Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft
File:                     F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft (raw, json)
Hash identifier:          04Hi6Drp+AxlwlU1xO4PHkR6FVxL2eafcX1/VJvdxKA=
Subject key identifier:   33:02:3F:BA:4B:96:E6:E8:9C:D4:7F:10:A0:CD:DC:BE:B7:E8:A4:79
Authority key identifier: F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43
Certificate issuer:       /CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
Certificate serial:       58EF4486F0F4ED2C9F36854714C75F3C1365B1AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft
Manifest number:          0112
Signing time:             Fri 31 Jan 2025 11:25:10 +0000
Manifest this update:     Fri 31 Jan 2025 11:20:10 +0000
Manifest next update:     Sat 01 Feb 2025 13:25:10 +0000
Files and hashes:         1: 34352e3233382e3234302e302f32322d3236203d3e20323638333634.roa (hash: fIH0q3SQiWTpqOvsTK1EkJookPraTiyshbwkS/qu2AQ=)
                          2: 323830343a353030343a3a2f33322d313238203d3e20323638333634.roa (hash: 3+g0UCxOporaHP6jKLoImNlFQnzdruGXXECyNilCA8A=)
                          3: F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl (hash: bLGSOvsXL7Fp04keXWwRYyTkaQU3hDxXFJW9qWX8BlY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:44:86:f0:f4:ed:2c:9f:36:85:47:14:c7:5f:3c:13:65:b1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43
        Validity
            Not Before: Jan 31 11:20:10 2025 GMT
            Not After : Feb  1 13:25:10 2025 GMT
        Subject: CN=33023FBA4B96E6E89CD47F10A0CDDCBEB7E8A479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:be:d2:df:67:bd:59:59:ca:04:86:a6:07:
                    d5:f4:9e:06:fb:19:28:c3:7a:5f:94:47:cf:70:58:
                    49:b9:e4:21:3b:cc:f2:a1:84:ed:f6:fd:46:fe:70:
                    10:64:29:ff:30:5a:71:65:e9:46:c8:9e:93:93:6c:
                    d2:f0:03:0b:70:ed:57:8e:1d:74:ee:08:ae:c9:93:
                    65:ba:09:9e:db:3a:b1:ec:b4:72:5c:89:2c:2c:c4:
                    6f:93:f6:78:00:2c:41:3a:50:15:9c:e8:92:d7:de:
                    9f:b2:99:dd:62:9c:16:a8:7b:a1:d9:67:f2:6b:89:
                    cd:87:a7:b6:80:10:11:18:8f:c2:e6:9a:fb:ff:1c:
                    31:5b:ad:31:2d:ca:f4:8d:bd:53:96:e0:ee:f5:3a:
                    fe:02:15:a1:69:f9:79:98:04:ab:7c:4e:87:49:f6:
                    b1:0c:b7:8a:47:11:a3:d1:58:72:72:2c:31:c0:4d:
                    b0:4b:3f:9c:eb:59:eb:d3:37:ee:ad:1c:72:53:c4:
                    aa:72:20:28:17:ee:83:10:07:72:5c:97:50:c5:1c:
                    31:7a:98:23:33:40:16:71:29:dc:e3:e0:b2:4c:48:
                    90:0c:33:1d:e5:b2:7a:a2:c3:84:24:02:03:83:dc:
                    39:9c:f2:22:41:fe:0a:ba:52:dd:99:a4:33:2e:ce:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:02:3F:BA:4B:96:E6:E8:9C:D4:7F:10:A0:CD:DC:BE:B7:E8:A4:79
            X509v3 Authority Key Identifier:
                keyid:F3:48:AB:79:6A:84:D4:7D:29:3E:1A:4C:C8:5A:1D:3B:3A:6C:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/F348AB796A84D47D293E1A4CC85A1D3B3A6C2A43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:6f:6b:2b:5a:a6:d4:98:01:2d:47:32:0f:9d:ab:ff:01:
         bb:03:56:f0:b3:b5:04:c8:89:0a:a3:68:53:f9:34:43:c2:b8:
         90:2f:61:3c:75:6d:df:a3:c5:35:70:b3:a0:f2:71:aa:9f:08:
         fe:36:15:64:8a:99:af:ba:32:13:1a:20:ef:42:65:fd:88:92:
         7d:2d:e2:79:cc:85:22:08:5d:e1:30:61:33:33:9d:f1:19:42:
         54:4b:68:33:1c:4b:ef:49:6e:bc:f9:c9:aa:4d:b6:89:5f:04:
         a8:87:e0:e2:19:65:6c:20:87:49:f4:7d:55:4f:2e:b1:bd:a4:
         ad:f6:8a:ae:96:8c:c1:90:52:fa:ed:ad:fb:4d:4c:e5:2a:b1:
         08:cb:ce:59:0c:6d:f1:c0:8b:f9:da:7f:1a:97:8a:e4:20:4b:
         a6:86:f6:85:dd:f7:d5:b5:95:a2:c5:6c:ca:f1:f1:03:65:8b:
         a1:03:28:59:79:9d:a3:3e:61:43:65:40:43:b8:ff:f2:f1:60:
         89:13:bc:55:30:a8:1c:7c:99:8d:31:20:24:1c:70:78:de:92:
         04:ba:5b:9b:34:ff:31:70:9c:9b:09:38:c0:b1:b6:0d:a7:be:
         da:be:1e:57:37:16:7e:6b:f0:8e:9f:e2:57:5d:ea:6d:2b:e6:
         a7:4a:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:12:23 2025 by rpki-client