Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
File:                     1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft (raw, json)
Hash identifier:          ImqRWjNOmZhUhX9U8odNzRew9ba9MnKgfAnzwrx4LfY=
Subject key identifier:   0F:0D:D6:FA:DF:BF:EE:33:42:D1:8C:1E:BF:81:B2:E1:76:92:A6:80
Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
Certificate issuer:       /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Certificate serial:       5F24B0104984A04C4EBF6A2C47EF6768B5A3F90D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft
Manifest number:          77
Signing time:             Fri 31 Jan 2025 02:44:21 +0000
Manifest this update:     Fri 31 Jan 2025 02:39:21 +0000
Manifest next update:     Sat 01 Feb 2025 04:15:21 +0000
Files and hashes:         1: 323830343a346530383a3a2f33322d3634203d3e20323638323335.roa (hash: eCej0gsTKHhZ/bD47zC2+gQ3Xlnxw5OoK22UGnp13H4=)
                          2: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl (hash: e2FIgZCqeVt7iVBo6dvgaP0fQUD/3SZQkxK0yXZVE44=)
                          3: 34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (hash: pmKnELDCeIcwFqm2hi+zVwcojacSTKFeGWh2eh31koY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:24:b0:10:49:84:a0:4c:4e:bf:6a:2c:47:ef:67:68:b5:a3:f9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
        Validity
            Not Before: Jan 31 02:39:21 2025 GMT
            Not After : Feb  1 04:15:21 2025 GMT
        Subject: CN=0F0DD6FADFBFEE3342D18C1EBF81B2E17692A680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:ec:38:bc:de:b7:45:28:ae:20:49:50:2b:
                    02:49:97:b1:c1:d6:40:8c:65:32:d0:50:64:16:06:
                    ce:f4:8e:1e:b8:85:11:b0:71:26:fd:87:da:da:c9:
                    8c:b3:55:31:f8:e4:09:74:16:ca:98:95:a2:19:96:
                    bd:c5:86:8a:95:ef:14:77:61:80:48:80:86:a9:05:
                    bd:24:c5:7a:d5:56:7d:24:56:8b:18:e1:68:5e:f7:
                    03:8b:26:22:81:c6:51:9c:72:a9:14:1e:0c:e4:2b:
                    51:7f:e3:0a:57:ae:30:9f:33:cf:03:f9:5e:48:4a:
                    46:b6:e6:1c:78:3d:25:91:4b:ac:5f:5e:aa:d2:71:
                    1f:aa:44:df:e3:77:68:78:2e:d4:ae:72:bb:3f:1b:
                    91:95:b9:0d:0b:17:32:04:cd:c8:92:58:5a:e8:d3:
                    2d:da:ef:59:11:12:a3:bc:d4:17:0e:46:ce:5b:c5:
                    b2:0b:26:a2:18:68:79:7c:4a:ef:51:4e:12:5c:31:
                    fb:7a:e3:89:24:a6:81:4f:62:41:27:71:da:32:d8:
                    21:c8:22:9b:4e:d2:48:50:fc:49:b2:ee:5e:45:fe:
                    45:36:0e:19:73:82:85:c6:dc:9c:07:9e:ff:d2:be:
                    61:d1:95:f9:9e:cd:2f:fa:a4:c8:d6:41:c5:cf:cf:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:D6:FA:DF:BF:EE:33:42:D1:8C:1E:BF:81:B2:E1:76:92:A6:80
            X509v3 Authority Key Identifier:
                keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:45:a1:9f:fa:6e:7c:b5:50:17:d6:aa:f1:68:d3:20:df:a3:
         73:3a:bd:b0:28:bb:ed:fe:25:78:53:0a:96:e5:6e:15:8e:29:
         f0:39:6d:b1:f0:28:75:60:73:92:ca:01:3d:dd:32:8d:6d:dc:
         3f:54:59:c5:10:c0:55:df:cc:47:19:4f:e8:18:2e:ff:f7:5d:
         05:f0:37:6c:eb:23:7a:fe:14:a5:65:f5:dc:54:ee:59:5f:70:
         79:88:8e:3f:d2:a4:4f:da:9e:65:a0:07:0d:40:51:e4:bb:e9:
         9f:81:31:cc:50:f8:63:5e:49:66:91:47:f1:0a:18:b3:a6:3b:
         ea:48:d0:70:1e:48:c4:cc:81:cc:c7:e2:ca:a7:79:b3:c8:59:
         a3:ac:6d:20:43:fd:c6:04:38:51:5c:5a:b8:e6:76:fa:c2:dd:
         ce:52:ee:e7:48:ab:13:f9:8a:aa:37:4d:ab:df:89:28:3a:4d:
         13:57:cb:32:c5:ad:10:25:f9:a9:7f:03:43:97:38:ee:81:eb:
         38:71:48:97:2b:f7:8b:5b:bf:8c:0e:ff:2b:a3:5d:c1:9d:d6:
         28:a9:5a:1b:85:30:03:84:05:20:98:01:aa:7c:43:a1:3c:6a:
         28:79:a5:9a:78:ec:21:ee:68:f1:d0:fe:d9:75:e7:5d:06:c7:
         2e:f0:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:35:59 2025 by rpki-client