Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
File:                     B882C1C7F7853B50794B0D38584713A2C1528F9D.mft (raw, json)
Hash identifier:          qFhTnlrq7sUX+woZ1VUDzlFJPoEicNc6EuqOv13xSFw=
Subject key identifier:   94:0B:9B:D4:4B:97:F1:F7:0B:55:AE:75:25:03:23:95:C3:B1:9A:62
Authority key identifier: B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Certificate issuer:       /CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
Certificate serial:       0474CCD4D0A60306D3FC1E7D7193F6F19BCF9BD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
Manifest number:          018E
Signing time:             Fri 31 Jan 2025 18:30:53 +0000
Manifest this update:     Fri 31 Jan 2025 18:25:53 +0000
Manifest next update:     Sat 01 Feb 2025 22:02:53 +0000
Files and hashes:         1: B882C1C7F7853B50794B0D38584713A2C1528F9D.crl (hash: lfhQEhRPdfdsoBW4yy/J2kfVS0M1oGVHdgDjA3njsIA=)
                          2: 323830343a366335633a3a2f33322d3438203d3e20323730343633.roa (hash: cW2GC3LwKS4CCt3NthqPtexL8a0yTApqRvDyZsCD9Us=)
                          3: 3230302e38312e34382e302f32322d3234203d3e20323730343633.roa (hash: rD/f3tJIZUTn89W6tNjoIAG4nN0SyLKOfnPTbcol+vI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:74:cc:d4:d0:a6:03:06:d3:fc:1e:7d:71:93:f6:f1:9b:cf:9b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Validity
            Not Before: Jan 31 18:25:53 2025 GMT
            Not After : Feb  1 22:02:53 2025 GMT
        Subject: CN=940B9BD44B97F1F70B55AE7525032395C3B19A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:32:6d:07:d8:38:d6:bc:25:31:ee:2c:6c:
                    c7:92:a9:ee:22:78:66:b9:fa:2b:e4:dc:fc:40:ce:
                    e7:90:af:6c:9a:84:00:52:cf:7b:5a:1e:55:d5:a7:
                    6d:36:43:fd:0a:00:09:db:28:81:aa:bc:de:bb:31:
                    3d:d3:78:1d:2e:6b:34:98:c3:38:bf:1d:c4:39:61:
                    04:b0:70:37:21:da:a1:82:3b:22:c8:60:4f:b1:09:
                    d9:16:8a:6b:5b:41:36:e0:53:85:25:b2:1f:7e:6b:
                    46:45:d3:25:74:1d:e9:3b:ae:62:e0:bf:44:06:78:
                    26:f8:40:8e:49:a9:28:de:72:59:7e:f1:b1:ed:d8:
                    b3:18:6e:d8:3e:7f:9e:9a:f9:a7:91:9c:b1:61:16:
                    ee:3c:25:fd:c6:93:62:d6:80:da:eb:37:bb:13:27:
                    d4:49:dc:cc:28:c7:d5:ee:da:7e:92:6e:ec:78:d6:
                    f8:3d:e6:b4:17:56:af:d6:3d:2b:b0:21:00:50:46:
                    2a:a6:dd:a4:bb:4e:ba:89:9f:f2:fe:08:ea:47:57:
                    d0:e1:68:2a:73:17:e9:f5:8c:d8:da:4c:3c:51:4a:
                    fc:55:06:62:4e:46:84:95:45:cd:c4:25:81:dc:76:
                    d1:8f:d9:d1:b1:57:6a:3d:7f:50:07:fe:2c:dc:e1:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:9B:D4:4B:97:F1:F7:0B:55:AE:75:25:03:23:95:C3:B1:9A:62
            X509v3 Authority Key Identifier:
                keyid:B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:ca:01:3c:2e:b7:09:83:23:c0:d7:78:65:d4:dc:0e:ff:
         8a:ed:24:aa:bc:27:6a:46:7f:7c:66:e3:c0:4d:07:d6:f9:dc:
         82:25:7f:6b:d2:e6:d0:88:47:89:1a:aa:80:1f:38:9b:cf:ce:
         cc:55:a2:08:0a:c8:af:a1:e2:94:2f:3c:e7:5d:1b:94:76:3b:
         0d:f0:e7:7f:e0:3c:ad:5b:dc:ee:ca:e4:85:b6:ba:6e:e6:db:
         fa:94:8d:43:d4:52:d6:e6:7b:9d:1a:b9:0d:bd:89:8b:fa:97:
         2c:31:35:0c:be:3b:c2:09:29:7c:5d:c5:a0:e7:b7:58:38:9d:
         24:20:1e:e5:c4:d4:cb:14:fd:b5:c8:7e:8e:8f:9a:66:b0:c5:
         83:05:f9:d8:d3:22:3c:b6:f9:fb:b1:5f:d4:ea:b4:fd:64:9f:
         21:c5:2a:4c:57:bd:13:db:04:94:44:51:6d:7d:08:5c:6f:1b:
         e3:44:75:7f:f8:10:17:1b:70:99:6c:75:1b:ac:2f:f3:5e:9e:
         81:fa:4f:58:cf:c0:1c:b0:0e:f9:c3:0d:f5:12:73:52:14:de:
         b8:50:27:93:ca:a5:a8:e8:1c:64:39:04:3f:a1:2c:98:a3:29:
         ae:9e:5a:92:c4:f3:71:72:b0:42:19:f3:31:30:25:f3:14:75:
         bb:ec:73:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:31:47 2025 by rpki-client