Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
File:                     F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft (raw, json)
Hash identifier:          wM+0xzpDUnUi0ATxNu/xDI8iSLX/279ERtj2FjAuYeg=
Subject key identifier:   DF:63:56:55:A7:F7:73:45:65:A6:23:6B:F3:1E:29:CA:72:4A:8F:31
Authority key identifier: F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29
Certificate issuer:       /CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
Certificate serial:       416D47CA53F073DBFC7647824A3F31A15B98FBCF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
Manifest number:          77
Signing time:             Fri 31 Jan 2025 04:29:20 +0000
Manifest this update:     Fri 31 Jan 2025 04:24:20 +0000
Manifest next update:     Sat 01 Feb 2025 08:14:20 +0000
Files and hashes:         1: F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl (hash: a1dr6hHm5xL8o0crE1aXqJS2qECYaqK/9s/SNcxYsfs=)
                          2: 323830343a363436343a3a2f33322d3438203d3e20323639343235.roa (hash: 89/jOPHsLY2gsEjmXvUrzzwNqHwgFL0Iyq8uBdggugU=)
                          3: 34352e3138362e33322e302f32322d3234203d3e20323639343235.roa (hash: /btWbrEOg8bUTGkqV+fAzTAyxJ71wLp0uJTYU/IArBI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6d:47:ca:53:f0:73:db:fc:76:47:82:4a:3f:31:a1:5b:98:fb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
        Validity
            Not Before: Jan 31 04:24:20 2025 GMT
            Not After : Feb  1 08:14:20 2025 GMT
        Subject: CN=DF635655A7F7734565A6236BF31E29CA724A8F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:bb:c4:c6:93:41:6b:0f:fd:19:0f:d9:5b:
                    23:4e:a5:7d:d3:c2:0e:ef:b2:9d:8d:d6:bc:7d:38:
                    c1:6f:dc:51:79:71:1b:f9:e2:25:93:d8:fe:cd:be:
                    34:f5:fd:b4:8d:4e:86:00:04:78:86:a8:fb:9a:d3:
                    f0:5c:19:52:51:91:8b:68:0f:e6:46:4e:50:00:00:
                    95:70:6a:57:e5:ae:cf:f0:c4:55:89:23:fa:ef:9d:
                    cf:18:65:45:4b:1b:e1:59:00:b5:9e:01:fd:3f:ec:
                    5b:de:2b:02:84:50:4e:d5:80:5a:56:29:dc:ab:b6:
                    4b:93:89:70:ba:98:00:70:2d:71:79:cc:04:6e:60:
                    83:c6:b6:1c:1c:39:e6:bb:46:b9:0b:7c:d3:c1:06:
                    f0:47:82:de:05:e3:99:d6:d3:0d:18:5f:35:c7:ec:
                    63:ab:e0:d6:00:bd:c6:c1:5b:34:5c:f0:1a:80:3d:
                    ce:0b:67:4a:16:0e:df:5c:00:07:d1:66:31:b0:18:
                    0f:19:d5:9c:16:e8:4f:72:4d:19:7c:05:1f:d2:d2:
                    35:f6:02:ff:d6:6f:de:d2:26:aa:34:65:d1:0b:4b:
                    19:30:7a:4e:c7:df:9f:04:e9:9b:66:99:e5:45:5a:
                    cd:33:e2:1a:51:2a:54:22:66:e4:79:0a:b1:26:8e:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:63:56:55:A7:F7:73:45:65:A6:23:6B:F3:1E:29:CA:72:4A:8F:31
            X509v3 Authority Key Identifier:
                keyid:F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:fa:1b:cd:eb:14:b4:1f:8a:85:4c:00:0d:f2:a5:4a:f9:
         89:88:59:e3:6c:1d:db:20:d3:9f:7a:fb:fd:c6:d9:27:68:f6:
         9e:24:bd:eb:61:ce:31:2f:d7:f7:31:d8:fc:3e:57:17:b3:79:
         d9:a1:81:5c:ba:5b:39:09:61:4b:e6:c2:14:e9:6e:01:98:7c:
         1c:5e:74:54:3b:d4:2c:8c:de:f9:7f:80:da:65:e4:79:00:2f:
         58:de:b8:6e:b7:91:f7:53:c6:7b:b6:53:bb:cd:9b:fd:cb:4a:
         14:37:64:c6:de:cf:54:db:90:03:88:ba:5e:48:20:f3:f3:a3:
         fc:12:58:bb:5d:cd:63:47:c3:24:f7:fd:33:84:ac:5c:dd:e6:
         7e:6c:6e:20:d4:57:0c:30:73:eb:a4:7e:76:9a:e3:01:42:a0:
         1b:ef:c1:b3:fd:29:28:54:36:8a:99:f6:99:8b:85:c5:87:7b:
         45:8f:6c:79:f8:e3:ba:a8:28:45:58:92:6a:76:1b:95:90:fa:
         3a:34:20:97:8b:6b:fb:2e:4f:79:3a:43:fa:e1:9a:d1:b7:45:
         35:ce:fb:41:e7:98:50:04:fc:a6:c1:57:92:2d:f1:94:31:7e:
         64:9b:44:70:89:66:03:e3:4d:fd:96:75:b7:5e:92:98:30:50:
         44:cb:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:32 2025 by rpki-client