Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
File:                     643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft (raw, json)
Hash identifier:          8oruKG1NH45Gs0O0/uQrmFkX99NV29gYYYGhVukfA24=
Subject key identifier:   22:31:AD:28:2B:07:66:C9:43:74:7B:C5:2D:E5:7D:AA:48:B9:AC:EE
Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
Certificate issuer:       /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Certificate serial:       6699775F9DC6D93A06CC9C5080528A0B804DC1B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
Manifest number:          6C
Signing time:             Fri 31 Jan 2025 07:59:04 +0000
Manifest this update:     Fri 31 Jan 2025 07:54:04 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:04 +0000
Files and hashes:         1: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: XGRYWuw1SdOXHxgOfGeMXOtcysBOHIz1eqkxn4r4DUE=)
                          2: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl (hash: JzK4DICzaEQOCE4a121o50XMeQAI9fakXIjbpvMlx8o=)
                          3: 323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (hash: Jvn2kKyHv/w58j8FJqh0s8j1Zu08DizTjW/eiVddDq4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:99:77:5f:9d:c6:d9:3a:06:cc:9c:50:80:52:8a:0b:80:4d:c1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
        Validity
            Not Before: Jan 31 07:54:04 2025 GMT
            Not After : Feb  1 11:00:04 2025 GMT
        Subject: CN=2231AD282B0766C943747BC52DE57DAA48B9ACEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:d7:2f:69:46:6a:04:5c:22:db:52:d9:f6:
                    cd:54:12:99:d6:c4:d5:4f:69:b3:44:e9:2c:4d:6b:
                    42:45:46:98:80:57:7a:c7:04:c1:fc:88:20:79:94:
                    3c:b1:b5:0f:2f:8e:67:33:49:84:51:4c:15:7e:29:
                    11:a6:86:d5:d2:62:c3:16:a4:36:2c:4e:f1:1c:f5:
                    ab:fe:43:e4:3b:d2:cc:0d:74:0b:b3:5d:5b:d1:95:
                    15:f8:27:23:36:51:94:10:07:bf:3b:3c:03:21:b9:
                    0d:92:23:f4:d2:92:05:00:15:53:18:23:ce:95:a0:
                    1f:46:a8:d9:e6:72:12:21:dc:33:e9:33:f1:96:da:
                    59:5a:02:9c:81:8d:93:c4:a5:d2:4d:c9:a3:fc:d7:
                    67:2a:35:b8:72:43:0e:27:6d:39:4a:89:48:a1:3e:
                    21:f3:e4:84:cf:2a:88:6a:31:87:d0:f1:0d:66:92:
                    7f:78:f0:18:b0:6f:ea:3b:b4:f0:c8:29:e6:a1:0d:
                    46:95:b0:21:f1:bd:7f:e8:57:03:60:e5:1d:6d:af:
                    85:85:2e:19:b6:5f:c5:e4:c8:31:d6:7d:e1:2f:27:
                    d1:45:6e:18:fc:47:c4:a8:f9:09:1d:5b:71:82:b6:
                    cb:92:ce:53:63:bb:ee:f1:25:22:fd:0b:57:9b:8d:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:31:AD:28:2B:07:66:C9:43:74:7B:C5:2D:E5:7D:AA:48:B9:AC:EE
            X509v3 Authority Key Identifier:
                keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:40:2f:99:00:2c:c6:86:26:1f:35:94:00:89:c6:38:e6:
         1d:90:df:b2:1e:41:52:4d:7a:c5:c5:55:8e:d2:e0:3c:6f:5e:
         82:ba:41:df:da:68:e7:52:f9:60:25:f1:83:e0:12:7c:10:a3:
         90:a0:70:03:0b:3d:9c:7e:f7:73:d1:75:bd:12:09:ad:4d:78:
         fa:92:2f:9b:6d:2f:12:ef:d7:f5:21:00:72:fb:f6:c4:ca:a9:
         c3:30:79:49:0a:f2:59:fe:51:e6:7c:bb:9f:45:d0:1e:64:b1:
         8e:7d:e2:8b:46:7e:80:fe:5a:f6:3e:67:42:1f:75:a5:8a:7d:
         11:3e:2d:8e:53:d3:fb:c8:9b:49:b7:1b:7d:80:56:be:cd:2b:
         11:39:45:c0:ed:ff:58:a3:d0:97:0d:3f:c6:63:ef:ba:29:1d:
         55:5c:11:59:ad:bd:76:a0:dd:4a:3a:e3:13:55:5b:65:2c:81:
         d1:0c:93:55:fa:1d:4a:07:a7:36:d2:bc:f8:98:50:cf:ac:8b:
         b5:dc:8c:89:93:13:92:5f:95:4a:41:25:50:19:cc:c5:4e:94:
         6f:80:b8:8c:cc:76:8a:37:ed:f5:3e:12:b2:b3:7d:e7:77:7a:
         ae:da:72:f3:19:5a:a9:56:78:bc:67:f7:03:c6:06:6d:47:2c:
         aa:08:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:06 2025 by rpki-client