Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
File:                     4D2990768E393F68FA14BF3F1F2B973208903FBC.mft (raw, json)
Hash identifier:          OnhKgmBKI53v3tRIWfU9ztfTbPsrsqdv7tmsdiOmTSE=
Subject key identifier:   9D:EE:57:A8:82:62:71:33:DE:E6:58:1E:7F:EA:FB:51:E2:F2:99:FE
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       50062773273A184492B521E4476E2561E5C7A807
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
Manifest number:          66
Signing time:             Fri 31 Jan 2025 09:58:05 +0000
Manifest this update:     Fri 31 Jan 2025 09:53:05 +0000
Manifest next update:     Sat 01 Feb 2025 10:39:05 +0000
Files and hashes:         1: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=)
                          2: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=)
                          3: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=)
                          4: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=)
                          5: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: /4kndRTLPJ7z6o8eMCZNO62enqlcrNH71OhR/rdSbZ4=)
                          6: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=)
                          7: 4D2990768E393F68FA14BF3F1F2B973208903FBC.crl (hash: Hsj2wlCgMdMj0wiJ+ubtkD1QrVAO+2EYEGx8FcLv3WM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:06:27:73:27:3a:18:44:92:b5:21:e4:47:6e:25:61:e5:c7:a8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Jan 31 09:53:05 2025 GMT
            Not After : Feb  1 10:39:05 2025 GMT
        Subject: CN=9DEE57A882627133DEE6581E7FEAFB51E2F299FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:ca:84:35:b3:8e:a2:02:65:e3:8d:dc:a1:
                    1c:cf:a2:fa:f1:f0:dc:88:c3:f9:f3:80:c2:0a:d9:
                    e6:f0:e0:1a:f6:49:91:bf:68:aa:25:d3:91:14:f7:
                    55:4a:1d:8d:0a:38:4c:8a:fb:8e:02:17:f9:2b:43:
                    60:9c:0f:25:99:ba:c3:d5:54:e6:7e:24:02:8a:2e:
                    00:8f:5c:8e:8d:e3:2d:fa:16:1f:28:44:71:a4:44:
                    af:df:35:ec:54:a7:65:54:29:c2:ad:c1:f5:9e:02:
                    99:49:8c:e4:fc:b7:b7:05:fa:6a:a4:6e:5a:d3:c9:
                    5e:07:bc:ce:fe:aa:14:72:67:cc:20:e6:ad:83:e8:
                    ca:22:f5:9b:d0:a5:c6:73:55:52:60:85:3f:25:df:
                    1b:9f:cd:80:e4:d1:5b:96:19:40:5d:62:39:be:be:
                    62:87:42:3c:60:f9:f9:34:cd:fe:38:44:e3:80:2a:
                    1f:5a:0c:eb:a8:4a:7e:ec:1e:d4:42:a9:8f:4d:55:
                    9f:0e:79:09:3d:c1:f5:10:ef:e4:57:ff:f0:1f:82:
                    05:86:0d:d2:a4:70:71:da:d8:ac:92:34:66:55:93:
                    22:4f:0d:4d:e9:34:29:38:83:79:1d:f6:b6:5c:45:
                    3d:38:aa:58:95:a5:44:f7:98:7c:b9:6e:b2:05:5e:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EE:57:A8:82:62:71:33:DE:E6:58:1E:7F:EA:FB:51:E2:F2:99:FE
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:25:9f:23:1b:f4:85:32:0a:f5:61:32:4d:95:e5:11:7c:40:
         c6:98:9b:62:9c:fe:a4:3a:83:f9:0e:2a:02:af:a3:b1:2d:f5:
         85:ab:0f:e3:66:b2:6c:23:f0:38:37:bf:9b:c6:5f:8b:1e:10:
         2f:83:c6:c3:4f:b7:b9:ac:42:2c:a9:b1:b4:a0:23:a1:71:6d:
         5e:00:36:c5:81:38:87:01:c6:e4:2a:4a:cd:bb:ba:e7:0d:c2:
         6b:a7:4f:b0:96:7d:21:51:17:60:35:b4:ae:01:8f:7c:4b:5c:
         6f:67:3b:b3:9f:04:d3:e1:82:c9:71:ee:37:fd:1f:b5:a2:47:
         61:c4:f1:ce:d5:91:d1:26:bf:a1:a7:b3:95:12:a3:9a:cc:46:
         0a:14:a1:f8:1c:d7:6a:41:35:7c:db:0e:01:f3:44:22:4b:fa:
         8d:ae:6a:58:c5:37:28:39:03:db:da:d3:58:ea:f2:94:e6:3d:
         0c:96:ad:55:b1:2a:ca:62:44:67:02:d5:23:91:e4:f4:b7:f8:
         87:15:21:7e:38:12:f7:d4:18:10:37:31:dc:b4:44:f9:70:01:
         17:83:f8:4a:1d:16:11:77:fd:15:d6:b8:b1:d3:a2:46:1a:3f:
         bc:a8:ad:32:cb:72:37:16:de:5e:0e:db:64:01:ce:11:3a:56:
         f6:c1:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:33 2025 by rpki-client