Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.mft
File:                     12D8BB9048654EB8B6770450FAD878383CB2E373.mft (raw, json)
Hash identifier:          /7Pr+AoEoQmTKMl26KKRdWHdCHyl2X73I6ZuZ/cKvnQ=
Subject key identifier:   AB:F5:66:6D:C1:11:8D:23:C5:ED:83:2E:1A:37:7F:C4:5D:86:C0:0F
Authority key identifier: 12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73
Certificate issuer:       /CN=12D8BB9048654EB8B6770450FAD878383CB2E373
Certificate serial:       384EED5367EA19F1AFF4B3D49F4645AC91507490
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.mft
Manifest number:          0132
Signing time:             Fri 31 Jan 2025 04:21:56 +0000
Manifest this update:     Fri 31 Jan 2025 04:16:56 +0000
Manifest next update:     Sat 01 Feb 2025 06:56:56 +0000
Files and hashes:         1: 34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa (hash: /v+Fx0lv4p+XvnllKdW9xBDFdm+fSOcBjy975uGnVGk=)
                          2: 12D8BB9048654EB8B6770450FAD878383CB2E373.crl (hash: 42XI7zO5gSk63876W+aNpm+j0DA3ZbKiLH1SYFFRngM=)
                          3: 323830343a343662343a3a2f33322d3430203d3e20323637303036.roa (hash: sgqxM5I4o6ch8RuRarJ+QDXzKGu47pcU/DZJm4CYjU0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4e:ed:53:67:ea:19:f1:af:f4:b3:d4:9f:46:45:ac:91:50:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D8BB9048654EB8B6770450FAD878383CB2E373
        Validity
            Not Before: Jan 31 04:16:56 2025 GMT
            Not After : Feb  1 06:56:56 2025 GMT
        Subject: CN=ABF5666DC1118D23C5ED832E1A377FC45D86C00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:8b:ee:09:40:b4:b8:4f:25:02:f8:d6:ca:
                    fc:44:3b:54:31:da:59:8d:ae:3f:65:2f:f0:fd:ab:
                    76:5e:4c:eb:3d:e0:34:3b:97:b4:f3:3e:ef:9f:f5:
                    f2:5b:2f:58:f7:f1:ec:ee:3d:95:82:64:b7:a1:a0:
                    cc:3a:32:da:2c:ba:e6:37:53:a3:f0:11:a7:56:57:
                    10:28:2c:17:d0:46:9d:b8:8c:73:cc:37:ab:fa:98:
                    fe:fe:cc:10:74:0f:12:36:1d:e6:ef:38:1e:e3:e1:
                    10:b9:f1:5a:d7:03:83:83:46:61:13:48:20:68:a4:
                    0c:d1:16:dc:ee:63:cb:3b:c2:52:fc:7b:ac:53:b9:
                    6c:ed:48:76:45:67:37:8e:b0:bb:28:4a:78:f6:7d:
                    de:80:f5:a4:43:32:d5:ed:0e:19:9f:49:02:dc:bc:
                    cc:5e:b7:c2:88:bd:1c:fa:fb:ae:c0:9c:0d:85:7a:
                    4f:c3:2e:33:41:5b:a2:fe:96:d2:9b:e5:62:d6:ab:
                    53:83:93:2d:e7:0d:ca:68:0b:5b:64:a6:02:94:60:
                    5b:cb:94:54:5a:46:ea:5c:51:17:93:88:43:c2:b6:
                    c6:25:70:f2:71:19:a4:fd:5c:bf:19:dc:a2:62:4c:
                    4e:f3:97:49:89:30:66:2d:83:5a:00:f7:31:7a:50:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F5:66:6D:C1:11:8D:23:C5:ED:83:2E:1A:37:7F:C4:5D:86:C0:0F
            X509v3 Authority Key Identifier:
                keyid:12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:12:66:60:4b:9f:81:cc:82:82:56:c8:58:e6:ab:30:84:
         26:f0:f8:5e:de:76:13:ac:27:7c:47:e3:5a:ca:1b:b0:1d:a3:
         a3:71:a8:7d:d0:50:43:09:3e:76:e1:21:ba:4a:95:20:0e:65:
         6b:12:da:fb:8a:54:c9:25:9b:00:ed:81:db:ec:10:21:7d:be:
         ca:bb:51:78:d5:6b:71:66:4a:76:48:23:8d:ac:21:9e:df:7e:
         3e:cd:4a:6d:92:fe:04:47:c2:23:bb:fc:d0:f3:8d:35:76:0c:
         7d:67:71:91:34:3d:6d:54:58:fd:bf:1a:7e:98:a0:4e:ec:92:
         fc:47:a0:34:31:9e:c0:1c:89:5a:9d:02:64:4e:4a:02:b9:f7:
         28:c8:c1:06:1f:b2:50:06:ea:24:c8:e5:e6:59:db:00:87:8a:
         44:92:fd:c2:ad:b2:7d:05:be:69:74:e1:a3:19:64:ea:3f:b5:
         38:66:bc:39:a1:22:2f:d4:77:ba:bd:b2:f2:73:fc:4e:39:4e:
         8b:c8:9a:73:50:be:08:c9:04:22:bd:a4:f7:c5:f2:07:c5:b5:
         b4:ec:17:64:54:ed:8f:e8:0a:66:34:9e:23:06:23:a3:88:89:
         7f:4e:12:2f:30:95:ed:7d:a0:cd:0f:29:f8:ea:4e:e2:29:0c:
         c5:06:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:33 2025 by rpki-client