Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
File:                     08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft (raw, json)
Hash identifier:          /8yuh7R8gtDeEMklPiSZPKIphFDFREghYgnt2ne92AU=
Subject key identifier:   7E:11:6E:C5:1A:5A:F0:37:B4:30:F8:B7:4F:52:39:C5:1F:40:42:74
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       03AC560EC37FAC40A312F97845C816F411483303
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
Manifest number:          E3
Signing time:             Fri 31 Jan 2025 13:16:27 +0000
Manifest this update:     Fri 31 Jan 2025 13:11:27 +0000
Manifest next update:     Sat 01 Feb 2025 13:39:27 +0000
Files and hashes:         1: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (hash: l0YfA8W4HJzDeblNvcYfJxi2qQ3myY9q9a7WKtIUKSI=)
                          2: 323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (hash: kRz7afkv1IyAanpOIg2wrOFhUj0g99+6EzKNBOrop7Y=)
                          3: 3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (hash: 3bxYfN8+RWfMagKX4C0gih6QrpSpCz4LWePYD1fQXlg=)
                          4: 08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl (hash: XArY0tj6Jmvk0BopjFklC0k2gZiyyINvGL9eqan9TQs=)
                          5: 3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (hash: Hr9Rmw/4WJSxmHCw4yqdOtapmIw5xc0wse7DjCyjOEI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:56:0e:c3:7f:ac:40:a3:12:f9:78:45:c8:16:f4:11:48:33:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Jan 31 13:11:27 2025 GMT
            Not After : Feb  1 13:39:27 2025 GMT
        Subject: CN=7E116EC51A5AF037B430F8B74F5239C51F404274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:6b:08:5f:9b:ea:10:d1:00:bd:87:fe:fb:
                    14:d7:cf:69:c0:f6:85:5c:d6:82:94:9c:4a:e0:b6:
                    4d:db:83:fb:ab:aa:a5:0d:72:05:8e:c3:30:6f:5d:
                    fe:d3:7f:ad:1a:87:a9:7e:da:ad:34:48:b9:9d:2b:
                    ec:cc:32:ab:97:11:0a:e3:0c:43:d1:2f:6d:d7:11:
                    96:de:38:d2:12:24:dc:16:cf:1b:7c:d0:42:dd:13:
                    af:0f:b9:3e:92:1f:0f:f9:59:bd:3e:46:22:ed:b5:
                    f2:f7:20:12:20:b6:4f:7e:97:c3:ad:58:aa:a9:fb:
                    7d:d8:2f:ad:1b:27:17:b1:b1:10:98:55:56:62:6d:
                    28:f4:e6:f4:0c:99:05:90:b9:d3:b0:22:7b:d8:53:
                    6c:5f:cb:fd:f5:69:d8:ba:7b:4f:93:2c:31:fc:b5:
                    8a:87:85:cd:2f:c2:7b:53:e2:0c:3f:52:a5:49:e1:
                    20:b7:a1:7e:72:31:03:ab:7b:ce:0a:1c:b3:65:da:
                    4d:e4:b3:53:1d:ba:e9:bb:eb:77:36:69:87:ef:a1:
                    77:1d:61:ca:79:fd:16:6e:d4:33:e4:d7:89:b5:d4:
                    65:8d:e0:de:b0:33:98:47:0f:79:98:1a:33:99:25:
                    b9:f9:15:22:c7:b9:7d:73:46:d9:31:2b:98:6b:32:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:11:6E:C5:1A:5A:F0:37:B4:30:F8:B7:4F:52:39:C5:1F:40:42:74
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b8:8a:87:10:af:e8:f3:33:8e:a7:d6:0c:55:fa:13:ee:4d:
         7b:94:ac:fc:a9:5e:53:91:43:a7:d1:d0:18:31:e4:6c:77:cc:
         5f:a0:3a:58:70:47:78:cd:c0:79:e3:31:c1:e5:bd:f5:2a:49:
         25:9a:9c:d2:68:c2:4f:c3:94:ac:59:ef:9f:c1:b2:74:ac:94:
         82:6a:b0:5d:5d:ed:02:74:c0:5b:e3:e7:33:b4:ac:2f:76:c3:
         e0:9a:da:87:cf:58:23:fe:9a:09:f6:aa:32:6d:25:bf:6a:bd:
         eb:3c:e3:fd:46:cd:44:03:0e:2b:0b:3f:ff:1d:0a:26:66:96:
         e2:9d:46:35:47:4f:7d:93:30:e4:50:ed:9d:dc:cc:e7:34:27:
         6a:50:f3:c2:df:83:07:22:f2:8f:fa:38:d6:a0:21:ef:1e:f8:
         b7:2c:82:f4:23:cb:c7:7c:39:4a:0e:be:38:f3:00:5d:c6:a4:
         60:9d:7f:e3:6d:0a:a9:44:1c:bc:1a:44:b6:d4:96:d7:e4:49:
         91:24:aa:21:ff:43:d8:3d:ad:d1:8f:79:8f:70:53:31:ce:54:
         6b:12:b3:04:f7:9d:07:3c:06:86:a8:e3:ed:44:27:9d:e1:85:
         87:9e:15:23:4f:5b:ef:5e:9c:81:7f:da:02:d5:be:8d:af:cf:
         9a:b4:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:30 2025 by rpki-client