Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft
File:                     43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft (raw, json)
Hash identifier:          TibDCbj4EjVxhkKLNPU1I11dm94czch7z+DhncHYPOI=
Subject key identifier:   2E:E8:FA:E9:4D:D2:5E:24:C2:43:94:32:21:72:73:FA:F1:34:47:B5
Authority key identifier: 43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A
Certificate issuer:       /CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
Certificate serial:       0F44193D3DB342BBF7876104CDD6D1BB582D6443
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft
Manifest number:          018E
Signing time:             Fri 31 Jan 2025 13:53:00 +0000
Manifest this update:     Fri 31 Jan 2025 13:48:00 +0000
Manifest next update:     Sat 01 Feb 2025 15:36:00 +0000
Files and hashes:         1: 34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa (hash: +S5pN/IwDoFBzJR85M5YoVGYwkvjmes/LdYL941VT7I=)
                          2: 323830343a346231383a3a2f33322d313238203d3e20323637323833.roa (hash: 7UekPUmqTuDPjiMaZUccN7+8/63U8M8jIEHqQtuZpfY=)
                          3: 43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl (hash: alu6o5ELQ/2tBM2rRWHQ9XnEy0dcWCbZ6d9b9Ldde/8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:44:19:3d:3d:b3:42:bb:f7:87:61:04:cd:d6:d1:bb:58:2d:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
        Validity
            Not Before: Jan 31 13:48:00 2025 GMT
            Not After : Feb  1 15:36:00 2025 GMT
        Subject: CN=2EE8FAE94DD25E24C2439432217273FAF13447B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:63:20:7b:13:1a:46:53:d9:15:f4:ee:1e:
                    df:ea:02:b1:da:76:91:85:ef:bc:8a:56:ec:13:f5:
                    b0:6b:06:5a:bf:ef:1a:b1:18:7f:7c:3d:ce:81:84:
                    a5:d8:0d:a5:20:b1:46:f8:88:70:39:67:ed:ba:2a:
                    4f:90:04:19:f6:a8:4b:5f:8b:53:49:5e:ae:28:83:
                    9e:ad:6f:5b:d3:a7:f5:41:59:7b:98:87:27:e6:4f:
                    be:e8:ba:04:13:77:b6:7d:1b:48:99:db:8a:e2:62:
                    b7:39:c6:ac:99:bc:d4:86:4b:81:66:c0:19:b8:42:
                    1d:de:20:1c:ff:d7:7b:60:06:d6:f6:6a:ff:a7:05:
                    1a:57:e5:3c:36:dc:49:89:c2:d9:91:bb:04:05:b9:
                    3b:cb:fe:bb:f3:da:0f:3a:69:d5:97:69:c9:53:5e:
                    68:0a:38:59:df:04:98:fa:a6:86:78:13:40:5d:d3:
                    2a:e0:80:b2:db:8b:ad:54:3a:ea:52:c9:57:15:4e:
                    53:1c:9f:ff:ba:6e:5b:3e:d7:e7:5e:65:eb:43:01:
                    03:40:86:ab:eb:e4:ac:20:c1:bb:92:b0:42:5c:97:
                    f4:97:28:3e:73:31:ff:53:1f:4a:6b:01:95:08:ae:
                    c3:77:e6:0f:af:ff:8d:fc:70:bd:36:0d:10:e8:b3:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:FA:E9:4D:D2:5E:24:C2:43:94:32:21:72:73:FA:F1:34:47:B5
            X509v3 Authority Key Identifier:
                keyid:43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:8b:f9:fa:17:af:5d:ca:03:9e:7e:7b:d7:d3:f9:72:9a:
         2f:97:03:a9:61:b0:b2:9f:b7:e3:5f:f9:78:b9:84:c8:48:a8:
         36:06:52:4f:67:3d:10:48:29:bc:8a:fe:8d:e7:81:6f:8a:10:
         54:9b:62:4a:e8:c5:2c:f7:1a:69:44:af:c5:59:57:3c:68:28:
         dc:5d:23:bb:5b:0b:61:1a:b5:a8:74:9e:45:d8:8e:f4:cb:8e:
         7d:ae:35:38:47:52:57:62:2a:0b:67:83:1f:19:0d:49:72:86:
         f8:07:c3:8d:4c:42:80:39:48:25:85:99:32:0c:56:b0:97:d9:
         31:2d:e0:94:45:e2:34:39:d4:e5:94:36:16:b3:19:fd:03:bb:
         76:da:00:ca:63:3e:37:86:b7:cb:c9:a0:e1:d5:ce:13:ad:9c:
         a3:86:c4:9b:5b:4b:07:fe:95:dc:ed:a3:b5:04:2c:9b:d1:5a:
         da:b9:eb:b9:03:b2:a5:57:4f:bf:73:6f:e7:12:c7:3e:c2:38:
         b0:55:b2:f8:ae:2c:b6:48:68:26:2f:cc:6a:ef:64:85:3f:f0:
         d2:f5:a6:f1:3f:bd:1b:1d:11:1c:c8:11:64:b8:1b:cc:93:62:
         dd:e1:df:72:db:8a:21:7c:b9:ec:8a:af:af:cb:58:43:5a:ea:
         f0:3e:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:40:23 2025 by rpki-client