Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft
File:                     335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft (raw, json)
Hash identifier:          2eBnacQm5AOFqre33x9ps7uRphQhKE/UfciQroSUEb0=
Subject key identifier:   02:35:3A:95:91:36:78:DB:79:58:CF:EE:8C:CF:22:A9:EF:6A:B0:23
Authority key identifier: 33:57:54:94:79:82:AA:4B:A9:BA:B5:FB:ED:F0:22:10:1E:9E:7C:37
Certificate issuer:       /CN=335754947982AA4BA9BAB5FBEDF022101E9E7C37
Certificate serial:       247F77F2650953799B5C530950A60A263C7AF723
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft
Manifest number:          0C
Signing time:             Fri 31 Jan 2025 12:56:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:51:22 +0000
Manifest next update:     Sat 01 Feb 2025 15:15:22 +0000
Files and hashes:         1: 323830343a313439383a3a2f33322d3333203d3e20323633333339.roa (hash: QSIJSLWoBYH2Wq39FRnjmurMYo1nbDw+r2SdzKCvXdE=)
                          2: 3139312e33362e3139322e302f32302d3234203d3e20323633333339.roa (hash: s0jw3/wSdu4D1Z3mw5IbOf2Tjvhi/LmCkBEaf12TEO4=)
                          3: 335754947982AA4BA9BAB5FBEDF022101E9E7C37.crl (hash: PF7DMTNh3vxaqC7jBX1it7pom6Erc+LOGx/R3tsJyv8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7f:77:f2:65:09:53:79:9b:5c:53:09:50:a6:0a:26:3c:7a:f7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335754947982AA4BA9BAB5FBEDF022101E9E7C37
        Validity
            Not Before: Jan 31 12:51:22 2025 GMT
            Not After : Feb  1 15:15:22 2025 GMT
        Subject: CN=02353A95913678DB7958CFEE8CCF22A9EF6AB023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:c7:82:ff:c5:90:92:07:41:b2:c9:5a:c8:
                    62:ca:0a:06:4c:25:20:40:a0:9c:a1:c0:98:8f:a5:
                    18:40:c9:c3:43:6c:64:a0:dc:b7:1c:b9:fd:cc:01:
                    0c:12:f9:c9:b6:39:e7:f1:59:07:50:f6:8b:0e:dc:
                    88:9b:f1:15:71:3c:7d:7b:20:b4:39:f3:90:bb:f2:
                    76:1f:08:06:8d:27:3e:5e:26:3c:75:b7:70:15:b7:
                    83:99:a3:df:b8:28:31:ae:c1:5d:d3:c9:04:96:15:
                    59:36:15:6e:29:0b:db:44:82:43:45:73:3b:d8:ad:
                    95:8c:cd:02:b6:de:85:94:ce:ce:cb:c2:46:5c:ec:
                    0f:88:f3:90:cc:94:fc:30:35:22:80:51:d0:71:c6:
                    21:ad:71:ee:33:ff:70:70:78:a9:bf:f0:17:fc:bc:
                    37:03:72:0f:2f:f9:4f:90:87:e8:b2:0f:e6:68:3d:
                    b1:35:a6:04:86:cb:a2:ce:00:16:96:3b:0d:d7:f7:
                    f1:3a:25:b8:94:f1:26:b5:aa:0c:32:99:7d:9a:cd:
                    ad:e0:47:76:bc:d3:37:0c:19:e4:fa:75:37:fb:6f:
                    b5:1c:d1:ae:5a:35:e6:f5:c9:ef:79:36:98:0f:70:
                    9b:78:d1:0e:69:e5:61:74:04:93:ae:cd:2c:93:e6:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:35:3A:95:91:36:78:DB:79:58:CF:EE:8C:CF:22:A9:EF:6A:B0:23
            X509v3 Authority Key Identifier:
                keyid:33:57:54:94:79:82:AA:4B:A9:BA:B5:FB:ED:F0:22:10:1E:9E:7C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:af:39:12:88:cf:a8:4f:99:cf:03:be:df:ef:dd:d4:01:97:
         77:c2:d5:b4:23:93:8e:74:ba:46:c6:64:87:c3:37:78:4b:48:
         78:f8:5a:c1:e0:e5:84:c2:88:52:6b:d0:55:b5:d4:ee:ff:b4:
         23:0f:b2:0e:57:39:b5:c1:b5:32:d6:a4:7c:ae:9f:be:d3:ec:
         bf:70:09:9e:f2:36:96:6c:39:92:d1:96:09:2f:ba:09:2c:1a:
         d6:d5:47:54:10:da:16:2b:e8:6c:92:91:8a:a9:1f:02:75:f8:
         1e:35:4f:51:8d:5a:79:6d:91:e7:a1:26:8f:eb:d9:9b:23:2e:
         22:eb:58:27:42:df:fa:a3:83:ba:6e:68:ec:a2:ea:28:73:ea:
         80:2d:70:ea:3e:62:01:51:74:25:f7:aa:42:f8:45:bc:eb:a9:
         94:2e:5b:70:f9:c8:c6:ce:bd:82:35:7e:e3:fc:83:11:3a:84:
         1b:7b:85:60:69:15:35:f1:c9:1a:05:fd:e3:2f:39:3b:4a:fb:
         a5:17:d0:43:ed:56:d6:ee:b2:61:39:dd:e9:82:2a:60:ba:2c:
         6c:a8:b9:4e:b6:43:0d:f0:34:e6:d0:39:8f:72:56:eb:e9:4d:
         4c:34:92:27:ad:48:84:82:ee:92:72:09:26:4e:11:8d:a4:03:
         58:f6:1c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:18:50 2025 by rpki-client