Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
File:                     8CC7AC6162CA342188456AA07255F16F88EFB455.mft (raw, json)
Hash identifier:          IyX/JPjOWjGpLdpupxP1tD65g03dUMAOF6+FWIB/RkI=
Subject key identifier:   4D:E8:A3:3F:6D:E4:76:D2:15:D6:DC:6C:21:06:57:D3:DE:63:EF:37
Authority key identifier: 8C:C7:AC:61:62:CA:34:21:88:45:6A:A0:72:55:F1:6F:88:EF:B4:55
Certificate issuer:       /CN=8CC7AC6162CA342188456AA07255F16F88EFB455
Certificate serial:       462830E24A36667D882EC773E64C19F57E6871BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
Manifest number:          01C7
Signing time:             Fri 31 Jan 2025 05:20:00 +0000
Manifest this update:     Fri 31 Jan 2025 05:15:00 +0000
Manifest next update:     Sat 01 Feb 2025 05:20:00 +0000
Files and hashes:         1: 8CC7AC6162CA342188456AA07255F16F88EFB455.crl (hash: +9V5kmavzLh+vaxwoEX0sQjz2hEC/BwBX2k9iHnnCdk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:28:30:e2:4a:36:66:7d:88:2e:c7:73:e6:4c:19:f5:7e:68:71:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC7AC6162CA342188456AA07255F16F88EFB455
        Validity
            Not Before: Jan 31 05:15:00 2025 GMT
            Not After : Feb  7 05:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:f1:a7:23:5a:c8:02:fd:d4:ba:b5:aa:6d:
                    0c:17:f1:bc:f9:05:ab:3e:24:30:22:a4:85:4c:4b:
                    cf:77:e5:ba:cb:7a:4f:93:b7:75:70:1d:05:b0:d9:
                    bd:2b:9a:36:8e:a9:3d:a1:31:a9:7f:c8:c0:bc:a0:
                    25:c5:de:a1:96:60:14:66:55:e6:4c:e4:c0:ed:9f:
                    3b:bf:c4:5b:6a:67:97:0f:02:3b:ee:17:75:aa:7b:
                    27:de:03:37:de:73:9e:0b:1d:1b:5e:45:62:76:34:
                    16:50:54:4e:47:39:3f:8d:a5:0d:0b:96:04:bc:cc:
                    7e:a6:8b:92:e1:38:ae:52:51:01:47:4a:fa:9c:a3:
                    6f:76:7a:24:4a:ff:53:07:4d:bc:9b:a6:cf:cd:93:
                    ae:93:9c:d8:72:36:ee:2a:6c:e4:6d:e6:22:06:fc:
                    41:6c:10:e7:2b:f1:f4:d7:63:3e:3e:e5:6f:aa:a7:
                    ef:d9:2d:76:4a:47:0c:79:a0:73:00:60:13:3b:d5:
                    34:94:07:d2:4f:04:56:9a:36:d8:90:de:aa:e1:ad:
                    11:d6:48:cc:93:ee:aa:28:72:d3:86:07:bd:f0:44:
                    f2:97:05:bc:69:02:76:72:aa:16:15:fd:ab:5a:2f:
                    54:87:96:6c:43:3d:fc:4a:5d:48:49:3e:ec:dd:f2:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E8:A3:3F:6D:E4:76:D2:15:D6:DC:6C:21:06:57:D3:DE:63:EF:37
            X509v3 Authority Key Identifier:
                keyid:8C:C7:AC:61:62:CA:34:21:88:45:6A:A0:72:55:F1:6F:88:EF:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a8:9d:80:a1:71:68:1f:45:56:a6:77:04:ec:07:68:cc:8b:
         8f:4f:da:01:78:4d:41:72:21:b7:65:9f:31:f2:6a:d5:89:12:
         a8:90:5a:ec:65:5e:4a:a4:ef:df:71:49:13:b3:0f:13:2d:8f:
         ae:8f:c9:a0:e4:d9:ae:e4:de:9c:01:13:98:e1:91:2a:52:6d:
         b5:a8:49:6f:0c:b2:36:f4:0a:f1:4b:34:24:90:af:04:49:cb:
         87:75:a5:4a:c8:c1:4b:f5:f4:72:cc:76:0d:93:ab:2e:6d:62:
         13:4c:5d:17:2b:8d:cf:c0:2f:ef:f2:69:96:aa:9a:80:6c:0b:
         35:2c:04:2b:d9:d7:5d:01:99:c7:f5:60:1d:01:56:fa:bd:95:
         d6:17:0a:89:fe:bc:fa:0d:cc:2c:05:fb:72:93:75:57:4f:39:
         c0:1f:f5:0a:3f:a5:71:2f:36:72:eb:3a:6a:fe:70:9f:fe:ff:
         ea:ef:96:46:33:fb:92:61:2d:94:6e:14:f9:5c:40:b6:65:73:
         89:4b:5d:4d:81:0f:6b:73:6a:b4:5d:50:d1:12:21:ec:67:40:
         f8:0a:d5:51:21:b1:2a:16:a4:f4:7d:83:7c:77:78:c4:ab:ac:
         82:a4:de:55:8e:50:c7:2f:6f:bb:2a:d3:ad:99:fb:ac:53:a7:
         40:10:39:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:23:06 2025 by rpki-client