Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft
File:                     0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft (raw, json)
Hash identifier:          O0AvnzQx6mKoQgfB9GsEkrfnBsUvD+obk3IeeV0GbNQ=
Subject key identifier:   59:DE:1F:DB:EC:2A:EA:4D:1B:BE:C8:9C:0A:22:61:01:82:15:9E:1E
Authority key identifier: 0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3
Certificate issuer:       /CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
Certificate serial:       0A31A8237B978D83A9A0B2915A8A68EB4C44396A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft
Manifest number:          8A
Signing time:             Fri 31 Jan 2025 04:34:39 +0000
Manifest this update:     Fri 31 Jan 2025 04:29:39 +0000
Manifest next update:     Sat 01 Feb 2025 06:24:39 +0000
Files and hashes:         1: 323830343a343338633a3a2f33322d3334203d3e20323632393131.roa (hash: vBDnzF1suRQaldFwxb4feadg9OaWkxgV32Sgk9NgFI4=)
                          2: 3137372e33382e34382e302f32312d3234203d3e20323632393131.roa (hash: nkgDMvZGb4/ql99L5dytUR2I7oVymsTYvPeQiptwxb8=)
                          3: 0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl (hash: EK1ENsTu28VgP+KGwuj/j+fIhPjE9iCBfDuJSVzs1zM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:31:a8:23:7b:97:8d:83:a9:a0:b2:91:5a:8a:68:eb:4c:44:39:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
        Validity
            Not Before: Jan 31 04:29:39 2025 GMT
            Not After : Feb  1 06:24:39 2025 GMT
        Subject: CN=59DE1FDBEC2AEA4D1BBEC89C0A22610182159E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:e0:c7:94:0c:95:98:22:f6:a9:2a:c2:42:
                    da:07:90:c1:da:8c:7f:d3:b0:ee:e0:93:d9:19:89:
                    5a:5b:63:91:af:d1:7f:e1:b4:7e:d6:a7:2c:96:91:
                    3f:8a:54:b4:ea:b2:48:f5:eb:ea:f9:9d:af:bf:fc:
                    f6:9b:6d:d3:6b:9d:1d:7f:88:15:45:2b:f8:56:9d:
                    f1:c1:e3:ed:c2:57:86:0a:cf:f0:32:be:3d:49:13:
                    5e:f3:30:7a:0d:96:c9:87:00:83:a5:7a:76:61:98:
                    21:db:88:0c:fe:f4:74:8b:ef:01:09:4b:c8:74:a0:
                    75:e7:06:b1:7e:f2:70:05:5f:f4:e5:d8:76:d7:1c:
                    b2:f1:28:25:25:10:22:a3:d8:70:68:c8:e1:c0:b0:
                    aa:4a:c7:54:5c:8f:ff:7a:11:f7:7a:e5:1b:18:08:
                    f3:ec:d3:0b:37:e3:7f:1f:7c:26:29:ea:57:6a:51:
                    9d:1f:c1:b3:8c:6a:d0:b0:22:8d:05:dc:30:13:85:
                    f9:b7:5f:07:37:c3:ab:e4:9f:5e:a1:d0:c5:82:0b:
                    ec:82:0f:14:a1:9e:78:2c:a3:90:32:95:55:e3:55:
                    3b:cf:1d:2e:ff:7d:62:53:be:c5:ec:63:d6:4d:d8:
                    ab:9d:e3:f9:11:1e:fc:4d:40:bb:d9:61:08:58:bb:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DE:1F:DB:EC:2A:EA:4D:1B:BE:C8:9C:0A:22:61:01:82:15:9E:1E
            X509v3 Authority Key Identifier:
                keyid:0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:97:02:6e:31:d8:be:d8:f9:04:a5:d8:92:16:61:89:9d:d6:
         fa:94:74:cc:1a:6c:6b:e5:18:73:10:ac:88:16:59:4d:27:05:
         e3:94:48:29:aa:c5:1a:9c:dc:53:d9:47:de:bf:e4:93:ad:95:
         af:c9:4d:73:db:9f:4e:2e:72:4f:5c:eb:fe:8a:b4:6a:bf:ea:
         cb:e9:d3:0f:a3:5e:3b:35:d4:80:98:1c:b3:57:74:be:80:c0:
         fd:6a:35:2a:40:17:ca:66:00:cc:fd:9f:ff:c3:51:a3:50:3e:
         7c:03:39:c0:e1:15:c8:ba:c7:cd:10:ec:70:74:cd:b5:73:12:
         65:0e:1f:1f:b9:47:a6:4d:43:59:b9:75:1e:95:6d:ce:de:c7:
         e2:39:e7:3e:f4:4b:c7:90:11:e7:0e:da:d1:74:e8:56:a1:15:
         d6:e2:6c:5e:ec:66:a2:35:42:1d:eb:fc:21:0a:23:04:0c:40:
         f4:91:34:6e:25:bb:06:26:7b:8b:ae:ce:1d:a1:91:6a:fe:21:
         75:a1:53:c3:3b:5f:86:64:7a:44:a1:8c:91:4c:de:d3:4e:14:
         ab:7b:60:b5:ad:84:2e:07:50:41:54:a1:94:c2:4a:5f:95:52:
         ef:f4:41:d8:a6:f9:41:a9:c9:5d:55:3b:e6:84:c4:da:88:51:
         5e:f9:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:35:00 2025 by rpki-client