5:79:b2:06:7b:ec:d5:
                    02:58:f6:75:91:23:91:2d:09:8d:4b:ac:97:48:ec:
                    6d:1a:e4:e3:eb:f5:b1:e1:a9:76:d6:40:e4:ba:03:
                    99:d8:d2:75:25:8d:0b:66:62:ea:58:3c:45:14:0e:
                    58:12:6a:5c:1f:bd:0a:9c:34:a0:ae:32:7e:71:f2:
                    f4:32:ad:71:d0:c5:da:9f:1f:21:a4:3f:a1:7d:5c:
                    b3:46:95:a4:bb:ce:36:86:f0:12:19:fe:db:3c:08:
                    70:7b:15:22:50:cf:d1:bd:1b:62:dd:13:bf:2b:2a:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7F:06:5A:59:EF:21:60:07:E7:BE:BE:2E:67:8B:A5:33:FC:02:B9
            X509v3 Authority Key Identifier:
                keyid:0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:6d:ee:4f:37:15:95:4e:56:de:6a:56:e3:f7:1f:b6:90:
         f6:75:c1:a9:0b:08:2e:34:fb:9c:c6:27:ed:76:08:2b:80:1c:
         91:19:3c:fb:cb:34:88:a6:ff:e3:24:0d:8e:38:00:16:57:d7:
         58:a1:e1:02:8f:cb:98:8c:6d:63:ca:e2:d6:5b:eb:70:8c:9e:
         0e:0f:1b:3d:14:4a:a0:9b:1c:e9:df:ca:9c:e6:47:bf:7a:75:
         82:9e:ef:08:04:ed:e7:13:4b:16:3a:8c:79:52:45:f7:0d:7b:
         ca:3c:b4:fa:1a:51:a7:30:64:e0:88:19:f4:80:6d:1d:7a:2e:
         ed:37:cd:41:d2:cb:03:4e:6a:a2:1e:a9:b8:cc:24:47:d1:e7:
         dc:86:95:6b:73:57:6c:87:85:c7:7f:72:c1:68:46:12:30:25:
         33:79:01:72:f8:40:76:a9:26:67:49:c8:06:d8:35:60:37:2c:
         ad:4e:44:d2:aa:7c:91:4c:cc:20:48:7c:c3:09:9f:c9:dd:20:
         da:f5:28:03:4f:c8:6e:35:8f:8b:43:5b:0f:e9:8f:41:33:05:
         3b:06:ad:99:37:c6:e8:90:44:eb:65:6b:cb:e3:dd:71:b5:04:
         c8:42:b3:73:b8:f1:91:63:d3:54:e4:e9:d2:a7:df:18:ea:c3:
         ac:2e:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:55:05 2025 by rpki-client