Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
File:                     72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft (raw, json)
Hash identifier:          5EbpaCy6F0fHZH+NAy/FBveGFtLwGhYfvUQ2JtsQV/g=
Subject key identifier:   67:55:BE:FA:A9:C1:49:79:6A:D8:FA:F7:CD:C4:60:89:3A:49:36:0B
Authority key identifier: 72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
Certificate issuer:       /CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
Certificate serial:       2F2BBAD0F39954F62D9BAC925F9F67C363044462
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
Manifest number:          EC
Signing time:             Fri 31 Jan 2025 00:15:18 +0000
Manifest this update:     Fri 31 Jan 2025 00:10:18 +0000
Manifest next update:     Sat 01 Feb 2025 03:15:18 +0000
Files and hashes:         1: 3133382e3235352e35322e302f32342d3234203d3e20323730393430.roa (hash: hTH2gDob8gZqz/FbFAKdFZ9M5zjTrvZyIBHd2/PcI7k=)
                          2: 3133382e3235352e35332e302f32342d3234203d3e20323730393430.roa (hash: aszQ9xPEXDZBCYZXnt9G1Qfe6Tbd2OlU9peinchQ7c0=)
                          3: 323830343a373364343a3a2f33322d3332203d3e20323730393430.roa (hash: ApKz3Evcw3hdU7ZEMbgJt0MGAIt7kDaRe/8QJzUedeI=)
                          4: 72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl (hash: kN2M9omPXwbe2cyvi3mGYECpVpfrPpQl8KG3ghfMxjM=)
                          5: 3133382e3235352e35322e302f32332d3233203d3e20323730393430.roa (hash: rPU9hFRIBCg4MEk2qrGlYOHyH9b/MfLnPhHHv6LfsD4=)
                          6: 3133382e3235352e35342e302f32332d3234203d3e20323730393430.roa (hash: 6mZCTzLXQny0g1EJ5UtSUEgEtjBwRFgn37OPi7GepPM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2b:ba:d0:f3:99:54:f6:2d:9b:ac:92:5f:9f:67:c3:63:04:44:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
        Validity
            Not Before: Jan 31 00:10:18 2025 GMT
            Not After : Feb  1 03:15:18 2025 GMT
        Subject: CN=6755BEFAA9C149796AD8FAF7CDC460893A49360B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:33:1d:2e:b8:ad:df:e4:03:6f:e9:41:a3:
                    9e:74:fa:d8:56:47:ce:ec:55:8a:eb:a6:45:a7:41:
                    09:d6:77:d1:73:f5:18:35:77:fe:16:14:1a:9a:39:
                    5c:14:87:55:dd:9f:8c:d4:56:da:9d:ce:d0:f0:eb:
                    a9:52:4d:0a:7b:3c:79:de:51:9b:63:80:50:96:69:
                    13:d6:ec:e3:72:55:aa:d8:dd:7b:42:5d:af:6b:5a:
                    09:ef:6e:02:00:26:fe:dc:ab:6f:32:51:3f:ec:3b:
                    35:fe:45:71:98:f2:70:d8:e1:2a:c1:de:1f:56:5e:
                    42:0f:b9:6d:0a:32:c2:5c:bc:a7:e6:4f:93:d4:05:
                    e8:53:55:3b:0a:c5:6f:f0:6c:25:32:6e:cc:52:43:
                    3c:ec:8f:a7:14:10:2b:a9:6f:aa:7c:4d:18:3d:9d:
                    12:bb:47:5c:cd:fc:a2:42:fd:3c:8d:0b:5a:8c:37:
                    7f:d3:47:8f:08:4e:5e:fc:92:81:9a:ca:e1:76:33:
                    28:71:1a:33:28:06:99:48:8d:f4:68:a0:4a:e3:1f:
                    71:f4:6d:5e:98:cc:a4:ce:88:ce:1f:f9:63:85:9a:
                    0c:51:f8:89:e5:c9:1d:95:44:d2:7f:a6:f1:ca:56:
                    21:a3:56:e5:4b:fd:c2:b5:ce:59:8a:ec:af:fa:3c:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:55:BE:FA:A9:C1:49:79:6A:D8:FA:F7:CD:C4:60:89:3A:49:36:0B
            X509v3 Authority Key Identifier:
                keyid:72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:73:70:2e:db:33:b5:a3:ae:12:49:d9:b7:a5:bd:a2:69:a8:
         20:33:8b:87:5c:8e:90:01:75:e1:b7:46:bc:96:c6:69:4c:57:
         02:44:12:0f:98:d8:9c:53:c1:97:1f:c4:7a:64:23:4e:25:a1:
         ca:cd:fe:5a:8b:36:3d:21:92:01:55:3f:7f:7b:45:22:0d:0b:
         93:43:bd:e9:42:8f:a7:ea:27:64:08:5b:16:9d:cd:6d:de:e2:
         83:94:ba:af:64:b6:ef:1c:c6:23:4e:b8:43:9f:04:54:fd:11:
         dd:3f:25:d1:4f:69:fa:0f:5f:32:92:32:50:52:89:4e:47:30:
         1f:c9:cb:e6:e1:d6:8a:00:73:c1:3e:ee:71:93:bc:07:e3:2a:
         8c:ea:eb:e3:46:f8:e0:3b:3a:6e:dd:0d:9d:02:ba:c3:a5:56:
         e2:35:db:d0:f3:2f:db:49:76:c4:0d:e5:14:c0:74:43:d6:9d:
         d5:b6:7c:c3:f2:06:f5:90:06:25:c2:f1:fa:8e:6a:65:c8:85:
         67:e7:73:b7:ad:50:f7:5b:0d:ba:45:11:c5:bf:5b:d2:e5:a1:
         64:45:35:e6:71:8f:4b:b4:49:42:b0:3f:46:65:b2:ee:a9:d4:
         d1:43:4a:5f:78:e9:2c:06:0c:e0:06:c2:2e:67:f1:66:97:47:
         76:5b:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:18 2025 by rpki-client