Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.mft
File:                     8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.mft (raw, json)
Hash identifier:          BEHiVs5A2msC4MkDLp1EjtdXnXg46Dt83AqY0om+QmE=
Subject key identifier:   2A:09:EC:D4:94:6B:6E:9C:8B:8B:24:D2:7F:0D:99:52:A7:1D:00:C9
Authority key identifier: 8D:0A:BC:E6:EF:A9:E9:CD:18:01:8C:50:CA:DB:F2:10:16:79:C9:AA
Certificate issuer:       /CN=8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA
Certificate serial:       46FA61F6733DB7A484110B7A12D06194669A9787
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.mft
Manifest number:          018F
Signing time:             Fri 31 Jan 2025 05:03:00 +0000
Manifest this update:     Fri 31 Jan 2025 04:58:00 +0000
Manifest next update:     Sat 01 Feb 2025 06:10:00 +0000
Files and hashes:         1: 8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.crl (hash: L3gVV7j++QY6/zHGRYwatvQmWWD/3u7PL3RRTd29/F4=)
                          2: 34352e3138332e3132342e302f32322d3332203d3e20323639333330.roa (hash: 0TioTf3X+JIxTLQbol7LkUMZke/5cRiYtHTf16sUjYQ=)
                          3: 323830343a363266343a3a2f33322d313238203d3e20323639333330.roa (hash: 2njn5KRkxZX0hIVR3x0bnJdmyBQzqDoMLRQ6hIGhHI0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fa:61:f6:73:3d:b7:a4:84:11:0b:7a:12:d0:61:94:66:9a:97:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA
        Validity
            Not Before: Jan 31 04:58:00 2025 GMT
            Not After : Feb  1 06:10:00 2025 GMT
        Subject: CN=2A09ECD4946B6E9C8B8B24D27F0D9952A71D00C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:09:67:7e:2c:39:ce:f9:be:43:60:c0:74:
                    1b:f7:06:e5:ee:d4:95:87:3c:b0:e1:0a:1c:df:eb:
                    a0:57:2c:9e:bc:91:6b:10:f4:dc:8d:08:ab:cc:92:
                    00:ef:3f:1a:c8:5c:9d:04:b2:79:17:81:9a:cb:19:
                    7b:7e:1f:50:6e:34:36:b3:ea:23:70:e2:b0:9f:f7:
                    f3:c0:06:7b:7b:e3:b2:cb:28:ef:dc:8a:c9:c9:c3:
                    1e:30:fe:97:9f:c9:49:a0:cb:c1:21:fd:2c:c9:57:
                    e7:54:b2:aa:d5:e9:ac:fc:84:29:cd:31:54:01:d1:
                    51:b7:3f:8e:29:16:cd:45:99:f5:7b:b9:eb:bb:66:
                    17:ab:7f:83:12:b0:1d:ba:52:9d:f8:10:3b:ed:3d:
                    2e:b3:6d:24:30:1d:bd:c2:1f:0a:48:91:06:f3:42:
                    91:17:99:ae:9e:8d:15:bf:5d:ac:b1:53:68:b2:04:
                    4e:02:d8:a5:4a:e1:fd:30:5e:45:43:93:93:c8:2f:
                    32:cc:50:e2:ee:cc:5c:0c:aa:68:a1:fe:f2:97:97:
                    1e:01:12:4d:6a:3e:96:a2:59:24:22:53:e8:87:05:
                    f5:6a:b8:03:c5:3b:65:18:7a:1f:6a:df:46:fe:87:
                    92:2c:e8:c6:d3:5a:87:30:50:48:60:74:e5:ba:60:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:EC:D4:94:6B:6E:9C:8B:8B:24:D2:7F:0D:99:52:A7:1D:00:C9
            X509v3 Authority Key Identifier:
                keyid:8D:0A:BC:E6:EF:A9:E9:CD:18:01:8C:50:CA:DB:F2:10:16:79:C9:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/1/8D0ABCE6EFA9E9CD18018C50CADBF2101679C9AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:79:ed:16:2e:82:42:0b:ce:13:34:be:c9:a0:8b:99:25:f8:
         3a:a1:a3:0d:4d:a0:b5:4d:86:cf:2c:d0:20:fb:16:b2:35:ca:
         6f:e7:2c:29:82:20:05:2b:a3:cd:f0:0e:3a:19:f6:eb:20:01:
         f7:f1:f8:6d:08:b4:74:cb:c5:2e:ec:83:7a:ae:85:a8:40:56:
         fe:09:fc:83:be:90:fe:8d:ad:00:15:94:75:f9:35:c4:f7:5e:
         1c:d9:81:bb:86:72:a6:88:8f:b2:24:b0:34:40:a0:bb:d1:98:
         40:65:a6:83:61:0a:c0:83:07:23:6e:7f:31:a0:0b:ab:a4:f2:
         b9:84:86:82:4b:13:b7:11:15:f7:ce:f7:75:54:57:68:0c:1c:
         99:7c:9c:2d:dc:8c:d3:c6:2f:7d:d8:40:14:49:40:7e:f3:62:
         75:b3:03:f8:66:1f:7e:85:59:13:b6:49:43:da:3b:2a:e2:88:
         59:7f:e0:6c:e4:17:f2:bc:96:58:a9:b5:70:21:13:0f:4c:8d:
         85:f8:34:7f:cb:06:9a:cf:12:cf:2b:0a:a7:95:dd:11:35:1e:
         f0:ee:2f:6b:c4:f5:37:e8:ba:f4:26:f4:89:8d:0d:89:9b:ba:
         ba:54:9d:57:80:15:00:32:8e:14:e6:5e:f2:d3:f3:26:aa:76:
         09:30:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:58 2025 by rpki-client