Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/1/2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.mft
File:                     2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.mft (raw, json)
Hash identifier:          Y2HaBbUaGA+Q9zA3V2byFGNFKKct9N/JxosKIKEJOBw=
Subject key identifier:   9A:67:82:05:62:A1:90:AB:19:28:C2:9C:0A:A2:E1:8B:58:E1:C2:4D
Authority key identifier: 2F:B4:AA:3C:D5:06:6A:33:9F:F6:A5:5E:3D:08:8E:8E:AE:7D:8C:7E
Certificate issuer:       /CN=2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E
Certificate serial:       6B1770A32EEAECB339A8FD0CF1EED9AE64B49277
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/1/2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.mft
Manifest number:          01C7
Signing time:             Fri 31 Jan 2025 10:40:00 +0000
Manifest this update:     Fri 31 Jan 2025 10:35:00 +0000
Manifest next update:     Sat 01 Feb 2025 10:40:00 +0000
Files and hashes:         1: 2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.crl (hash: HUhjIjtKoVQeFtWL1xAm4APc2tnAYqspgeZvg6IaPgo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:17:70:a3:2e:ea:ec:b3:39:a8:fd:0c:f1:ee:d9:ae:64:b4:92:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E
        Validity
            Not Before: Jan 31 10:35:00 2025 GMT
            Not After : Feb  7 10:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:36:0c:ba:81:f9:ce:e4:44:1d:cd:3b:db:
                    04:1e:74:ea:1c:a0:39:3e:4d:78:b8:75:d4:94:a1:
                    93:eb:8d:19:6c:e0:b3:66:f2:ca:77:60:51:34:71:
                    7a:71:c0:54:3d:26:96:a5:69:74:b3:c8:71:c3:e8:
                    b7:29:ae:a8:e1:f9:3a:6c:58:8b:d0:ce:96:17:b7:
                    8f:a7:eb:29:97:bc:4b:08:c7:3d:c8:d5:08:86:a5:
                    93:bf:b4:55:01:db:cd:5b:cd:40:01:cd:6f:d2:3f:
                    62:7a:63:e6:5f:5b:c0:0d:b6:3d:e3:94:0d:8b:0f:
                    d7:f3:1b:af:a7:d9:c9:82:4c:c1:c0:bd:8b:5f:da:
                    93:61:44:0b:4e:a6:3c:b7:c0:56:60:31:13:83:37:
                    c0:ea:f8:82:ce:58:78:e2:e3:1a:2f:ff:9b:ce:57:
                    56:26:ee:2a:d7:aa:ac:e2:4e:4e:60:27:46:25:92:
                    41:3e:68:09:06:74:a3:7c:df:ed:78:72:9a:3e:e2:
                    66:73:16:8f:80:6d:43:fc:8d:29:3d:b3:47:95:72:
                    62:08:4a:6e:5b:98:ea:67:89:72:67:ec:04:53:a2:
                    e1:2f:aa:a6:cc:b5:48:e5:c0:9b:d0:5b:7e:91:e4:
                    26:ed:2b:c2:5e:6f:ed:e6:5c:c5:9c:44:86:70:4b:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:67:82:05:62:A1:90:AB:19:28:C2:9C:0A:A2:E1:8B:58:E1:C2:4D
            X509v3 Authority Key Identifier:
                keyid:2F:B4:AA:3C:D5:06:6A:33:9F:F6:A5:5E:3D:08:8E:8E:AE:7D:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/1/2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/1/2FB4AA3CD5066A339FF6A55E3D088E8EAE7D8C7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0c:fb:a1:41:17:9a:3a:da:a7:a7:20:7c:52:8a:04:27:a5:
         99:d6:c5:b5:67:3b:83:50:80:4e:97:37:23:09:0c:40:a7:58:
         40:7d:3d:c6:70:87:86:2f:88:93:3d:3c:e4:1d:a7:b2:e6:79:
         01:72:31:ce:2a:41:48:10:a5:2f:8a:28:68:1a:48:dd:e0:e4:
         ba:20:18:6e:34:3f:2b:22:5e:9c:e3:b2:06:e1:a4:f6:13:18:
         95:b8:c5:e8:e9:f6:54:92:bc:c9:19:f7:2b:20:f1:03:25:b1:
         fc:bc:d3:a3:7a:e3:d8:ee:22:95:54:3a:51:95:23:62:fe:d3:
         13:00:fa:c1:28:85:71:ab:82:a4:75:e8:80:24:48:f4:b0:03:
         91:6b:04:61:46:c3:d6:7a:1e:ab:a6:66:fc:d1:d5:ba:29:c4:
         bf:c2:31:fb:e4:7b:de:75:1b:67:d6:3e:2d:46:f0:fe:db:9d:
         ba:9b:ba:33:b5:7a:5b:47:70:60:c0:9d:5c:14:af:99:af:1a:
         b5:1d:2b:98:d3:0f:59:f6:d4:17:10:5f:f9:d6:5a:96:7b:44:
         10:e2:f5:c5:b4:d1:e5:52:c0:82:d5:29:b2:db:a0:eb:ec:81:
         99:9f:5a:9b:31:27:8e:60:01:c9:87:0e:22:55:56:fe:4b:d5:
         b3:da:aa:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:22:42 2025 by rpki-client