Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft
File:                     BC038A5595864CBCD2C347394864706970D0059D.mft (raw, json)
Hash identifier:          hTCrYMi6FYaRqgJvnsO2YHCTJWSguAy7bZNVq0UctuI=
Subject key identifier:   0F:DA:FA:A7:E6:AC:7F:44:81:34:EB:FA:90:1E:57:7D:53:72:96:94
Authority key identifier: BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D
Certificate issuer:       /CN=BC038A5595864CBCD2C347394864706970D0059D
Certificate serial:       702E1F8F7620DA2BA78EF0EE433F1FB1D5FEE61B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft
Manifest number:          14
Signing time:             Fri 31 Jan 2025 01:04:01 +0000
Manifest this update:     Fri 31 Jan 2025 00:59:01 +0000
Manifest next update:     Sat 01 Feb 2025 04:20:01 +0000
Files and hashes:         1: 3133382e35392e3234302e302f32322d3232203d3e20323634323134.roa (hash: czIf+LlXYllQ46h1NSfheKZmhbuXumb13KQPlkY++uo=)
                          2: 323830343a323435303a3a2f33322d3332203d3e20323634323134.roa (hash: TtLOQwTT7fIrVvB/1Vi2kPyqyjd9MFE/N4l9Bltp5a8=)
                          3: BC038A5595864CBCD2C347394864706970D0059D.crl (hash: ZVG33K6JbeWWg12300X7ZqXGJpRSeb67zlyqN9BImmU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2e:1f:8f:76:20:da:2b:a7:8e:f0:ee:43:3f:1f:b1:d5:fe:e6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC038A5595864CBCD2C347394864706970D0059D
        Validity
            Not Before: Jan 31 00:59:01 2025 GMT
            Not After : Feb  1 04:20:01 2025 GMT
        Subject: CN=0FDAFAA7E6AC7F448134EBFA901E577D53729694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:fe:9e:e8:0f:52:4e:7b:e3:d0:ec:27:00:
                    bf:d8:ff:e5:c5:c1:9e:06:4e:71:fc:92:99:6a:52:
                    82:44:d2:80:45:ab:69:70:ca:8a:cd:82:81:19:1e:
                    50:35:23:1e:02:84:f9:66:22:e1:35:6b:19:8c:06:
                    49:af:7e:86:2c:bc:98:74:4a:3c:6c:f3:87:3e:0b:
                    ac:49:8a:21:23:c6:c6:30:de:19:a4:c4:ae:99:58:
                    7a:18:c2:ab:ea:fb:20:e3:62:e5:5b:ab:28:0b:b4:
                    15:26:b3:a4:65:48:e3:93:a4:8f:f5:29:45:c2:e2:
                    45:28:f6:eb:7c:82:0a:a8:ea:24:97:38:42:f3:54:
                    a1:d9:1a:d7:12:f8:bc:a2:43:39:ca:0e:86:4d:95:
                    43:91:c3:23:45:bc:ac:02:4f:11:12:8c:ef:f4:66:
                    70:81:ce:50:26:cd:a3:57:16:58:52:70:2d:84:f6:
                    7b:9f:2b:a1:d1:4a:d7:4b:73:0b:8d:5d:f5:56:c0:
                    ef:09:a7:e8:3c:53:51:72:56:ba:7d:0f:c7:bc:50:
                    08:55:5e:5d:a5:81:61:ad:84:e6:de:37:52:b9:64:
                    89:53:7b:b7:12:14:07:02:fd:c1:1a:a9:e5:96:0a:
                    01:09:03:2e:2c:4b:e0:c2:b5:7a:4d:bb:0d:d7:c4:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DA:FA:A7:E6:AC:7F:44:81:34:EB:FA:90:1E:57:7D:53:72:96:94
            X509v3 Authority Key Identifier:
                keyid:BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:e2:84:1d:c6:b2:13:fa:5e:fd:a3:ce:50:d8:31:ef:2a:
         a2:4c:af:b7:67:34:d8:95:46:4d:af:f1:26:90:69:0f:21:05:
         16:70:77:cd:c8:30:90:0a:ec:65:0b:67:eb:56:06:a2:f7:c2:
         ef:53:d9:72:0e:98:f9:c7:9d:1a:34:83:77:fe:48:5c:37:50:
         27:a2:22:05:c0:62:ef:3f:c2:15:5c:25:62:eb:f7:c1:9b:52:
         1b:a5:33:6c:21:49:06:55:6c:00:a3:8e:08:9c:6a:32:26:02:
         17:0d:2f:a0:b4:52:b4:85:9a:90:72:10:85:af:de:63:bf:14:
         8a:e6:81:ab:63:43:5d:e9:f7:6f:94:e4:9a:a6:d9:7a:25:f1:
         3a:fa:e3:6d:ff:41:4f:ad:c9:bb:5c:d7:d1:e0:a7:75:ca:47:
         5b:7c:28:1f:c6:5e:9e:d6:53:d8:f5:7d:9d:47:81:9e:9e:cf:
         e4:b1:46:a3:33:04:c7:c1:61:70:20:f2:d7:99:9b:e8:01:0b:
         96:c8:16:95:9d:1e:63:2e:a7:7a:dc:0d:3b:10:ea:8a:f1:c2:
         3a:38:c5:70:3b:b7:38:d5:ab:9f:1d:97:2c:50:ed:74:92:30:
         0a:60:e4:3f:2f:bd:d7:f3:5d:1c:78:59:66:b6:40:79:69:30:
         d2:61:a1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:55:16 2025 by rpki-client