Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
File:                     35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json)
Hash identifier:          +Z4P3ibvqsidoEMwCbYNqDhXze8kedTvMti/mXYtOaU=
Subject key identifier:   B6:53:08:54:A1:75:CC:A6:9C:DB:F5:0D:80:1B:67:EB:E2:A9:3F:53
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Certificate issuer:       /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial:       11DE7AF759BF121F43DC007C5EB4B10D5300D8D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 07:50:24 +0000
Manifest this update:     Fri 31 Jan 2025 07:45:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:43:24 +0000
Files and hashes:         1: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: gPxuhrEvN59eqtwT4Mqo36xrjK9UOYuNNB4/Am9acho=)
                          2: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: vSjWFyLCbxRNnAIpFNo09HS9XE2sFQ0xO8i2PGP88MM=)
                          3: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: Z1yESvf7E+Or/7zaqe9MGyd4pATU0fGXGWDrLoFcg0g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:7a:f7:59:bf:12:1f:43:dc:00:7c:5e:b4:b1:0d:53:00:d8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
        Validity
            Not Before: Jan 31 07:45:24 2025 GMT
            Not After : Feb  1 10:43:24 2025 GMT
        Subject: CN=B6530854A175CCA69CDBF50D801B67EBE2A93F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:a2:6c:c3:74:cc:9b:4a:96:63:fc:a4:fe:
                    7b:d2:f7:05:9c:64:5d:30:9f:c8:d2:d4:68:36:d3:
                    cc:cd:b7:4c:31:8a:02:9d:e4:a1:81:14:b2:9f:92:
                    b7:4b:50:3a:2f:46:61:50:94:1c:04:fe:63:62:a4:
                    32:db:95:a3:2b:d4:44:9a:17:36:de:f9:8f:b5:c9:
                    41:88:7c:44:87:ed:d2:73:b0:1c:0a:e7:75:7a:a2:
                    f3:bf:ed:f0:c2:ed:e1:32:db:dc:c6:aa:1d:60:f9:
                    39:8e:7f:04:e5:9b:fa:b4:a3:d6:e3:27:20:77:7d:
                    d8:d9:5f:4d:dc:be:ba:30:f2:9c:80:72:dd:30:24:
                    36:6b:a0:e6:bd:f4:5c:4f:d0:15:13:9d:dd:26:85:
                    4d:b9:3d:7b:00:bf:0f:0b:04:3a:1e:17:0f:f8:7b:
                    10:78:27:a1:c5:a3:58:1b:1d:fc:58:f8:22:a9:1c:
                    d3:02:a5:ed:01:f9:6d:47:83:28:48:4a:78:d3:14:
                    2d:27:cc:9b:39:d8:65:a6:34:90:41:b2:8f:77:e6:
                    24:d6:e5:f4:b7:23:21:40:e4:8d:49:b8:34:18:53:
                    58:ed:57:d1:ea:ce:b7:6d:87:fe:27:50:cf:eb:33:
                    22:f3:73:60:79:6a:ee:16:78:f1:71:95:8b:72:84:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:08:54:A1:75:CC:A6:9C:DB:F5:0D:80:1B:67:EB:E2:A9:3F:53
            X509v3 Authority Key Identifier:
                keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:02:20:66:22:1d:91:39:a2:9d:14:a6:c5:b3:15:65:60:c3:
         fc:ad:47:a3:3c:5b:ba:ed:04:a3:c4:2c:ca:ce:f7:a1:0b:13:
         b4:bb:08:cf:2d:d1:a7:54:8f:f1:ec:e8:dd:f1:d7:44:3c:c7:
         1e:44:be:9c:3a:d7:6c:ac:ea:02:34:cf:11:bd:66:a3:a5:c4:
         9a:a9:f6:30:df:1b:df:01:93:c3:18:d7:b7:d5:16:c5:ae:58:
         1a:54:80:92:25:c9:24:a9:0b:05:66:ff:11:ee:29:81:68:69:
         10:53:76:e9:0a:13:d8:62:35:68:f1:ec:b4:5e:64:39:2d:24:
         04:51:00:2a:71:13:1e:31:7b:0f:6c:54:58:d2:5c:ee:db:78:
         3b:c4:a9:c4:80:b6:77:08:81:9e:40:5c:f3:88:48:e0:e4:b7:
         fa:84:cf:f4:71:9b:fb:79:62:49:28:8d:04:7d:3a:8e:ad:5b:
         ec:ae:3c:4c:10:7f:ca:e1:aa:15:6c:83:ae:84:d5:35:6f:ed:
         14:2c:30:61:5c:1a:7b:14:9c:e5:16:c0:d2:8d:57:16:1d:6a:
         da:a8:76:81:97:d2:47:37:a0:93:46:dc:31:11:7d:05:6e:5a:
         f1:2e:e2:b3:84:71:ff:79:ba:6f:5b:14:bb:0d:6e:61:f0:0e:
         ea:be:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:48:03 2025 by rpki-client