Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
File:                     38E14B86FE172DD4D8E534146604EB873463394D.mft (raw, json)
Hash identifier:          UaMA8evqtePqLZJkvyClzLwnqGjPBf+kpKy5ePJIseo=
Subject key identifier:   35:C2:E9:F8:69:3D:7B:A3:62:F3:08:6C:04:6D:C5:F8:11:5D:8F:40
Authority key identifier: 38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D
Certificate issuer:       /CN=38E14B86FE172DD4D8E534146604EB873463394D
Certificate serial:       1A2441F8128F8B9AF136E38262E4F937D1B89FC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft
Manifest number:          3F
Signing time:             Fri 31 Jan 2025 05:04:28 +0000
Manifest this update:     Fri 31 Jan 2025 04:59:28 +0000
Manifest next update:     Sat 01 Feb 2025 08:17:28 +0000
Files and hashes:         1: 38E14B86FE172DD4D8E534146604EB873463394D.crl (hash: qv1vnX5ou37fM9EqeWyz2AweJX0Q8L0fZ6pk35Tq4FE=)
                          2: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (hash: FGbym0C7oy+3WkWLxGeUkkMs9tZRG07fiF6hYHOGFP8=)
                          3: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (hash: KS3CIPQBP8uBSzv8b+te50bhqKxNppim+ZvFE5maTMk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:24:41:f8:12:8f:8b:9a:f1:36:e3:82:62:e4:f9:37:d1:b8:9f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E14B86FE172DD4D8E534146604EB873463394D
        Validity
            Not Before: Jan 31 04:59:28 2025 GMT
            Not After : Feb  1 08:17:28 2025 GMT
        Subject: CN=35C2E9F8693D7BA362F3086C046DC5F8115D8F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:a6:aa:d7:26:08:f2:b5:5c:d7:e1:a1:26:
                    c1:78:32:bc:a2:6c:43:da:49:73:c5:1c:1e:57:0c:
                    d9:e2:0f:f3:52:26:4f:14:a1:bc:48:87:64:7d:14:
                    39:2d:7d:b0:33:d0:4a:dc:93:38:21:18:08:07:53:
                    ae:eb:23:5d:da:51:84:eb:84:77:d0:13:bb:ee:2f:
                    9e:4c:4d:70:97:d7:bf:54:58:58:ca:bb:26:29:a7:
                    60:ad:02:b7:38:09:1f:48:01:e9:71:14:f3:77:12:
                    ce:2c:3a:c7:74:66:d0:34:1a:74:47:56:49:c9:31:
                    1e:61:50:7d:84:6b:2d:25:61:b7:a4:0a:3e:2c:6b:
                    a3:04:af:e9:bd:75:a3:9b:b5:a0:5e:b7:65:52:98:
                    3c:63:a2:48:fa:1f:17:e9:34:c7:5e:e4:8b:3d:01:
                    96:d4:c7:ab:4b:79:eb:59:cf:ff:cd:0c:18:53:5b:
                    82:81:c2:e5:a3:d9:9e:74:93:de:f5:0c:40:9f:03:
                    4c:eb:5c:e6:65:60:9b:c1:ba:c0:cd:cc:fb:3f:be:
                    cb:ba:95:27:a4:39:84:d8:af:32:6d:ca:d1:62:c4:
                    c2:22:e1:07:04:73:d5:03:1e:87:6b:df:d4:9b:f1:
                    b8:f0:17:6f:c6:74:33:4d:de:0a:78:85:e6:72:3d:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:E9:F8:69:3D:7B:A3:62:F3:08:6C:04:6D:C5:F8:11:5D:8F:40
            X509v3 Authority Key Identifier:
                keyid:38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5c:00:7e:00:1e:62:bb:86:8d:e7:60:3c:93:d5:0d:02:fc:
         5f:d0:9c:2e:91:62:d3:f7:06:46:38:ba:a0:84:c2:a5:9a:dc:
         61:f7:20:a7:97:da:81:5d:93:fa:cd:10:b6:69:b1:8d:5b:cf:
         e0:84:81:24:83:1f:8e:5e:44:5a:3c:5b:11:29:84:10:e7:2f:
         93:70:ef:7a:a0:3c:d8:de:6e:f8:6d:66:db:cb:5f:63:74:e1:
         92:14:90:3a:7f:af:16:b3:7d:01:a1:56:f8:b4:11:2e:77:c0:
         ca:64:b9:c4:c9:9b:ed:8c:3b:90:62:3c:bd:17:26:0e:fc:4c:
         52:07:5b:06:3a:f6:e9:91:8d:e7:22:99:2e:8f:55:83:ed:b6:
         43:f5:77:dd:47:66:bf:26:9d:7f:ab:64:60:b0:d4:0f:2d:44:
         15:96:14:95:ed:da:a7:e7:c1:9f:53:ea:aa:43:e5:42:3f:6f:
         dc:77:12:ee:46:dc:47:41:a3:de:1f:11:59:97:8d:32:15:d2:
         0d:d9:3c:b4:6e:49:44:9f:e6:04:1f:7d:64:6f:c1:a0:4e:f3:
         a0:9c:d3:44:0f:11:05:c6:80:87:7e:e8:ce:86:1b:57:ba:da:
         fe:82:da:d4:dd:4d:14:21:36:df:d8:98:25:ec:c9:0b:4b:56:
         8d:93:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:04:33 2025 by rpki-client