Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.mft
File:                     4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.mft (raw, json)
Hash identifier:          1AN+ldvh47qL4RieGgpqjcPNyW+1I0OipnAu6k+jPWg=
Subject key identifier:   BB:F4:69:C0:B8:E8:9D:9B:B6:71:63:43:27:91:7E:BF:C2:CF:CF:CE
Authority key identifier: 4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43
Certificate issuer:       /CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
Certificate serial:       7B32B51563E83D96D313C5B18C138D43BC5ED963
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.mft
Manifest number:          22
Signing time:             Fri 31 Jan 2025 06:03:08 +0000
Manifest this update:     Fri 31 Jan 2025 05:58:08 +0000
Manifest next update:     Sat 01 Feb 2025 08:04:08 +0000
Files and hashes:         1: 34352e3138322e36312e302f32342d3234203d3e20323639323230.roa (hash: GdKHhwPCtCj/EruBiyS+aWBB4G6TDHThuwSxyPTMQ5s=)
                          2: 4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.crl (hash: a9u3S5ATBERqmAV/1BftwFtBOyK9vv8sWQtw6jWlBfw=)
                          3: 323830343a363133343a3a2f33322d3332203d3e20323639323230.roa (hash: 5F/6fFl+A6+5m4Xus7qXJEB8Uk5Y07+6uqEu0zmdSMg=)
                          4: 34352e3138322e36322e302f32342d3234203d3e20323639323230.roa (hash: OueBDmPAaC9WvxmiTu9LiiAgbzmF7uH3b7Em2PTEZ4o=)
                          5: 34352e3138322e36302e302f32342d3234203d3e20323639323230.roa (hash: Smp5RjFC+aOrPRfwBDvr4yYySvnazFHsl6c92ZLy014=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:32:b5:15:63:e8:3d:96:d3:13:c5:b1:8c:13:8d:43:bc:5e:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FCF39CBA2BF707C1033E8DC521C56B19D3FC243
        Validity
            Not Before: Jan 31 05:58:08 2025 GMT
            Not After : Feb  1 08:04:08 2025 GMT
        Subject: CN=BBF469C0B8E89D9BB671634327917EBFC2CFCFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:a8:e3:68:59:a0:8e:b6:98:7b:15:05:08:
                    8b:60:fb:0a:66:3b:86:aa:6f:eb:d0:ec:c5:fd:f5:
                    eb:c7:be:dd:d9:9f:63:61:f9:e6:36:ed:c0:46:d5:
                    09:31:c3:6e:3f:41:da:60:61:fb:05:60:86:1d:a4:
                    88:6b:1e:3d:72:5d:20:fc:2a:ef:8d:77:0e:42:ba:
                    68:d9:27:7f:f3:da:23:ce:c4:6a:4d:45:e0:e6:e7:
                    e3:b5:2d:67:8b:0f:c2:a0:5c:2c:42:ef:33:84:2c:
                    64:e9:12:bf:f3:90:56:b5:dd:4a:d0:35:81:e7:75:
                    1a:b9:14:68:cc:eb:7b:b9:00:df:26:8a:c7:ba:b5:
                    3c:c6:65:74:0e:45:9e:01:66:b5:e8:9c:a1:a9:02:
                    16:bb:3b:bb:b5:ea:d2:7f:02:a2:51:28:69:5c:9a:
                    e0:aa:07:c5:c3:44:52:3e:96:e8:ad:24:cd:1b:6e:
                    9b:2a:ed:7f:29:73:db:d2:d9:0e:d7:47:6d:51:b4:
                    a9:fb:2d:e9:3a:38:d4:07:87:44:5e:6a:c7:14:43:
                    ce:f2:72:02:a1:68:b9:ef:fb:5b:4b:d0:f0:73:89:
                    44:b6:aa:00:c2:bf:bd:f9:78:e8:0b:ba:58:2f:e4:
                    a2:29:40:77:b8:65:c2:5d:20:41:51:b9:ed:c1:94:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F4:69:C0:B8:E8:9D:9B:B6:71:63:43:27:91:7E:BF:C2:CF:CF:CE
            X509v3 Authority Key Identifier:
                keyid:4F:CF:39:CB:A2:BF:70:7C:10:33:E8:DC:52:1C:56:B1:9D:3F:C2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/4FCF39CBA2BF707C1033E8DC521C56B19D3FC243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:05:a0:54:18:f5:dc:0c:bc:f8:ee:9e:7e:77:c1:41:10:
         e5:47:af:a2:a9:17:8d:0c:15:d7:c2:82:d3:db:33:70:47:6b:
         c2:97:3e:b7:ef:e2:95:13:b6:5d:9c:19:4a:2f:a6:45:4e:b7:
         14:72:54:42:19:df:89:5b:2e:4b:b7:c3:59:60:fa:e4:79:86:
         a1:9c:ed:e7:dc:be:2c:cb:fe:2f:ba:20:3b:64:bd:8e:4f:be:
         2e:53:19:a1:7b:f8:47:d1:da:2a:43:e7:02:4f:e0:35:25:1c:
         82:cf:8c:a8:48:73:86:4e:10:3e:a3:bf:5f:10:a6:4e:db:2f:
         ce:9b:29:8c:7d:60:d5:5c:5d:e3:32:aa:67:1e:7e:ae:de:35:
         65:17:47:a0:5a:24:82:f3:50:38:c5:1c:49:2b:b4:e8:bc:b8:
         3f:18:6e:b2:20:e1:7a:e2:43:9d:34:0b:ea:a4:4d:94:17:86:
         6c:5f:03:d6:ae:2e:c5:d4:14:e3:4f:d2:4a:99:82:83:48:0f:
         5c:10:7f:7a:74:31:92:30:5a:e3:ce:06:f0:0d:39:76:55:a0:
         06:c7:7b:a0:62:80:44:69:1e:17:cc:14:e4:12:20:29:08:9d:
         76:62:0e:8a:a8:e8:07:37:7f:89:cb:f9:ad:45:ea:42:3c:32:
         d1:ca:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:56 2025 by rpki-client