Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
File:                     2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft (raw, json)
Hash identifier:          pxuVp+c+vooRDNW9qKQDt524fjCVw8pmewRe18pXjPM=
Subject key identifier:   F8:E7:7A:F1:9E:29:08:6A:3D:C4:CB:EA:41:AC:34:8F:4F:CF:B6:01
Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Certificate issuer:       /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Certificate serial:       46638BEB86100582A9D5E88387AC3C8E1A4F84F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
Manifest number:          3C
Signing time:             Fri 31 Jan 2025 06:29:10 +0000
Manifest this update:     Fri 31 Jan 2025 06:24:10 +0000
Manifest next update:     Sat 01 Feb 2025 09:40:10 +0000
Files and hashes:         1: 34352e342e34342e302f32322d3234203d3e20323636303535.roa (hash: M1VFgYTrOUFDbP0quSBm77YUIyLqayRU7rDUKkoVyBM=)
                          2: 323830343a333964633a3a2f33322d3438203d3e20323636303535.roa (hash: lVjQzNWaA6sgin+JcE6yIGp5pKVWTu71HlqWbMqLcRA=)
                          3: 2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl (hash: RmFVvh+qyGd9ysYgtuoC1dTpzuN+67tV0n3yWxt1Z7w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:63:8b:eb:86:10:05:82:a9:d5:e8:83:87:ac:3c:8e:1a:4f:84:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
        Validity
            Not Before: Jan 31 06:24:10 2025 GMT
            Not After : Feb  1 09:40:10 2025 GMT
        Subject: CN=F8E77AF19E29086A3DC4CBEA41AC348F4FCFB601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:69:f6:ec:39:78:0d:cc:24:3d:ed:fa:f1:
                    de:57:f9:90:eb:52:d4:c3:55:72:e9:6e:80:b3:be:
                    8b:6b:d1:17:09:02:3f:bd:b9:50:02:9b:ff:83:87:
                    07:4c:6b:fb:be:e3:b1:37:43:cd:fa:84:1a:1e:44:
                    a2:1a:78:f9:1c:e8:2b:53:3a:85:bc:34:b1:14:42:
                    8c:9e:fd:b9:f8:4a:22:6c:2f:08:ed:42:e2:a2:1b:
                    38:fe:d0:80:a5:d2:72:fc:82:c9:06:10:be:35:3b:
                    46:21:35:d6:3b:7a:cf:24:3d:f3:a1:d5:bf:cc:cd:
                    f7:fd:d9:3b:ae:f5:35:94:aa:be:86:2d:f9:5c:b4:
                    f4:83:8c:23:62:0e:6f:9f:8a:b8:10:0c:f2:fd:7b:
                    b1:4f:c2:68:1d:2a:4d:4a:5b:32:bb:2c:bc:0c:7d:
                    a1:1e:6b:3c:aa:34:55:36:dd:63:a4:96:a9:66:12:
                    da:18:4e:b2:3b:61:03:f8:a8:2f:6a:75:9b:e1:88:
                    35:d9:d3:35:c4:bb:25:0d:51:c6:a7:3f:a1:00:04:
                    f1:cb:42:82:e9:3a:0e:b8:b6:03:4e:e0:e3:63:9b:
                    1b:f3:3a:00:54:47:ab:ac:05:3e:32:af:d1:66:24:
                    56:90:bc:4c:34:92:58:e0:a0:fa:2c:f8:db:89:af:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:7A:F1:9E:29:08:6A:3D:C4:CB:EA:41:AC:34:8F:4F:CF:B6:01
            X509v3 Authority Key Identifier:
                keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7f:2e:2d:04:b5:b9:fe:f1:ab:7e:e2:e4:6e:4c:21:2a:d4:
         32:fe:25:7b:38:3e:f8:f0:3f:bb:0d:19:c4:80:50:6a:a9:b6:
         d9:0f:2a:0a:27:1b:16:63:dc:d0:18:18:8b:85:f7:ce:f9:1c:
         d9:dc:f3:83:75:07:b0:a2:1d:42:c8:23:1d:74:5b:46:74:57:
         f5:9b:db:3b:c3:cc:fa:a9:f1:8f:df:15:fc:2e:1c:94:4e:35:
         87:76:76:7d:aa:ec:18:94:2f:3a:dd:6c:7e:a7:94:cd:7a:8a:
         1a:13:9b:e0:b9:15:81:a0:dc:d4:b6:0c:56:21:f1:d5:cd:7f:
         73:c3:16:27:8a:72:7e:d4:5f:bd:4e:26:64:c7:7a:67:41:03:
         f3:f7:91:dc:dc:eb:9f:9b:11:1f:99:59:7a:1e:d7:e9:47:7f:
         de:60:c4:99:12:42:ce:e6:3a:a1:9d:4b:65:06:dc:71:82:47:
         76:47:3e:bb:2c:8c:b3:33:73:1e:6a:e6:41:c9:5b:ee:16:de:
         5b:91:ae:f1:27:70:85:de:0b:5a:bb:c9:b5:85:33:e0:0b:82:
         1e:47:7c:ae:af:b4:3b:6d:6b:9e:c2:8d:11:4f:fc:57:74:28:
         ab:f7:37:bc:6e:4a:0b:54:e9:88:cd:d7:41:18:cc:a8:ee:1c:
         59:dc:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:04:02 2025 by rpki-client