Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
File:                     4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft (raw, json)
Hash identifier:          S8ZlXDlhtMmt7A9cO8ujIIetyseh/4BsNhW97D1Rywk=
Subject key identifier:   8F:B2:1D:42:F5:49:D6:DF:89:1B:26:0C:F8:10:B5:14:C4:B0:4B:08
Authority key identifier: 44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Certificate issuer:       /CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
Certificate serial:       29223A9076F5AF43529B19E338DE1F34AA760C20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
Manifest number:          0125
Signing time:             Fri 31 Jan 2025 08:10:34 +0000
Manifest this update:     Fri 31 Jan 2025 08:05:34 +0000
Manifest next update:     Sat 01 Feb 2025 08:19:34 +0000
Files and hashes:         1: 323830343a323866303a3a2f33322d3438203d3e20323633393838.roa (hash: CNSiPZGBlk65kH20c/vdEjZH9+zgo5TUnbuR7jonKnY=)
                          2: 3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa (hash: OVxMDWXAJB7PFllqGB4IgZMiArNi391X7BhcXiUdHAM=)
                          3: 4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl (hash: OFOQKUGOVcrFysJ7S5a528oBcqNIAibJSKEGN3VsOII=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:22:3a:90:76:f5:af:43:52:9b:19:e3:38:de:1f:34:aa:76:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Validity
            Not Before: Jan 31 08:05:34 2025 GMT
            Not After : Feb  1 08:19:34 2025 GMT
        Subject: CN=8FB21D42F549D6DF891B260CF810B514C4B04B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:ea:fb:2a:38:67:a5:07:99:be:bb:60:4a:
                    0d:42:df:01:0a:96:ff:99:45:03:97:8f:70:db:47:
                    b4:39:51:a2:52:df:1c:75:eb:e4:66:80:76:77:b7:
                    6e:c2:7e:f0:c0:c1:3d:1e:00:00:38:e4:8f:1b:d6:
                    85:85:f0:e4:2c:e3:98:f6:fa:76:29:9a:ea:88:e0:
                    20:57:f3:60:4e:9d:c4:7a:2d:dd:61:8a:ce:a5:fa:
                    a8:af:86:02:e4:ba:cf:63:85:b6:5e:bf:19:ff:88:
                    a0:47:63:71:6d:09:49:b3:b0:95:a7:8b:f2:c2:15:
                    a4:89:89:5c:cd:4a:7d:cc:58:60:a0:38:cc:ae:05:
                    dc:eb:4c:63:2a:7f:3e:89:4e:a8:46:a7:d7:9a:40:
                    db:41:d8:1c:b3:7d:72:06:95:99:c5:9e:20:b9:f6:
                    8c:56:1c:89:51:f6:ae:9c:0a:45:46:07:d7:20:ff:
                    eb:f8:a9:77:99:40:b5:1d:d0:2e:02:75:49:27:f2:
                    77:d0:44:7a:4a:e4:2c:ea:34:bf:54:1c:37:d5:c4:
                    fe:ad:7f:2c:c2:de:b4:05:3c:82:70:98:8d:7b:3f:
                    9c:57:77:c7:7f:63:56:03:25:b8:1d:25:90:1f:c2:
                    79:ae:cb:76:f2:54:26:82:d9:5e:8e:cb:93:11:85:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B2:1D:42:F5:49:D6:DF:89:1B:26:0C:F8:10:B5:14:C4:B0:4B:08
            X509v3 Authority Key Identifier:
                keyid:44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:87:ab:21:8d:7c:5e:07:28:db:98:01:51:64:bd:8d:11:
         74:83:ad:87:d4:5a:e1:d7:80:91:1f:93:2a:df:82:67:a9:f1:
         87:80:90:07:af:9a:92:ec:00:35:d7:fb:0b:53:da:58:bf:39:
         63:1e:75:9b:f8:9e:8d:1f:cd:7b:6b:fc:aa:e2:84:83:f3:3e:
         5e:00:8d:d0:8b:d9:61:55:2f:16:4f:d5:dd:42:33:5b:29:48:
         ca:ef:b8:34:f4:5e:81:03:28:11:eb:1a:13:b7:45:a8:8c:a4:
         94:a9:86:59:60:3f:51:42:5c:ff:cd:15:1e:2d:16:cf:f3:a0:
         33:f1:1f:ca:8b:2f:e6:7c:cc:44:d5:5a:63:20:ad:fa:c4:54:
         48:2e:62:bd:22:40:9e:b7:55:c4:d4:6a:6a:24:bd:5b:88:88:
         20:6a:b6:d6:3b:a1:96:92:a7:d1:65:e4:54:17:a6:17:5b:40:
         59:08:cd:07:36:c5:fb:ea:0d:62:29:db:8c:17:56:45:77:f7:
         0f:e7:56:22:6f:90:d3:7c:3a:3a:66:82:08:db:c5:a7:8d:31:
         da:11:78:0a:13:08:3e:82:76:16:fa:86:eb:3a:b2:d9:a5:20:
         6b:00:4f:ff:af:2b:35:b0:6a:46:40:77:8f:47:c9:1c:31:a4:
         7a:2b:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:54:59 2025 by rpki-client