Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File:                     2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier:          63/dgI2EShofx4IamUkDBghc5nadTZvJ7/5F6VIE4FE=
Subject key identifier:   6B:EC:D1:E1:AC:63:45:F1:FF:3D:1A:B6:4A:51:4C:5D:8F:AC:E9:0C
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       0B026F8586EDA48B01FE589D7265EE3FB5A3ADE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number:          70
Signing time:             Fri 31 Jan 2025 05:50:03 +0000
Manifest this update:     Fri 31 Jan 2025 05:45:03 +0000
Manifest next update:     Sat 01 Feb 2025 07:36:03 +0000
Files and hashes:         1: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: pQEQlRwKVVCvE7av7lhBHP+xdFaTf6Yo50+yHZSAJFg=)
                          2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: Qnf2BkpJSuw4F4uKwV9Di/y2QHZIjchMSRNDCyZIFQ0=)
                          3: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: 5z/9B2lDD9Y2z6ddTWA/M1t9+scwLoPNHb2Cu/S9FHo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:02:6f:85:86:ed:a4:8b:01:fe:58:9d:72:65:ee:3f:b5:a3:ad:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Jan 31 05:45:03 2025 GMT
            Not After : Feb  1 07:36:03 2025 GMT
        Subject: CN=6BECD1E1AC6345F1FF3D1AB64A514C5D8FACE90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:2e:b0:ce:2b:2e:1c:a3:f2:9e:4f:72:7d:
                    cc:a4:d9:20:27:fc:4e:82:f8:2d:96:c3:de:ff:46:
                    06:4e:9e:42:92:34:08:df:f9:de:fb:ec:6d:cd:55:
                    9f:dc:71:c0:df:53:5c:77:b1:66:3b:9c:71:b9:3f:
                    11:ae:84:03:07:25:07:e6:ce:93:fb:62:3a:6b:90:
                    b7:da:74:75:eb:d4:4f:3a:ca:a9:b3:47:f0:02:16:
                    99:53:3a:5c:9b:77:a0:6a:b8:4b:e3:6b:b8:5e:a9:
                    b1:22:ba:2e:64:14:4a:83:8e:14:5f:b6:b2:59:45:
                    74:a9:8b:cf:1d:9c:dc:48:cb:e0:23:de:72:2d:27:
                    34:b4:d4:d5:34:09:cd:b5:7f:a6:60:a9:7b:85:bc:
                    d9:8d:a9:e5:31:26:eb:a1:cf:d6:dc:cf:9d:77:e1:
                    20:2b:3c:6e:22:38:83:ea:47:63:df:c8:0e:6e:68:
                    05:60:f2:e6:fc:c3:f2:d3:e0:25:e1:66:5d:e6:5c:
                    ae:b3:46:a5:03:68:4b:16:a9:ec:5d:65:54:24:09:
                    22:ab:38:1c:21:05:cc:e2:8a:e4:47:cf:0a:88:fe:
                    ef:fd:b1:fc:7b:17:86:2c:78:2a:90:a7:1d:4e:46:
                    22:dd:6d:ca:89:f8:f1:52:fe:4f:9f:6e:5e:49:9a:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:D1:E1:AC:63:45:F1:FF:3D:1A:B6:4A:51:4C:5D:8F:AC:E9:0C
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:eb:14:05:81:89:b5:87:a0:be:eb:3a:18:cd:d7:31:72:2f:
         c6:46:66:50:4e:bb:87:8a:00:2a:a7:6b:53:e2:e2:25:c1:8d:
         be:0a:49:77:4e:c4:70:a4:77:55:c4:f7:38:dd:96:90:6d:35:
         dd:8f:70:50:7d:77:9e:01:e5:12:f1:d4:f3:65:ec:38:f2:1e:
         cd:08:a3:43:d9:58:a5:ad:bb:88:94:85:60:57:13:01:f4:f9:
         06:ec:d0:59:ae:7b:f2:22:67:79:d7:dd:b5:5a:e9:8f:bb:cb:
         8a:cc:57:d6:bb:4b:00:07:ab:ad:43:21:f1:e1:98:f1:82:ab:
         7a:04:ec:f4:57:4f:04:5a:8b:bf:33:ee:f6:07:3a:42:f0:7d:
         13:6b:40:0c:d4:76:ce:c1:b3:0e:8a:67:59:b7:71:bf:ae:1a:
         79:34:ce:ed:84:a9:c9:43:ef:a3:88:18:6e:f4:c5:52:f5:8e:
         8b:18:20:71:e5:74:e9:3d:63:88:aa:97:df:05:58:22:f3:77:
         45:a2:32:8a:18:f1:c6:ac:98:7d:5a:2b:52:5b:42:1f:8e:1d:
         3d:0c:60:33:63:c5:ff:6c:65:e9:f3:6f:59:35:06:1c:a5:8f:
         7c:bd:d8:b2:fc:88:37:77:15:ab:be:7b:c9:77:35:6c:8d:f1:
         4e:80:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:37:39 2025 by rpki-client