Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft
File:                     2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft (raw, json)
Hash identifier:          Pn8NLIqcwj01PFTskSOSRru1NXxZcWmEnz5t46UTnWU=
Subject key identifier:   A8:0E:1F:64:DA:1D:13:AA:9A:41:04:8F:B3:FD:B6:00:42:1A:E0:ED
Authority key identifier: 2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4
Certificate issuer:       /CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
Certificate serial:       520E16B68779B4D69196D676C6984D1BC078062B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 17:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 16:55:42 +0000
Manifest next update:     Sat 01 Feb 2025 20:05:42 +0000
Files and hashes:         1: 3230302e37372e3138302e302f32322d3234203d3e203631373637.roa (hash: ZvgtJegn9v78LlAKow4Gpydg3126+gWL4MplE/aYiP8=)
                          2: 323830343a313866633a3a2f33322d3332203d3e203631373637.roa (hash: 818eK7NS5Tw+yNdvGT015E2dad/e55DFmZmTLQJiZkw=)
                          3: 2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl (hash: uyD2vm/0BBIfF0VjZV2+xgZPDZDJs13sQg+pet+ibhw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0e:16:b6:87:79:b4:d6:91:96:d6:76:c6:98:4d:1b:c0:78:06:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
        Validity
            Not Before: Jan 31 16:55:42 2025 GMT
            Not After : Feb  1 20:05:42 2025 GMT
        Subject: CN=A80E1F64DA1D13AA9A41048FB3FDB600421AE0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:26:b3:c7:2f:0b:bd:c9:da:3c:84:27:e9:
                    74:dc:3d:81:5a:9d:16:ee:a1:ec:99:cc:7d:f8:4a:
                    00:7d:58:69:ca:1a:ff:e1:26:96:c7:53:dc:7a:1a:
                    66:1d:fd:fe:19:d8:ca:7f:73:93:46:96:71:f5:4c:
                    19:8a:71:f9:ef:33:c0:b3:a2:70:fe:c7:2d:00:dd:
                    90:cc:58:98:b3:aa:f9:f3:88:d8:84:b6:6c:69:d4:
                    9a:25:9e:8a:d3:e2:ed:a2:83:54:8e:a8:bd:dd:8e:
                    5b:5a:79:da:60:74:ef:66:0d:35:cd:6d:d1:0e:fb:
                    cb:e9:72:47:55:0a:6c:e4:09:4c:88:05:67:9a:fe:
                    d4:ac:ae:cf:77:22:11:55:15:c2:96:08:89:b2:dc:
                    a9:4d:06:da:45:d4:33:af:5a:6a:c0:d2:33:7e:37:
                    d5:17:35:ae:97:07:85:21:e4:c0:e9:ce:b1:7d:14:
                    d5:97:9c:ab:8c:42:5f:b4:9c:9d:90:36:53:88:5c:
                    59:27:e6:d2:ab:c6:b9:2e:27:cf:0c:e3:5c:ec:3b:
                    0d:0f:fd:02:25:24:0b:06:a7:bf:48:1a:93:7e:8b:
                    ab:e3:23:81:d8:49:d4:18:eb:60:74:f4:20:79:bb:
                    4b:7e:84:df:38:e8:2e:11:c0:1f:d3:58:59:b8:5c:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0E:1F:64:DA:1D:13:AA:9A:41:04:8F:B3:FD:B6:00:42:1A:E0:ED
            X509v3 Authority Key Identifier:
                keyid:2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:c0:2c:fb:2c:1e:c7:38:3b:fb:53:c9:54:08:19:fb:e8:
         0c:88:cd:00:9b:af:d8:82:76:46:c1:df:b8:c6:1d:ee:23:de:
         f1:76:e7:ff:6e:54:3e:08:d6:df:a2:bf:0c:dc:d1:24:5f:f9:
         d7:ce:d2:17:65:69:4c:b6:a5:b0:98:22:63:8a:9d:ac:8a:af:
         b8:71:75:66:b2:28:ed:0a:94:b7:6c:86:b1:23:18:b1:b4:37:
         de:7d:8d:0b:ee:99:5a:18:59:45:01:58:46:cf:6e:f8:1b:89:
         30:75:eb:c9:2b:4e:64:78:30:d0:b5:4a:6b:f8:95:76:63:a3:
         76:97:3c:74:4f:2a:9b:a0:66:a6:ae:c6:32:b3:e5:e9:d4:5b:
         d1:91:d5:c6:82:f6:a9:f9:94:aa:3e:21:d7:f2:df:3d:b9:d5:
         eb:0f:20:1e:df:d8:8d:68:a3:91:05:65:29:f7:81:7d:0b:15:
         26:78:15:20:f7:10:36:19:ba:8d:81:d5:2d:33:5c:65:b6:b7:
         a9:7d:d0:13:9d:aa:39:a1:73:5a:2b:a1:48:73:a6:73:a9:59:
         ce:84:5d:e2:15:45:8a:78:c3:e7:87:e7:68:93:c2:53:ee:0e:
         41:21:d6:78:7a:ed:c6:1e:fe:18:81:91:1b:89:bb:b4:e8:b8:
         b0:50:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:57:41 2025 by rpki-client