Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
File:                     CC038C42F33B3D558931769A27D97E3412751117.mft (raw, json)
Hash identifier:          j8750Bu2uUphkXZCmq7WQpOk/98aWOSbamM4d7IsG2w=
Subject key identifier:   6D:59:43:DE:B6:78:7D:F7:32:0C:D7:87:5F:E9:14:09:D2:B8:09:AD
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       03C50D2E9CFCEFE84343B5731B06AF6F81D231C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
Manifest number:          019B
Signing time:             Fri 31 Jan 2025 10:53:42 +0000
Manifest this update:     Fri 31 Jan 2025 10:48:42 +0000
Manifest next update:     Sat 01 Feb 2025 11:47:42 +0000
Files and hashes:         1: CC038C42F33B3D558931769A27D97E3412751117.crl (hash: 4NZXVBNg6o8yQM29cjtkrH4f/OvZd+CawpTeIZOIu0k=)
                          2: 3136382e3139372e38302e302f32322d3234203d3e20323634333836.roa (hash: nsuU7rkBZsCroNrIsZj3CODVVHgzbTd+0Kbjyg3+0xA=)
                          3: 3133312e3130382e3137322e302f32322d3232203d3e20323634333836.roa (hash: yHowptj0LYOVbN+rXNHVmC/fjJcF0v24F0lBlg4YDk4=)
                          4: 323830343a316462303a3a2f33322d3438203d3e20323634333836.roa (hash: 4Y4HywUuwFbY1rtdd1dbzq1XEnHUKOZ0fAMBVWsRtnA=)
                          5: 34352e362e3234302e302f32342d3234203d3e20323634333836.roa (hash: jdqbkoTm/3gnquV9ZzjfHmN6fRx7zuxh99+k7ClIcnY=)
                          6: 34352e362e3234312e302f32342d3234203d3e20323634333836.roa (hash: HVuZzCVCuNOSIzep4Z7PTNRXpI7/gkLoeOGMutIkhyU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:0d:2e:9c:fc:ef:e8:43:43:b5:73:1b:06:af:6f:81:d2:31:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Jan 31 10:48:42 2025 GMT
            Not After : Feb  1 11:47:42 2025 GMT
        Subject: CN=6D5943DEB6787DF7320CD7875FE91409D2B809AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:35:24:de:8f:a9:a8:50:52:84:95:fc:1a:
                    1f:77:58:b5:db:f8:14:0c:95:c4:38:57:af:8a:c5:
                    61:48:44:ce:10:77:af:f0:94:be:7e:0b:9e:20:46:
                    36:e4:15:d0:5b:0a:bc:0e:2c:75:87:dd:ff:8b:71:
                    0a:50:69:eb:29:d0:11:93:cc:ea:11:53:ed:88:99:
                    13:d0:a3:18:2c:1e:3d:76:40:c4:8c:f3:7d:5c:af:
                    05:55:ea:33:21:d0:2e:a9:05:5f:90:af:d5:20:71:
                    2e:3c:51:eb:5d:bd:23:e6:3b:42:c8:c7:f0:01:92:
                    71:03:ec:18:24:6a:0a:ad:5f:76:97:89:e0:0f:30:
                    38:cb:6c:56:af:ae:d0:ef:11:22:20:43:ac:82:9c:
                    11:1b:43:e0:c3:9c:b3:69:66:6d:76:0e:4f:07:d3:
                    ad:65:73:37:2c:9f:22:4d:8b:f2:72:ad:a4:a9:67:
                    ca:c2:61:6b:fe:2f:08:31:1a:3e:80:24:50:87:a8:
                    30:41:3a:45:33:80:6f:77:4e:ed:0b:44:7e:f3:a8:
                    82:61:c7:50:23:e3:4a:7c:03:46:81:88:ad:1c:b1:
                    6f:6c:c9:ac:11:0b:5a:66:1f:79:71:1e:ba:33:ac:
                    a6:44:3b:73:71:bf:3d:ec:cb:9a:7a:52:d3:35:90:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:59:43:DE:B6:78:7D:F7:32:0C:D7:87:5F:E9:14:09:D2:B8:09:AD
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7e:e2:1d:42:4d:4b:d4:6a:c1:ee:ae:30:35:8f:6b:8b:0f:
         05:08:e8:ac:3f:c4:50:75:20:4f:2a:60:28:8c:75:3e:93:9c:
         60:6e:3b:76:27:99:fe:a8:88:23:c6:84:94:a9:6f:f7:dd:c0:
         7a:e3:39:bd:44:a4:b6:af:f1:d1:b1:1d:6e:8a:89:4d:b1:db:
         ca:08:7c:f1:ad:89:13:e6:bb:5d:84:ca:66:05:a2:cc:e7:32:
         82:c3:43:1c:41:a6:ad:84:86:86:37:1e:8c:bd:a2:00:a3:44:
         64:07:65:cf:4d:20:11:ec:9c:ec:98:ff:aa:91:c4:dd:37:3f:
         1d:2a:8f:8e:50:e1:13:b6:26:78:e1:f9:a2:6d:92:f4:53:73:
         7f:4f:65:11:fc:4c:c5:e8:1b:47:8b:b4:a3:0e:ca:48:ce:3e:
         da:e7:25:22:dc:fc:4d:bf:d2:8e:81:bd:9e:2a:c2:ef:d5:7f:
         c9:7f:69:c4:be:91:37:ae:7e:6d:e9:17:48:cc:c5:aa:4b:1e:
         50:7e:d3:e6:24:1c:82:8e:13:d7:9b:33:fc:e7:c3:0f:3d:54:
         14:ea:db:75:52:62:44:d7:2d:e9:17:ef:84:95:9b:69:88:fe:
         e4:b8:56:91:30:29:dd:4e:c8:d0:46:58:c6:75:f2:f7:bd:d0:
         ca:42:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:49:59 2025 by rpki-client