Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
File:                     21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json)
Hash identifier:          ToqWOugO+nVNYGxjsPwSLNfBYg9xRFGkM8mA/5HR5pU=
Subject key identifier:   E0:F3:4F:32:61:B2:C9:1D:83:84:75:C5:57:C0:C3:6F:B7:7C:30:C7
Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78
Certificate issuer:       /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
Certificate serial:       0FDF4716BFA41DE2BF974F6555940209B8FBD660
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
Manifest number:          CE
Signing time:             Fri 31 Jan 2025 03:04:13 +0000
Manifest this update:     Fri 31 Jan 2025 02:59:13 +0000
Manifest next update:     Sat 01 Feb 2025 03:16:13 +0000
Files and hashes:         1: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: sX6tsuu0id2P+txga2JovDqUzn6WSlOSJjU9f1/vl7g=)
                          2: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: 6szg7DBeNfCDyyVjdS9beSfI5nbAK853VFa32L1aUlk=)
                          3: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: 7jDkrLp4ayTzOL5LqdZDvV5/Cuvygbg0upRrXyrXxkE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:df:47:16:bf:a4:1d:e2:bf:97:4f:65:55:94:02:09:b8:fb:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
        Validity
            Not Before: Jan 31 02:59:13 2025 GMT
            Not After : Feb  1 03:16:13 2025 GMT
        Subject: CN=E0F34F3261B2C91D838475C557C0C36FB77C30C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:e7:65:f5:c6:e1:b6:75:6f:50:78:0d:ea:
                    af:2c:4a:1e:67:0d:63:eb:2f:ef:2e:5e:a4:2d:76:
                    cb:25:4f:2e:7c:fd:28:30:40:7a:58:a9:c6:ad:39:
                    c2:e6:a1:ba:4b:25:c1:68:8b:7e:f0:59:6a:92:64:
                    f9:96:bc:b0:a8:12:aa:c9:1a:9b:9e:2e:e7:86:c1:
                    28:1d:c8:81:64:e7:14:61:ce:52:6e:f6:d6:7b:a2:
                    31:5c:54:87:6e:7f:b1:84:35:2a:b0:32:d6:63:fe:
                    34:0b:96:2e:b7:e9:55:22:e1:2e:31:81:c6:48:70:
                    c4:6e:cf:75:91:bf:7e:26:37:cf:15:4f:17:00:41:
                    c0:62:c3:5e:2a:18:06:b0:38:0c:1a:50:6f:ee:42:
                    99:86:ef:58:c1:27:e0:68:25:d6:87:d5:48:6c:89:
                    88:7c:40:d1:9e:30:d6:20:59:57:fd:19:4c:50:6d:
                    62:ca:a7:88:d5:f2:61:d0:54:67:bc:22:18:78:c1:
                    4f:d8:a7:a4:41:e8:70:a3:49:94:f2:8c:18:2a:24:
                    70:06:bc:4d:49:c2:d2:ab:e2:8b:52:58:3f:9e:da:
                    58:e9:51:48:94:7f:3d:71:2d:4d:11:e4:43:31:8d:
                    f3:0d:52:86:5d:f2:0c:a7:d5:e0:fe:db:09:d0:67:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F3:4F:32:61:B2:C9:1D:83:84:75:C5:57:C0:C3:6F:B7:7C:30:C7
            X509v3 Authority Key Identifier:
                keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:85:79:2e:25:03:b7:7d:25:19:24:91:b7:95:df:84:56:ea:
         69:c3:61:ab:f8:05:48:8b:ba:9b:46:d8:9b:68:7c:fe:73:c3:
         de:84:fd:6e:db:77:18:6a:64:27:88:f2:f5:dd:e8:7d:04:1d:
         ad:e4:75:1c:b8:b8:f7:a8:f8:76:d6:1a:be:5f:88:ad:13:5b:
         97:8c:16:2b:00:ab:3c:92:58:37:91:a3:30:40:35:9f:25:c7:
         11:61:39:2e:26:2b:6e:b4:6c:40:12:12:0a:66:83:52:d1:bb:
         4c:2e:d6:52:a3:b2:a9:4a:34:67:c6:81:b8:ee:c5:27:f6:93:
         8e:ac:62:06:47:82:d7:4c:31:e6:fa:bc:9b:37:8c:01:32:36:
         51:c5:22:bf:4b:c8:f6:4f:95:d8:16:86:a0:a1:a7:9e:f3:ef:
         c0:c1:47:9c:3d:d4:86:83:5a:87:87:20:98:ce:c7:ed:73:37:
         1a:db:16:c5:d2:17:5c:de:26:98:92:c0:c6:0b:4b:38:38:61:
         e4:b0:35:a9:a9:e8:cf:5f:aa:69:31:70:54:58:5b:d7:09:57:
         55:52:8a:3d:99:61:c3:69:33:f8:b0:ed:1e:9a:14:3b:0f:f8:
         19:78:62:c5:da:85:86:75:55:14:27:e1:7f:9b:71:90:45:15:
         37:0f:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:51 2025 by rpki-client