Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
File:                     D968B6511EF07778C01FA7FFE031522476B79B01.mft (raw, json)
Hash identifier:          bmbiMGDTJfjLQLXOc34tnRQFAsWPcwvetlO/4dQbPzs=
Subject key identifier:   ED:66:4C:C0:4A:14:BE:BB:0E:EA:EF:CD:F7:AA:04:2F:B3:B3:08:3F
Authority key identifier: D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01
Certificate issuer:       /CN=D968B6511EF07778C01FA7FFE031522476B79B01
Certificate serial:       21127EB1D600E4513840DC9E7D200FB99F9D1BB1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
Manifest number:          40
Signing time:             Fri 31 Jan 2025 18:47:24 +0000
Manifest this update:     Fri 31 Jan 2025 18:42:24 +0000
Manifest next update:     Sat 01 Feb 2025 22:06:24 +0000
Files and hashes:         1: 3138362e3232342e36342e302f32302d3234203d3e203238313432.roa (hash: s1bish16GUITfrg14wggTBPCqTEjnEqqg4bEoGxSHLA=)
                          2: 3138372e34392e38302e302f32302d3234203d3e203238313432.roa (hash: cOC6wpDgwlK785HxZmNdjkArXLVALB58elsD/EktsBQ=)
                          3: 3137372e33392e3133392e302f32342d3234203d3e20323632343330.roa (hash: Vpt2lSSGQZ+zqcZFwvwSQntN1abmi/oLWyJMDj5FYY0=)
                          4: 3137372e33392e3133382e302f32342d3234203d3e20323632343330.roa (hash: Als/7Mh8bNibakh3eLi2jwPgshDdg8AAeramgxjF7NI=)
                          5: 323830343a66633a3a2f33322d3434203d3e203238313432.roa (hash: 1f9wdSXWLrHq1vQh7K1Q83yr9H2uocoOEKtzoCeEC84=)
                          6: D968B6511EF07778C01FA7FFE031522476B79B01.crl (hash: r1Rod6+37uiWqC84217KxShTTFeohqZowBrhgOdexbs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:12:7e:b1:d6:00:e4:51:38:40:dc:9e:7d:20:0f:b9:9f:9d:1b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D968B6511EF07778C01FA7FFE031522476B79B01
        Validity
            Not Before: Jan 31 18:42:24 2025 GMT
            Not After : Feb  1 22:06:24 2025 GMT
        Subject: CN=ED664CC04A14BEBB0EEAEFCDF7AA042FB3B3083F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:37:67:1b:f4:23:bd:09:af:6e:aa:4e:09:fe:
                    56:a7:2a:44:4c:a6:0b:e9:f6:ff:3f:04:2b:5e:9d:
                    b3:20:a6:c4:79:4d:45:3e:70:c2:7a:04:e9:1d:3e:
                    5f:ad:3a:d6:03:0f:53:47:26:4a:88:63:1d:82:ee:
                    1b:cc:bf:06:38:99:4c:0a:05:d3:fd:78:11:8d:a1:
                    30:50:e2:94:e5:04:04:44:dc:79:47:67:cf:eb:2b:
                    95:da:57:1b:76:7b:68:17:33:eb:4a:ee:74:48:ba:
                    1b:c7:e0:02:04:61:0b:b5:72:60:5b:2d:9f:3a:d3:
                    d2:10:e0:a5:59:ce:85:75:84:b2:84:33:40:a8:f4:
                    9f:39:86:7f:3a:3d:d0:7b:64:10:70:83:db:62:d7:
                    dd:00:22:55:75:34:02:17:5c:02:c4:77:15:1a:a6:
                    5e:1b:22:dd:25:77:05:51:b3:c5:c1:48:11:39:73:
                    42:9e:8f:b8:eb:fe:4a:84:51:c8:1d:ae:3d:16:ff:
                    6c:68:a4:b9:ab:df:1b:fc:53:c8:dc:be:7e:a3:d2:
                    8f:06:73:e2:e1:a4:20:1a:4d:63:d9:68:b8:32:fc:
                    13:76:de:0c:7a:5f:ef:29:f5:b5:67:0c:56:0c:51:
                    a5:46:91:2f:86:f9:23:ba:c6:da:60:bd:36:f3:bf:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:66:4C:C0:4A:14:BE:BB:0E:EA:EF:CD:F7:AA:04:2F:B3:B3:08:3F
            X509v3 Authority Key Identifier:
                keyid:D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:38:b6:4c:e1:94:39:cb:03:e7:d0:19:07:df:69:0e:55:35:
         c6:9e:47:ed:a9:bf:ce:8d:05:ba:ff:51:24:42:ff:49:8e:64:
         61:1d:68:a2:2c:44:3d:ba:b6:6d:c0:02:d9:26:3b:ac:dc:33:
         65:8b:d0:f6:12:4c:75:c5:51:1b:50:3d:53:7c:46:0e:e4:5e:
         6c:ab:b8:bd:99:cf:0b:26:a4:f6:d4:18:51:70:1a:e1:eb:66:
         40:bb:3d:b3:38:b7:0f:da:50:8c:73:fb:54:e7:8b:bc:7e:5b:
         2c:08:f4:18:ee:4b:d8:df:48:ad:27:46:be:ea:1f:65:6f:f7:
         04:14:9a:1f:55:55:26:b5:d3:f1:f8:23:88:70:05:95:e2:0a:
         1f:e7:96:83:7a:cf:0e:ab:a2:98:ce:27:e4:e1:7b:51:16:e2:
         0a:d5:ce:72:68:f5:3f:d7:83:3a:c3:45:c9:9c:7e:d1:d7:0d:
         2d:aa:a8:b0:70:65:83:dd:32:5a:e2:48:64:f8:41:ad:10:21:
         64:14:e4:07:a9:ad:21:12:30:89:5e:20:20:7b:8e:49:f1:5e:
         3f:ff:d7:ab:8e:d0:9a:e5:34:1d:dd:ba:42:25:e6:1d:19:1f:
         34:65:63:54:41:39:9f:71:3c:07:cf:e4:6e:aa:ed:c2:d8:ba:
         20:40:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:41 2025 by rpki-client