Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft
File:                     0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft (raw, json)
Hash identifier:          mkMMMbVZhPqj2wrv7MFS9VVGZ4IhXXItfveLq0DicU0=
Subject key identifier:   2D:17:35:C5:0C:E6:DF:C6:C7:E8:8D:3B:C3:E1:BF:6B:BE:47:12:68
Authority key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84
Certificate issuer:       /CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
Certificate serial:       7573F3174448C729435D490485AC3902977D616E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft
Manifest number:          018A
Signing time:             Fri 31 Jan 2025 11:55:53 +0000
Manifest this update:     Fri 31 Jan 2025 11:50:53 +0000
Manifest next update:     Sat 01 Feb 2025 12:48:53 +0000
Files and hashes:         1: 3137392e34392e3135322e302f32322d3332203d3e20323634343533.roa (hash: 6zWBxGgnR8yeZa3HrQNd3oimHrg81pFPY8BbXU6axQQ=)
                          2: 0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl (hash: MHkgJh9R8H6HQxOxRGdQDzZdZDrYJ9VlUbYIKg1BuG4=)
                          3: 3133322e3235352e35362e302f32322d3234203d3e20323634343533.roa (hash: 6/JCDAi5gsaXd8fGTxZsRTwC8tg4wa/SAmQMgqXREWU=)
                          4: 323830343a316565383a3a2f33322d3438203d3e20323634343533.roa (hash: WvssJdW/R1g9PIokArYgAZV+0Nla5ZZ1DVPbR0tTpPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:73:f3:17:44:48:c7:29:43:5d:49:04:85:ac:39:02:97:7d:61:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
        Validity
            Not Before: Jan 31 11:50:53 2025 GMT
            Not After : Feb  1 12:48:53 2025 GMT
        Subject: CN=2D1735C50CE6DFC6C7E88D3BC3E1BF6BBE471268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:c8:ee:6c:e0:0c:e1:b4:3a:af:95:eb:e1:
                    a3:dd:8b:9b:9a:f4:dc:5b:aa:4e:a5:ab:3e:d2:0e:
                    43:ee:db:d8:cb:72:d9:4e:50:d7:9f:03:07:86:52:
                    13:1d:08:40:d4:6b:c3:d6:90:13:4d:36:8e:c9:65:
                    c4:fc:2a:89:5e:43:39:bf:75:90:d2:84:a9:5f:32:
                    c6:2e:d5:08:c7:56:51:0a:97:49:70:51:31:60:81:
                    3e:cc:f4:72:4c:ae:c1:8f:33:2a:6f:99:19:68:a2:
                    89:38:79:23:97:05:98:dd:a4:a9:7e:54:01:52:97:
                    fa:35:61:95:58:78:3f:93:ec:d3:34:5f:15:07:fb:
                    73:49:df:2c:2b:2f:ad:b2:f1:f9:6c:4a:28:b4:e1:
                    76:1f:b7:2a:5e:bc:e6:56:79:d0:da:a9:25:dd:58:
                    bf:7e:af:a4:7a:1e:9c:b8:24:89:0a:a1:4f:bb:ba:
                    50:bc:de:f6:f1:a9:5b:c5:3e:a9:3a:6f:62:1f:11:
                    08:05:6c:97:13:8d:12:06:00:f2:21:d2:f0:f9:e4:
                    46:3f:21:74:34:be:d9:9b:90:f8:76:42:e4:be:2d:
                    cb:e1:6a:43:ea:69:35:51:16:65:dd:00:ca:00:08:
                    16:99:b8:1c:94:1a:9d:f9:22:1a:32:9b:4c:67:74:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:35:C5:0C:E6:DF:C6:C7:E8:8D:3B:C3:E1:BF:6B:BE:47:12:68
            X509v3 Authority Key Identifier:
                keyid:0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:36:8a:f2:95:0c:ba:0f:9e:a3:33:8f:c2:42:f9:e1:85:
         f5:55:08:c8:2c:60:75:9b:34:71:06:c8:28:0a:85:8e:cb:9f:
         50:9d:dc:2a:90:69:ea:b3:91:1c:9d:9f:9d:f1:b6:8c:0d:43:
         63:c4:82:88:76:61:13:90:95:ed:fd:8f:7a:a4:a5:c7:c5:fd:
         32:f2:03:c1:7d:22:5b:a7:dd:17:ae:72:8c:e2:ad:fe:9e:df:
         1d:40:9f:1b:44:f7:18:c7:b4:7d:34:2f:88:ac:e8:d6:11:cb:
         bb:0d:b8:4b:3a:6e:e3:12:1f:b9:29:ea:6d:c7:71:ed:15:9b:
         24:e4:ea:aa:90:1c:ae:d7:68:01:f0:77:46:3f:08:44:66:a3:
         d9:df:8d:e6:88:75:27:df:ba:38:f0:a1:9c:5c:48:63:b1:f9:
         49:cb:cc:86:ea:c1:21:87:54:26:2e:bf:ac:51:bb:50:57:8f:
         61:20:7b:f1:05:94:ea:21:6b:df:e8:5c:d4:c3:63:3b:e0:b7:
         58:47:96:02:86:20:4e:d4:c7:2c:de:e1:05:82:f6:83:ec:f9:
         fb:cc:42:86:09:92:a6:bb:d6:4a:84:2c:e3:3b:7e:72:06:87:
         e8:02:26:22:70:d0:ce:71:20:d2:c0:9f:9b:71:9f:dd:f0:63:
         51:77:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:18 2025 by rpki-client