Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
File:                     D1FFDF44055E16082D529730642377D751467152.mft (raw, json)
Hash identifier:          GH9Qe6Znpqe63FNZS6eXjiE/BBuzf4wqbdGxs5ZZgAU=
Subject key identifier:   AC:77:26:65:87:C7:6E:E9:C5:82:71:A8:81:F0:9D:EC:1F:D6:E1:94
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Certificate issuer:       /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial:       2D1781D061CE4CA7DFD94251058C0BF70259603F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
Manifest number:          3D
Signing time:             Fri 31 Jan 2025 13:04:11 +0000
Manifest this update:     Fri 31 Jan 2025 12:59:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:59:11 +0000
Files and hashes:         1: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: 8CQrF34soBwXu1YRdamnxb0gJeOCBly8lfmNOKaeNCU=)
                          2: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: +J/bMMv2VTnAcenJxSzOTld7FO4bilmUXcdCfBnX9eY=)
                          3: D1FFDF44055E16082D529730642377D751467152.crl (hash: 7Iv+eNp9bCR1igB1w6XWcCkj1mh1K1oyEp41w+xdRao=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:17:81:d0:61:ce:4c:a7:df:d9:42:51:05:8c:0b:f7:02:59:60:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFDF44055E16082D529730642377D751467152
        Validity
            Not Before: Jan 31 12:59:11 2025 GMT
            Not After : Feb  1 14:59:11 2025 GMT
        Subject: CN=AC77266587C76EE9C58271A881F09DEC1FD6E194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:4e:5f:de:dc:25:ea:d0:25:e2:18:b0:70:
                    73:e9:42:c9:df:0d:d8:df:80:b5:40:81:7c:55:23:
                    55:75:ca:92:31:7f:29:6e:6b:42:1c:3f:ca:41:56:
                    60:df:4b:93:06:59:2c:a5:2f:2a:01:3d:ab:30:80:
                    3f:9d:35:61:38:43:d7:56:7b:12:64:2f:de:2e:19:
                    b0:c2:22:83:6b:dc:0e:5d:71:3e:14:87:80:bd:34:
                    a0:2c:e4:f6:83:be:41:d7:ec:83:3a:1e:81:a0:ff:
                    c7:90:14:5f:3d:5d:63:a2:6c:2d:8f:37:e4:08:25:
                    78:3d:6a:81:5c:60:87:90:73:1d:81:34:2a:ab:86:
                    f3:59:98:be:ff:cb:96:82:c6:a9:ee:17:c8:1d:9f:
                    79:f3:48:b2:c6:54:c9:09:2e:91:2b:e0:8e:23:8c:
                    99:ab:26:45:15:d0:45:37:fb:7a:55:00:15:75:30:
                    4b:93:97:b5:88:59:79:e0:83:30:9b:88:c7:57:ab:
                    5c:20:2b:45:c1:b2:f0:e2:f1:5b:76:00:b7:01:e3:
                    79:2c:2f:4e:20:3f:ee:78:80:4e:b9:d9:60:77:87:
                    55:00:6e:b2:f3:9b:09:7a:e6:cb:98:43:d1:cd:dd:
                    a0:8b:b8:f5:f5:f7:64:3b:38:aa:10:a8:5c:30:1f:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:77:26:65:87:C7:6E:E9:C5:82:71:A8:81:F0:9D:EC:1F:D6:E1:94
            X509v3 Authority Key Identifier:
                keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:38:ed:e6:db:da:8d:2c:60:25:a9:0b:ca:5c:85:09:2b:60:
         d8:74:f3:7b:3b:56:6d:6a:10:b8:40:be:96:d7:4f:14:8e:56:
         cc:72:a1:e0:71:81:11:e5:80:cc:cb:76:23:9c:b9:a9:7f:e5:
         0d:fc:4b:67:77:e4:8d:ac:22:75:3b:78:de:59:a0:0b:cb:8d:
         19:b9:f0:a7:9d:b3:5c:89:fc:9e:8b:92:80:9f:af:e1:83:0e:
         a0:2b:45:c3:bd:d9:78:e3:bd:5c:e9:f3:af:06:8b:57:57:28:
         62:2d:87:af:cb:c4:8a:84:91:3c:66:9c:c5:27:fa:59:40:c5:
         94:f3:bc:6f:2e:38:e0:f4:5a:2a:82:d1:73:73:e3:4c:df:0e:
         2a:9b:5f:8f:42:db:3b:28:39:30:ac:89:6b:14:cf:50:bd:5f:
         88:84:ed:8e:0b:1f:99:c6:e3:fd:c3:77:fc:f6:15:06:b2:a0:
         7f:5f:7e:55:8d:ff:fb:f4:77:e7:8b:0b:b0:9a:81:2d:f6:45:
         49:83:cd:ca:ac:c1:39:0f:5a:a2:13:41:31:31:c8:19:b8:56:
         e0:73:b0:62:2a:06:76:be:a2:fb:22:82:21:fa:bc:a1:4b:5a:
         6f:c5:4a:41:68:a9:19:3e:a8:47:a2:89:2b:1e:2b:ee:48:c9:
         07:2d:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:15:37 2025 by rpki-client