Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft
File:                     60E9E1814AC20560AE7B9A36F212037445A23C52.mft (raw, json)
Hash identifier:          XGjca+dsjgYxI4VPmLq1So/2Zu15Gdtz/pinJInyL6c=
Subject key identifier:   30:FB:C5:60:FC:22:26:05:6F:BF:B8:92:FC:6A:F0:AF:78:B3:63:4B
Authority key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52
Certificate issuer:       /CN=60E9E1814AC20560AE7B9A36F212037445A23C52
Certificate serial:       72FDAE7B45A774135BF4675D10DED8C6BE86BCA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft
Manifest number:          3D
Signing time:             Fri 31 Jan 2025 15:39:44 +0000
Manifest this update:     Fri 31 Jan 2025 15:34:44 +0000
Manifest next update:     Sat 01 Feb 2025 17:52:44 +0000
Files and hashes:         1: 323830343a326436303a3a2f33322d313238203d3e20323635323738.roa (hash: wVDpLquXhLYmOQva4up0lIJzNdpjxE6kRBQ6x/Clj9g=)
                          2: 60E9E1814AC20560AE7B9A36F212037445A23C52.crl (hash: t+Hb8i0WF6x0AdUcAO2351URcxSyuBpprYZbFcMqInY=)
                          3: 3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa (hash: zenQan1c0HymGfdGMKm8zMh3KFHSX/5y3l4etpdtNvQ=)
                          4: 3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa (hash: sJml9tW4GbM6Ehc1Y8/P0KgcLa+/lQ2YsiRGz745dno=)
                          5: 3136382e39302e35362e302f32322d3332203d3e20323635323738.roa (hash: PQIqoT+StSMO2wUYfHgUhCq1IiGJJWgkv6JT4LN3Qqc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fd:ae:7b:45:a7:74:13:5b:f4:67:5d:10:de:d8:c6:be:86:bc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E9E1814AC20560AE7B9A36F212037445A23C52
        Validity
            Not Before: Jan 31 15:34:44 2025 GMT
            Not After : Feb  1 17:52:44 2025 GMT
        Subject: CN=30FBC560FC2226056FBFB892FC6AF0AF78B3634B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:b1:28:a7:63:b7:3c:c8:b8:42:e0:9e:80:
                    91:f1:7a:54:a4:54:9c:32:5f:d2:40:30:0b:7b:f7:
                    6e:9f:f1:4a:e7:db:fe:c5:95:8d:76:f5:5d:16:0b:
                    d0:bf:4e:e2:e6:73:b7:6f:c8:6d:42:0a:da:4f:18:
                    fd:1d:67:e5:a9:36:33:f5:aa:b7:bb:bc:f4:48:2e:
                    da:f7:9b:66:8f:96:17:ec:09:32:49:af:b2:33:94:
                    64:79:7c:70:59:5a:50:60:34:cf:52:84:6b:2f:56:
                    a0:76:ed:4e:c1:f5:38:7f:85:03:e9:55:83:f2:68:
                    b2:13:e7:a3:1f:4e:72:d3:f4:bc:c2:e5:43:43:62:
                    77:7f:61:e2:a6:53:bc:21:f9:4c:9b:92:ae:b0:74:
                    9c:11:af:12:ff:b5:cf:c7:4b:10:1e:3e:8f:8a:53:
                    47:9d:ca:ea:d9:3e:46:9f:2f:dc:ac:6b:fa:ac:46:
                    60:a9:33:c2:3c:b8:c7:57:6e:85:e2:46:66:97:a0:
                    15:3a:22:42:67:ce:c3:40:ca:c5:2b:1e:c3:61:4d:
                    3f:be:2f:d2:7d:2f:cc:0e:82:08:ca:78:65:38:bd:
                    17:94:31:76:2d:3a:a6:8c:bf:b3:c3:33:f2:67:38:
                    df:98:72:10:be:22:2f:20:83:6b:4e:b9:a6:1c:52:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FB:C5:60:FC:22:26:05:6F:BF:B8:92:FC:6A:F0:AF:78:B3:63:4B
            X509v3 Authority Key Identifier:
                keyid:60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:89:54:e2:de:77:bf:c5:66:27:ae:da:c8:0e:b4:d7:ab:10:
         70:e8:74:19:95:ca:31:a4:30:cb:52:c6:9b:c2:83:b9:f8:8f:
         4b:3d:52:13:0f:bf:43:02:37:d7:3d:3f:4b:c7:2b:cc:62:a1:
         ab:c6:81:c1:97:b3:ed:b0:50:16:10:6e:ba:82:93:fb:45:83:
         88:88:b5:65:fa:9e:43:ef:eb:b5:ad:d4:35:67:bc:96:72:a3:
         ee:38:f5:f4:05:4d:01:34:8d:79:79:65:db:65:21:6a:82:6b:
         80:f1:b8:bc:cb:6d:0c:39:e6:e4:f3:e0:a3:f1:34:cb:6d:b8:
         62:98:a2:44:1b:7a:56:6a:4a:dd:94:a6:5c:76:e8:84:7b:5c:
         c3:bf:dd:4f:1c:43:fc:b6:ab:c2:df:ca:69:51:fd:2e:8d:36:
         fc:36:cb:a2:f9:87:68:ae:6f:8b:d2:b1:d2:f0:c3:6e:03:56:
         69:e6:fa:10:88:c5:0d:30:f2:04:de:43:cb:48:4f:03:d0:d3:
         0e:78:73:bb:60:29:59:3c:1c:a6:82:23:c1:41:95:d8:c3:fe:
         e5:0f:14:3a:44:7d:eb:32:ed:8d:cc:68:dd:9d:08:f4:c4:cc:
         70:a1:3d:82:e9:75:ff:f8:8b:f0:bb:ee:2d:12:6c:1a:69:55:
         8a:fd:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:13 2025 by rpki-client