Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft
File:                     C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft (raw, json)
Hash identifier:          oijgulThz5flPwX+cO4Wg/Pv8NKyKQTkqzT610DVJYU=
Subject key identifier:   13:28:A5:DD:1B:A9:58:6E:4B:78:0B:43:5E:4B:94:CD:5F:CF:D5:C6
Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C
Certificate issuer:       /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
Certificate serial:       10CB90F9C0711C7DC7903C76F21ED440BB825E98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft
Manifest number:          0108
Signing time:             Fri 31 Jan 2025 09:10:18 +0000
Manifest this update:     Fri 31 Jan 2025 09:05:18 +0000
Manifest next update:     Sat 01 Feb 2025 09:20:18 +0000
Files and hashes:         1: 323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (hash: E66P1l9jzzJdEsrTZbqJ7bxSjri6PncXAOZ62gwdjGQ=)
                          2: 3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (hash: pugPYIyMrC30NPoVL12+m3xp38Sq75tBlDocivxEfKI=)
                          3: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl (hash: 60VjjzI/itcS4EaULSJy9Tt7dMCn4IZZ6n85FcyvKP4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cb:90:f9:c0:71:1c:7d:c7:90:3c:76:f2:1e:d4:40:bb:82:5e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
        Validity
            Not Before: Jan 31 09:05:18 2025 GMT
            Not After : Feb  1 09:20:18 2025 GMT
        Subject: CN=1328A5DD1BA9586E4B780B435E4B94CD5FCFD5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:5b:82:cd:d1:ae:8a:d9:05:76:0d:8b:fa:
                    ff:06:c0:cd:1e:af:d1:ab:ac:78:77:0e:55:bc:1e:
                    fd:b1:69:50:b9:ac:13:cd:52:22:37:45:13:34:a1:
                    af:ea:a9:4f:a3:9d:c4:9e:82:a9:bb:e8:23:1e:55:
                    9b:f3:6a:73:bf:46:47:7c:94:de:4a:ec:63:03:a2:
                    db:bb:ab:66:de:ab:62:49:6b:a8:1c:35:12:59:14:
                    fb:78:54:c1:23:60:80:07:8b:9d:a7:44:fc:6b:79:
                    57:98:9c:9e:6e:f0:b2:d3:fb:ed:98:4a:93:29:e2:
                    89:32:11:fe:8e:14:e2:d5:22:35:c0:0c:6b:fe:66:
                    a9:21:33:b9:64:87:85:52:53:cd:1a:17:cc:5c:bd:
                    65:73:7d:d1:00:31:ab:c0:bf:01:38:56:ba:00:18:
                    70:9c:db:d9:ce:dd:68:ca:2a:b9:c4:34:8f:90:94:
                    38:f9:34:23:12:a7:3d:2b:f0:0c:7f:af:a6:cb:62:
                    35:7b:a3:ac:6e:9f:79:4d:5f:14:02:94:b6:cd:a8:
                    f0:69:5c:e3:56:e9:ca:ca:2a:f1:46:b4:6c:81:95:
                    65:44:24:0d:80:fb:5e:5b:3a:25:a7:9f:7e:88:56:
                    41:f1:83:05:10:12:18:bf:67:3f:03:09:73:ea:23:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:28:A5:DD:1B:A9:58:6E:4B:78:0B:43:5E:4B:94:CD:5F:CF:D5:C6
            X509v3 Authority Key Identifier:
                keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fb:7b:ee:0d:ae:9b:48:41:3a:09:67:6c:fa:6e:1d:5b:61:
         58:14:c5:46:4f:99:3e:2d:fa:6b:24:c8:b8:9f:42:a0:5a:f3:
         6d:2b:0e:bc:2d:25:e5:4b:71:7b:f4:ec:c0:6c:82:5c:43:d9:
         4f:9f:71:69:21:44:4c:ca:c9:f4:6e:31:2b:0d:00:ef:cb:07:
         08:f7:dc:9d:75:e0:8b:40:f4:0e:1c:3d:63:95:f4:ea:24:e3:
         d5:bb:55:08:1d:ac:97:e1:39:af:13:91:e5:90:f3:e1:41:f3:
         f4:60:98:d1:6c:94:33:3b:c1:ad:e8:26:0a:ea:b8:b1:bd:a6:
         f4:ba:cc:c7:22:53:05:94:57:05:b8:83:d2:b4:d9:d9:3b:00:
         e3:1d:5a:fc:6a:68:7c:67:6b:54:aa:c8:e4:3e:9d:f4:24:f6:
         ff:ad:05:1e:d4:ff:50:71:37:00:17:03:9e:62:8b:5b:1b:b4:
         af:cf:28:df:67:14:d7:03:8e:65:fd:5b:85:46:99:61:30:96:
         23:53:40:ae:6e:d7:8a:14:12:f7:d2:1d:31:cb:3c:e1:db:b5:
         34:c0:92:3a:33:0a:48:31:d5:14:30:ce:11:d7:57:f4:16:49:
         63:7e:6f:f0:e3:9c:2b:83:1d:43:08:ad:8b:c3:7f:b4:f5:53:
         fe:11:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:14:17 2025 by rpki-client