Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
File:                     CF46A132348143E7B60D54AC599BE74868B00829.mft (raw, json)
Hash identifier:          +6gXnfbbGfEfx3hCiK8S7DTFWfojClAJCOJ1UKnA+XQ=
Subject key identifier:   DC:3F:5F:1E:FE:BA:3A:9B:B8:99:80:D2:64:C2:CD:74:CF:EC:65:36
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       3B844D7E24BDEF53EB4BF0F5B8991C5FF8621BE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
Manifest number:          01A9
Signing time:             Fri 31 Jan 2025 02:30:02 +0000
Manifest this update:     Fri 31 Jan 2025 02:25:02 +0000
Manifest next update:     Sat 01 Feb 2025 04:10:02 +0000
Files and hashes:         1: 323830343a3836633a3a2f33322d3438203d3e20323632333639.roa (hash: Ckk2/C3yX5sNIr7EK5kU0NqhxNP4ilrxVTM4BKyM7B4=)
                          2: 3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa (hash: jl+0su74W0b6u+BIAuCeDaZ8ZQq8KdRTGbuO+vh0ADM=)
                          3: 3133382e302e34342e302f32322d3234203d3e20323632333639.roa (hash: l898D7IGOnDfaSfbuCtYAWlE3rNzmp0ALEOKeZErLes=)
                          4: 3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa (hash: tXHsxz7tAZC3y2RpTkqsLmy+UScXR6kvNeqCltX2ja0=)
                          5: CF46A132348143E7B60D54AC599BE74868B00829.crl (hash: 5LJztDuve/Lj3qrWaHHkZ+fvVuOz4rkJCnepXO+JAgA=)
                          6: 3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa (hash: FVb9ZZ4WvUJeaUEWPb1lRsJulOiqXqmN/UIWVK6dnPs=)
                          7: 3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa (hash: HsBRneav2ZC308BPSA04zSeXz10enYxoEEISZbzRjPE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:84:4d:7e:24:bd:ef:53:eb:4b:f0:f5:b8:99:1c:5f:f8:62:1b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Jan 31 02:25:02 2025 GMT
            Not After : Feb  1 04:10:02 2025 GMT
        Subject: CN=DC3F5F1EFEBA3A9BB89980D264C2CD74CFEC6536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:65:a5:a3:73:d8:a2:f6:76:19:10:a8:91:
                    c0:e3:d9:d1:bd:c7:44:e3:8c:f8:db:fc:88:1b:bb:
                    e5:f2:b8:66:9a:f9:d0:43:2d:18:5e:2c:cb:6b:1e:
                    37:14:33:18:4b:44:b9:6b:7a:34:13:73:53:74:50:
                    69:34:87:89:ac:8f:2e:39:1f:8e:3f:16:b5:0d:fc:
                    0d:2b:22:97:aa:47:ad:bd:4c:8e:76:18:55:65:6c:
                    d4:b1:8d:56:ce:26:f3:bb:0e:7b:99:09:c2:30:6e:
                    fa:38:0c:b5:32:2e:ff:35:aa:5c:bf:eb:94:c1:98:
                    63:a8:22:c8:6d:b7:f8:d6:bf:fb:e2:0d:1d:ea:58:
                    ce:9e:bc:2e:f8:4a:3f:f9:2e:ac:4f:95:49:a2:cb:
                    68:8e:a9:41:20:d4:40:26:cc:bc:04:30:b6:4b:08:
                    66:bf:fa:3b:7a:3e:17:77:22:0b:07:71:97:e4:d3:
                    42:ba:15:c1:e9:fd:a8:a3:f8:38:a5:b5:e6:e7:9f:
                    39:0a:54:6c:fe:74:be:57:14:0e:20:65:c7:d9:44:
                    86:c0:fd:e1:8b:c5:4d:8e:84:44:9e:e0:c3:28:43:
                    d6:f4:08:73:d5:b9:cf:18:71:ea:2c:64:c6:47:50:
                    7f:0f:e3:e8:54:0b:de:5f:53:8c:c6:e8:50:9f:97:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:5F:1E:FE:BA:3A:9B:B8:99:80:D2:64:C2:CD:74:CF:EC:65:36
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:3b:15:7c:c6:2e:e2:9a:9b:4b:fb:83:f6:98:64:8e:40:
         e7:d9:29:b8:25:49:85:fe:1b:e9:05:9e:e8:4e:6b:47:63:8c:
         a9:96:9f:1e:9b:2e:c7:db:f6:f8:f4:9f:59:67:27:b6:63:56:
         e6:38:9d:ec:3f:a1:21:17:58:d2:88:7f:2e:8f:1b:a7:65:5d:
         0a:ed:76:6c:76:17:88:77:2d:c7:ec:86:fb:85:2b:4c:6d:69:
         8d:43:5e:52:17:97:d1:62:e5:1b:65:4c:f5:ea:ea:b2:34:6f:
         51:d7:30:3a:12:57:a8:9a:97:44:12:6b:9b:35:f3:c2:ef:9f:
         78:ad:26:e6:fb:cd:63:7a:30:0e:a2:45:ee:ee:a7:ce:2b:65:
         bd:c2:db:d1:a2:e8:b8:e8:24:b6:62:35:7a:c3:11:df:1a:64:
         9c:6b:86:de:bf:e9:d0:85:89:27:fc:80:0c:98:2d:ce:60:05:
         1b:a1:4b:58:60:1b:fd:ce:07:72:ca:7e:9e:83:d7:d2:31:b8:
         38:1c:cb:4e:e3:0b:96:9b:df:be:a0:84:83:01:42:25:ca:3b:
         03:1b:e4:bf:24:51:0f:80:78:27:17:0a:5f:c8:04:03:6b:2c:
         70:31:6c:a0:6a:73:61:33:ba:7f:7f:d0:b4:50:01:bf:9c:78:
         27:08:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:24:45 2025 by rpki-client