Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
File:                     ACEF8FA1F536657A209246B168B346C65044943D.mft (raw, json)
Hash identifier:          RiLizTsADZENVxZ+hoJibLE4yNio+KzKsCzBlpQZkdo=
Subject key identifier:   37:C4:3A:01:73:CB:6E:6B:8B:7A:3E:6E:CE:AB:B5:32:D5:A9:05:21
Authority key identifier: AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D
Certificate issuer:       /CN=ACEF8FA1F536657A209246B168B346C65044943D
Certificate serial:       6A722128305281B2BB68204A2D7482F24320D869
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft
Manifest number:          41
Signing time:             Fri 31 Jan 2025 05:09:10 +0000
Manifest this update:     Fri 31 Jan 2025 05:04:10 +0000
Manifest next update:     Sat 01 Feb 2025 08:55:10 +0000
Files and hashes:         1: ACEF8FA1F536657A209246B168B346C65044943D.crl (hash: LKsnLj39kS8pbul09sE5iKm/1YO0k9T+8rYFkAP/sJI=)
                          2: 3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (hash: TBwSy73qtrScmk/PP7f06F3Y4Xu4YlC+LHiWpwlAcPk=)
                          3: 323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (hash: pEdY0WORsMoto3D0l6iQyl4uwPycDlwz4UUbyVDxv74=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:72:21:28:30:52:81:b2:bb:68:20:4a:2d:74:82:f2:43:20:d8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACEF8FA1F536657A209246B168B346C65044943D
        Validity
            Not Before: Jan 31 05:04:10 2025 GMT
            Not After : Feb  1 08:55:10 2025 GMT
        Subject: CN=37C43A0173CB6E6B8B7A3E6ECEABB532D5A90521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:b2:6c:ba:c5:5b:e0:01:58:0d:27:4a:82:
                    68:09:7a:48:51:5d:9f:d0:ac:d8:d0:ea:12:76:16:
                    29:ea:b9:5d:12:06:e1:7b:fc:09:7b:72:69:98:5f:
                    9f:34:97:2d:75:a6:b5:c1:55:70:12:f6:01:e8:37:
                    aa:33:2c:ce:d8:83:f8:a3:60:80:2e:42:d9:3e:7a:
                    1e:7c:7a:c3:09:60:da:c8:96:fc:db:a7:e5:10:5f:
                    9c:73:e0:78:3e:9d:ab:5d:53:cd:3c:aa:ea:3c:36:
                    b1:05:33:7b:94:50:80:e3:83:e0:53:7e:85:cb:30:
                    1d:6a:c6:4b:d3:2b:e0:ca:f9:3d:75:91:32:65:35:
                    47:7d:d8:46:c3:c0:10:c0:7a:7d:ec:06:4d:03:ad:
                    c8:26:4e:71:b6:3f:3d:21:49:ff:30:11:53:30:af:
                    16:4e:c7:ca:e1:4c:ff:dc:8a:93:85:76:77:d6:e7:
                    96:48:47:e7:a0:8e:12:e2:49:b2:ce:81:df:05:42:
                    d3:a2:3d:06:9c:46:74:f6:fc:1e:81:8b:3b:73:60:
                    3a:45:63:6f:27:5c:bd:4a:08:b4:d8:eb:24:5a:34:
                    cb:b1:8d:a1:63:b7:00:ff:78:ae:af:83:b5:87:49:
                    2f:91:89:15:06:07:03:fc:5e:df:3f:49:ef:67:00:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:3A:01:73:CB:6E:6B:8B:7A:3E:6E:CE:AB:B5:32:D5:A9:05:21
            X509v3 Authority Key Identifier:
                keyid:AC:EF:8F:A1:F5:36:65:7A:20:92:46:B1:68:B3:46:C6:50:44:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACEF8FA1F536657A209246B168B346C65044943D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/ACEF8FA1F536657A209246B168B346C65044943D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:09:22:8a:a5:b4:c6:a4:af:b5:3b:4b:e9:c3:c5:e2:bb:0d:
         fd:e4:43:64:be:bc:e8:8d:69:66:cb:f7:8d:15:19:c3:62:1a:
         91:91:d1:17:34:02:62:f0:32:0f:50:6d:bd:fe:31:2a:50:0c:
         9b:77:2a:cd:7c:d0:7e:94:a6:03:1b:6c:18:36:5b:ca:12:09:
         33:9f:a2:8a:01:bf:75:d4:1e:d7:59:d5:00:c0:36:92:ad:1d:
         3b:39:fe:0e:1c:63:67:1f:61:08:a3:36:a5:b9:60:c0:50:c3:
         fc:00:63:81:e3:74:1e:f9:5f:e3:f5:7a:72:0c:b1:e7:af:0e:
         f1:33:19:dd:ca:b4:bd:2f:ab:84:d2:a2:9e:15:ce:04:d0:07:
         36:ac:a6:09:c1:62:48:b8:7b:ff:8a:2f:cf:8b:ab:79:8e:71:
         56:dd:db:3e:08:d8:d3:5a:c0:1c:cc:6d:73:17:ed:0b:bb:c2:
         74:8a:85:54:5b:26:86:46:f5:b3:4d:d6:99:c9:33:36:46:9f:
         11:93:d3:10:1d:46:a6:62:d3:94:6d:ab:7f:ba:72:fc:69:e6:
         1d:3e:d3:63:66:76:54:27:2a:b4:3b:91:00:60:19:d1:8c:91:
         f2:9b:92:7c:61:37:5f:be:f8:55:f9:46:53:6a:ed:13:c7:a2:
         a3:37:13:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:35:17 2025 by rpki-client