Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft
File:                     7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft (raw, json)
Hash identifier:          H+jJIvwIwLotavSfzO0AsaFCEdQHy4LADD++D78jJKI=
Subject key identifier:   5E:A5:00:06:CD:6D:0A:41:94:0C:EB:0C:21:A5:26:30:F9:5C:A2:6E
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Certificate issuer:       /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial:       5FC699324717B06752D54237DDF6113A5DB0E1E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft
Manifest number:          0126
Signing time:             Fri 31 Jan 2025 14:31:56 +0000
Manifest this update:     Fri 31 Jan 2025 14:26:56 +0000
Manifest next update:     Sat 01 Feb 2025 16:58:56 +0000
Files and hashes:         1: 323830343a336130383a3a2f33322d313238203d3e20323636303636.roa (hash: 4F8TinxVyVFDuPU4IQzSz2GJo6+VjhOormM5JCfMMaw=)
                          2: 34352e342e3132342e302f32322d3332203d3e20323636303636.roa (hash: IhawLIRVhDNEAhoCxQDwyMRFYGWjRGmu0+TgpJfjpm0=)
                          3: 7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl (hash: FoAC+6o9u9JJA4cwBXjaaRLvvOzfzEQS6lTUeeocfX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c6:99:32:47:17:b0:67:52:d5:42:37:dd:f6:11:3a:5d:b0:e1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
        Validity
            Not Before: Jan 31 14:26:56 2025 GMT
            Not After : Feb  1 16:58:56 2025 GMT
        Subject: CN=5EA50006CD6D0A41940CEB0C21A52630F95CA26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:dd:70:7f:b6:30:de:0a:31:3a:01:b9:c3:
                    85:a4:70:ec:8d:09:f0:83:91:d8:1f:cc:c7:14:47:
                    c9:fa:73:17:ad:f5:19:2f:41:c7:80:c0:a6:cf:9d:
                    f6:35:17:49:7b:d9:2d:4c:95:81:df:61:34:c0:1b:
                    05:bd:11:ee:67:8a:5a:fc:59:c1:50:39:e9:eb:61:
                    84:b5:20:0b:d3:5a:da:5c:0c:29:4a:7d:8b:a2:86:
                    22:66:fc:75:08:c8:b8:b9:63:a3:32:26:45:ff:16:
                    e2:18:89:0e:58:c1:5e:50:d2:fc:54:73:f6:bd:dd:
                    69:1d:e5:62:7c:e6:38:01:b3:7e:6f:12:a2:55:f6:
                    32:6e:83:c4:ff:ea:0d:60:2c:dd:9b:49:4d:5e:1d:
                    09:8e:88:97:3c:68:99:5b:58:72:c0:53:cf:8c:06:
                    62:88:c9:d6:10:82:ad:38:4c:9c:79:57:43:7e:da:
                    00:3f:3f:c6:15:4e:65:81:b9:9f:3a:ec:bd:e0:47:
                    72:14:17:f9:96:27:89:68:75:bf:52:69:f0:83:54:
                    84:78:30:bd:15:18:f6:83:95:48:5b:03:0e:e8:c2:
                    ab:d4:07:ba:53:e5:8c:e8:f1:97:ca:ff:96:1f:68:
                    25:a0:78:bb:fc:0d:4e:42:96:12:43:3e:87:aa:9d:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A5:00:06:CD:6D:0A:41:94:0C:EB:0C:21:A5:26:30:F9:5C:A2:6E
            X509v3 Authority Key Identifier:
                keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:35:6f:07:32:ab:24:d8:3b:2a:fb:59:23:be:c9:db:bf:
         ed:e7:84:86:90:25:f2:55:4e:01:74:82:16:a4:3f:fe:4a:98:
         87:55:aa:82:af:a6:20:68:4f:1c:af:49:59:08:f1:e1:bc:b8:
         12:62:fd:86:f1:db:74:fa:93:4a:8c:43:5f:36:d5:83:a1:21:
         36:98:2b:47:a8:fe:e5:33:4c:0c:dc:6a:ea:35:44:61:26:06:
         72:00:8e:8c:de:73:f8:6d:6a:d4:fd:57:1b:33:78:ae:31:69:
         a1:7d:99:fb:a7:0a:a2:58:5f:d0:32:4a:43:78:98:a8:8c:39:
         88:97:1f:8b:81:df:21:4d:24:a0:97:b8:68:d5:15:3a:82:7f:
         7a:bf:0e:38:9f:b8:b0:ca:00:53:83:1e:f8:b7:48:3f:03:e0:
         2f:05:58:53:59:7f:ed:88:79:8d:e7:e6:00:4d:ff:3a:bd:88:
         6e:a6:28:0c:77:43:1e:96:70:5e:11:fb:da:f0:db:96:30:77:
         48:8d:a0:12:03:ba:f2:a7:eb:86:ad:25:e1:d4:9c:d4:eb:db:
         3a:88:37:7b:c6:e1:45:81:56:f3:47:05:a6:c1:f2:cf:1e:b5:
         99:dd:28:72:e2:02:b7:2d:f2:f8:da:4a:f0:2c:c6:03:13:ae:
         6f:6a:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:04 2025 by rpki-client