Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft
File:                     06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft (raw, json)
Hash identifier:          Q2laaK+ywCjoUIXwYPQqn85fEssApsIJP8iiA0lIVRQ=
Subject key identifier:   57:3A:59:4C:89:B9:B2:48:B7:9A:D9:08:46:CD:57:BB:B8:B5:D8:E6
Authority key identifier: 06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B
Certificate issuer:       /CN=06F3CB49A918297B5AC7DDDBE54A101D2FB4773B
Certificate serial:       35B93D6DCFCD05714C947A46B440E0BF04A0A4B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft
Manifest number:          2A
Signing time:             Fri 31 Jan 2025 02:54:59 +0000
Manifest this update:     Fri 31 Jan 2025 02:49:59 +0000
Manifest next update:     Sat 01 Feb 2025 02:57:59 +0000
Files and hashes:         1: 06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.crl (hash: eiGN5GyJtlDvqedivm1f6FOuyeKg/kHHxb4BV+gZF9c=)
                          2: 3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa (hash: pnUieEj9IR6tHX8ompqr/+PGdNPjmcWT9c7E2OXLiW4=)
                          3: 323830343a323663343a3a2f33322d313238203d3e20323633383535.roa (hash: vSSMJl5tKwMLcmmQhoVU0vy+bJkcPK5S2AzaRe/pgY0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b9:3d:6d:cf:cd:05:71:4c:94:7a:46:b4:40:e0:bf:04:a0:a4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F3CB49A918297B5AC7DDDBE54A101D2FB4773B
        Validity
            Not Before: Jan 31 02:49:59 2025 GMT
            Not After : Feb  1 02:57:59 2025 GMT
        Subject: CN=573A594C89B9B248B79AD90846CD57BBB8B5D8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:01:11:97:41:f8:af:f0:f9:eb:c0:d9:95:
                    2b:41:8c:15:5f:b4:76:1c:a8:af:f1:5f:55:26:81:
                    0b:e0:87:d8:c9:ec:ee:7a:b1:18:ab:63:e9:86:cd:
                    59:2c:d5:e6:9b:d8:54:f8:62:72:57:d9:4c:ac:dd:
                    01:ad:4a:c5:f5:49:5d:99:17:e8:e3:1b:39:c4:97:
                    2b:17:88:ab:e3:86:e7:44:f9:f3:d8:8d:79:c1:c6:
                    f6:f2:f3:a9:48:1f:3f:5b:aa:43:16:f0:67:39:ce:
                    62:db:69:04:64:a4:7e:fd:4e:63:03:89:05:6e:e1:
                    fd:16:5d:2b:09:41:be:2e:7f:29:66:f5:78:2c:d9:
                    0c:56:16:a1:af:20:2e:5e:1c:1b:13:e2:14:70:7b:
                    37:2d:81:0c:a2:31:55:e9:c2:10:97:98:0b:24:30:
                    d3:d5:cd:da:fd:42:47:28:9a:4a:e7:1e:d6:a6:39:
                    0a:77:7d:9c:ef:fc:83:bb:31:e1:eb:45:31:b7:43:
                    f0:9e:11:91:78:cb:f4:7a:51:53:70:cd:46:8c:41:
                    3a:9b:f5:4c:25:99:6a:d5:b7:54:1e:31:34:44:c8:
                    8e:eb:1a:e3:e2:ec:bf:25:0a:ba:0f:db:46:80:9d:
                    a3:98:6a:b0:8b:ea:be:b6:03:26:db:bf:29:3c:a9:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3A:59:4C:89:B9:B2:48:B7:9A:D9:08:46:CD:57:BB:B8:B5:D8:E6
            X509v3 Authority Key Identifier:
                keyid:06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e6:4d:65:b6:5d:fe:1e:19:13:47:e5:4d:d5:14:e6:c4:db:
         19:32:ef:1b:11:1a:aa:b1:95:cd:e9:bb:42:63:21:14:e7:d7:
         73:e0:ec:eb:35:e6:ba:ff:37:b0:d5:39:5b:43:ca:54:83:3d:
         b8:e7:63:47:21:1a:84:29:a5:d1:4e:d0:a8:a4:c4:75:1b:85:
         09:9d:c1:b1:37:38:2e:a5:1e:c1:c6:ac:38:f0:ad:0d:fe:cd:
         b0:19:41:79:d4:f9:86:16:01:1c:31:c7:65:d5:dc:32:82:b9:
         79:4a:01:a1:e6:1b:02:86:fa:06:29:e9:64:fe:21:68:4f:aa:
         31:f8:e9:f6:b5:fa:19:b3:06:12:27:65:7d:c5:72:16:8a:de:
         0e:a1:16:fd:a9:37:6f:17:18:36:66:85:58:10:5e:f1:6e:3e:
         2c:19:09:12:57:d3:30:cb:dc:2b:ab:75:99:e2:c2:78:e4:f7:
         9c:ba:4e:53:0a:02:62:84:dd:d1:3e:f1:18:4a:55:fc:9e:1b:
         47:89:a0:b6:b6:fc:ad:6d:44:8e:3d:ee:a9:d9:3a:d3:b1:87:
         6d:1c:92:04:1a:52:7b:56:69:32:a2:40:7b:71:8c:3b:94:5e:
         d6:36:e4:4b:c2:a0:15:13:f4:89:dc:b0:e3:67:a4:01:aa:98:
         4f:8f:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:43 2025 by rpki-client