Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
File:                     FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft (raw, json)
Hash identifier:          cJ1l4xVFwiEfCSiHT0EbPJfuoCPFyFoG+pQN+jz8p5c=
Subject key identifier:   97:C4:48:54:DC:A3:40:0F:83:67:6E:E9:FA:30:C7:04:6A:D7:D0:0D
Authority key identifier: FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Certificate issuer:       /CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
Certificate serial:       067E7155E2EFD1BCF5760A8AFDE52A585A05C3FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
Manifest number:          0118
Signing time:             Fri 31 Jan 2025 14:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 13:56:21 +0000
Manifest next update:     Sat 01 Feb 2025 17:40:21 +0000
Files and hashes:         1: 323830343a316633633a3a2f33362d3336203d3e203532393130.roa (hash: pK0vxGlvaotsyQD+C1TPMWLey8rpIGm4nTwAOcPsGT8=)
                          2: 3138362e3235312e33382e302f32342d3234203d3e203532393130.roa (hash: 8DeICP4FF3jQujyak6gJWVw7WL3y+fZYiXM99bQQofQ=)
                          3: FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl (hash: /ad8jbTwkBsOovwGan+gdhv3vj/gxOjpZmMMxT0ucU4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:71:55:e2:ef:d1:bc:f5:76:0a:8a:fd:e5:2a:58:5a:05:c3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Validity
            Not Before: Jan 31 13:56:21 2025 GMT
            Not After : Feb  1 17:40:21 2025 GMT
        Subject: CN=97C44854DCA3400F83676EE9FA30C7046AD7D00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:f7:19:52:1d:5b:67:31:0c:99:23:b9:3e:
                    fa:38:cf:00:e4:44:51:15:fa:bd:ea:e8:03:b4:fb:
                    1d:43:fc:b0:56:92:82:26:66:94:92:48:0c:ca:60:
                    ab:21:e1:9b:9b:5d:e4:15:a0:ce:c9:c9:78:54:fd:
                    5a:1f:74:fa:55:41:da:5c:33:90:83:cf:04:f6:45:
                    f3:59:a1:a7:82:10:5d:19:ba:57:04:52:f1:fe:de:
                    9e:04:fb:b8:35:72:33:8e:f7:79:c6:2d:ab:90:bb:
                    41:cb:85:35:e5:95:fb:2e:f0:eb:14:93:82:29:00:
                    1b:3b:13:54:05:dd:83:e0:d4:44:63:0c:57:74:75:
                    ad:91:11:64:1f:41:d9:38:3d:f5:f9:b9:e0:98:cd:
                    9c:6c:41:4d:89:31:fc:47:4e:e8:8c:3e:f7:d5:0f:
                    9f:47:58:a2:04:ca:7e:ba:d9:92:6f:06:61:c0:0d:
                    11:d6:fa:c3:b4:6b:99:05:68:4d:ed:c0:c1:d7:87:
                    f5:09:eb:c6:0a:2c:51:16:46:99:16:d5:ec:5c:42:
                    06:69:24:d2:b4:3a:db:e9:e7:0f:e3:94:3e:16:4c:
                    e0:67:cc:41:f3:34:55:99:11:a5:bf:bb:c6:d3:a7:
                    98:23:70:6d:ec:3f:67:34:ad:c4:3b:8e:e3:64:71:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C4:48:54:DC:A3:40:0F:83:67:6E:E9:FA:30:C7:04:6A:D7:D0:0D
            X509v3 Authority Key Identifier:
                keyid:FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:dd:23:52:72:13:c4:b2:31:01:1b:7d:e1:f7:f0:f0:ad:dd:
         55:31:a3:d4:95:16:a6:44:0f:3e:f8:5d:9b:f3:b4:80:80:f9:
         42:39:4e:37:d2:d5:06:cb:ad:3c:43:69:98:88:81:c6:d4:1e:
         2c:1e:36:0c:2f:41:01:8a:29:f3:4a:e9:f9:87:ab:2f:01:99:
         6f:e7:0c:43:0a:fd:6c:30:ab:66:ab:f5:f8:c8:53:ee:39:87:
         37:c3:15:4a:45:91:9b:e2:7e:9a:a7:af:7c:c8:f7:4f:82:e6:
         83:ba:37:0c:57:8b:4e:e7:b8:35:87:73:2f:f6:ba:c6:5a:e3:
         de:03:b4:e5:0d:3d:df:3d:fd:45:6b:14:aa:f7:25:0d:f2:f6:
         77:73:fe:1d:1a:9b:a6:e3:3d:98:c2:62:a3:e9:08:32:33:d1:
         e2:c9:b7:eb:b8:bb:05:8a:b8:d3:c9:73:f3:35:23:1e:3f:98:
         cf:ed:04:54:bc:d7:a3:4e:5f:dd:34:0d:2d:44:b2:49:bf:15:
         11:48:ab:6c:cf:30:78:37:98:c1:96:05:86:51:80:99:ac:5f:
         3d:79:90:f5:d9:11:e5:71:a8:e6:7a:54:68:91:26:78:e9:8e:
         5d:ec:22:55:11:d5:6a:63:94:66:ab:2e:82:b2:d2:f2:de:1a:
         72:3d:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:55 2025 by rpki-client