Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft
File:                     3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft (raw, json)
Hash identifier:          pamr3t5DR3WwolCInD7fFhZksbczxupNTVHskTUkvF8=
Subject key identifier:   CF:8A:08:F5:2E:6D:24:2D:60:7E:37:E0:FB:AE:AA:6D:91:5C:EE:BE
Authority key identifier: 3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A
Certificate issuer:       /CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A
Certificate serial:       111E4AE12D37CAD9683E50E99747F1CBF8674980
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft
Manifest number:          C9
Signing time:             Fri 31 Jan 2025 03:03:42 +0000
Manifest this update:     Fri 31 Jan 2025 02:58:42 +0000
Manifest next update:     Sat 01 Feb 2025 06:52:42 +0000
Files and hashes:         1: 323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (hash: CI0Boaa6U/czRmNwlu08awXx1YU7TKO7Cd6+Q+xbA3k=)
                          2: 3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (hash: VDgLzWuOkvCGxuLQJu+Oaocm0uNBR7MLzQnf9U+qMBk=)
                          3: 3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.crl (hash: pgm1f3gnbjxEaVg2WJR9DyRmjyIHfOWs4MsO2r0sLFs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1e:4a:e1:2d:37:ca:d9:68:3e:50:e9:97:47:f1:cb:f8:67:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A
        Validity
            Not Before: Jan 31 02:58:42 2025 GMT
            Not After : Feb  1 06:52:42 2025 GMT
        Subject: CN=CF8A08F52E6D242D607E37E0FBAEAA6D915CEEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:46:a5:8f:48:dd:4a:b0:34:35:e3:c6:a1:
                    f2:60:9a:74:fe:64:c9:4d:a0:16:e6:57:51:16:9e:
                    f5:9c:b2:49:20:b1:67:4a:20:b8:de:7f:79:f2:bf:
                    bb:fd:d8:69:74:b1:20:ba:94:65:39:9c:44:95:80:
                    c6:93:61:fa:21:9e:cb:d7:66:c1:3f:1c:5d:e2:42:
                    42:70:dd:62:46:18:cc:7c:a5:82:89:c1:34:0c:eb:
                    81:20:b0:b2:d0:87:12:4e:e3:c8:a9:f7:8f:29:ff:
                    f3:3a:48:ec:0d:ba:61:3f:e5:cb:44:4f:1f:63:76:
                    41:e3:d4:79:d0:b6:4a:0c:d3:4e:62:fc:8b:bd:91:
                    03:5b:5d:84:af:6c:67:61:66:75:b0:cd:9b:5b:68:
                    cd:35:77:3f:46:cb:94:20:59:47:bd:09:2d:91:85:
                    3d:81:59:d0:90:29:91:b6:d4:b8:1c:f2:2b:cc:b6:
                    aa:5b:8c:32:bc:98:1f:2f:97:10:ed:09:ad:66:8d:
                    e3:a6:06:3f:5b:68:17:94:e4:ff:a5:9f:d4:0f:77:
                    23:ae:d4:70:6d:7f:63:d0:93:ae:c1:f7:5e:50:86:
                    73:64:bf:2a:a0:cb:9f:a5:1a:a2:a7:a2:5e:8b:91:
                    b7:6b:ec:c3:04:28:77:ef:71:a2:3a:cb:93:c6:34:
                    54:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8A:08:F5:2E:6D:24:2D:60:7E:37:E0:FB:AE:AA:6D:91:5C:EE:BE
            X509v3 Authority Key Identifier:
                keyid:3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:52:b3:88:ad:fa:3f:6d:cd:4d:6f:78:b8:2f:d5:2e:33:42:
         2b:47:10:77:32:6a:8c:08:e2:79:35:ce:f3:1c:e9:66:cb:b5:
         ca:24:74:21:a1:8e:5a:f8:1a:ae:ba:0b:03:b1:00:e8:f6:5c:
         66:b9:24:b3:1d:ee:3e:29:b0:57:c7:84:38:c1:a3:6d:c0:e2:
         23:35:cc:6d:14:b6:19:07:e2:57:73:13:fc:85:d0:ea:6f:e4:
         7b:12:1c:66:dc:87:4c:05:a2:9d:a6:6f:a8:fc:28:f6:c2:f8:
         66:93:71:f1:18:dd:71:55:ad:ee:c9:0d:d4:a6:a3:70:be:ee:
         cd:03:d1:b4:e5:cf:c7:ec:90:25:be:30:14:48:5a:3e:4c:fa:
         a1:6b:c8:7f:d9:77:b7:e0:cb:d3:b2:90:d7:d4:ad:a3:55:0f:
         be:a4:73:3a:47:aa:c4:30:6c:9e:12:ca:b8:e5:ce:a1:73:01:
         c0:51:cf:18:f4:8a:46:79:55:68:58:e5:4b:8e:74:6a:e2:d5:
         59:ef:17:47:83:cc:d1:b7:bb:7a:4d:3d:6f:56:cb:f9:51:bb:
         71:57:59:0f:15:11:a5:34:2d:5a:f2:29:96:4f:3c:d8:62:cb:
         75:c9:3a:b3:02:61:a6:47:ff:4f:fe:03:cd:0b:1b:b3:1c:84:
         a6:30:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:03:32 2025 by rpki-client