Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
File:                     653D1900116E7E41CE869340B5477E400370D802.mft (raw, json)
Hash identifier:          S99dOg+OF1YMXv2bLT2rmEIx+8OJQrk0kpiC4McmBng=
Subject key identifier:   2B:D3:49:C3:C7:E3:C1:EA:78:26:36:ED:2F:97:7D:13:29:E8:1E:91
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       3C9D6B274918049BDE34D88B1E673C3B199ED4D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
Manifest number:          D2
Signing time:             Fri 31 Jan 2025 08:30:02 +0000
Manifest this update:     Fri 31 Jan 2025 08:25:02 +0000
Manifest next update:     Sat 01 Feb 2025 11:38:02 +0000
Files and hashes:         1: 323830343a6239343a3a2f33322d3332203d3e203532373936.roa (hash: i8Yd07otQA6CickL7Gk8vL8706Ya7Q1DFncsOj0638M=)
                          2: 3137372e35322e34342e302f32342d3234203d3e203532373936.roa (hash: iWOlP3YyWv18nwii+RxMhIBU92oLX7IlRzTwWvAIXHY=)
                          3: 3137372e35322e34352e302f32342d3234203d3e203532373936.roa (hash: 8nKTSDvQFg6La3NFuWrIWiPTfUl3V9v/9pC79oIzkMk=)
                          4: 653D1900116E7E41CE869340B5477E400370D802.crl (hash: k4i4FtyPr3C8VOBv9bE+mWW5rAI8TjdutwpYFNyBPec=)
                          5: 3137372e35322e34372e302f32342d3234203d3e203532373936.roa (hash: Me8sF2+asBjQzqdjookZoDzQzIGI1AiYt45FkqewfEw=)
                          6: 3137372e35322e34362e302f32342d3234203d3e203532373936.roa (hash: xMb62ptB4qh4E7pSy5GsPXhUsLq8KpVZm1RFDEoLK/E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:6b:27:49:18:04:9b:de:34:d8:8b:1e:67:3c:3b:19:9e:d4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Jan 31 08:25:02 2025 GMT
            Not After : Feb  1 11:38:02 2025 GMT
        Subject: CN=2BD349C3C7E3C1EA782636ED2F977D1329E81E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:b1:e2:e1:8b:ba:49:6e:1f:b3:18:32:c7:
                    4a:3f:9a:55:3f:be:7c:a7:bf:85:97:e8:23:b8:f6:
                    49:d8:d4:58:c9:74:a3:b9:06:34:9e:85:38:ea:14:
                    f6:cd:16:b2:d7:bc:d8:61:59:ec:c6:f2:70:fc:e6:
                    b3:f1:ab:8f:80:20:62:95:2a:66:32:8c:f6:2b:41:
                    a7:a1:f4:f1:08:d4:39:71:9c:43:c6:7d:1f:a2:51:
                    e7:57:2a:f5:09:e7:29:ec:9f:89:86:58:c0:67:7a:
                    ef:8a:d7:a8:bb:87:0c:64:d1:15:7e:29:10:2f:f9:
                    67:86:8f:66:66:47:1a:4c:3a:b8:b2:0b:0f:01:86:
                    be:57:82:c7:6e:a6:12:5b:d0:9e:04:43:4d:c7:9f:
                    52:db:86:58:0c:4b:21:ad:05:76:59:e3:23:4c:b4:
                    7a:08:56:67:1f:53:de:26:a1:13:ae:f7:c7:31:2b:
                    0e:22:44:b5:4b:5a:05:8f:53:69:f1:fd:a6:c9:30:
                    41:78:c0:57:aa:d8:9c:47:63:06:7f:ea:6b:d0:14:
                    00:b7:a2:f1:f0:17:d9:5f:5f:4f:df:7f:a8:57:a0:
                    dd:e9:7d:56:dd:90:00:15:e0:e1:1f:2c:1b:00:3d:
                    ad:4d:56:a0:43:ce:d0:4c:eb:46:a0:b2:13:cb:ee:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D3:49:C3:C7:E3:C1:EA:78:26:36:ED:2F:97:7D:13:29:E8:1E:91
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d3:7d:9d:0d:d9:d0:53:35:c3:90:48:40:b4:e7:f8:f2:94:
         bb:4e:55:55:76:c8:46:21:20:67:d4:c5:a0:61:30:c4:12:59:
         bf:f0:51:cc:5b:43:7e:45:4c:11:44:bf:61:56:c5:a7:a1:3b:
         2e:f8:07:77:a4:8d:13:dd:f0:1b:26:14:47:63:04:a3:71:c8:
         06:4a:fd:7e:28:9d:c0:57:6f:ee:cf:ef:50:bd:55:12:76:13:
         46:f9:b2:f4:2c:f4:6e:7d:7b:06:97:ee:ad:3a:c5:38:c2:c3:
         6e:53:66:40:a5:d5:49:f8:80:2d:0a:07:a9:8c:32:f3:18:36:
         f3:c0:ed:84:36:6b:a3:65:b9:e4:4b:d0:50:98:aa:20:1f:ab:
         28:bb:b9:65:13:56:b9:eb:21:f4:c2:53:a4:72:a1:bd:40:54:
         2c:65:93:c8:d6:0b:69:72:7e:ff:f5:ce:2e:94:1b:8a:94:fb:
         8b:c1:c3:ca:50:4c:f0:dc:6e:fe:09:15:0e:7f:b3:de:d9:2e:
         f4:a1:75:4c:bf:6d:a9:a2:79:9a:c7:49:0d:7a:c8:6e:d0:bd:
         7b:21:03:8b:04:b2:c0:5f:35:cc:91:30:89:c9:07:12:5c:9a:
         a8:8a:50:4c:61:99:8d:1d:00:3a:f5:68:26:52:21:5a:c4:f3:
         f6:3a:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:20:08 2025 by rpki-client