Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/237120C35335F61709EDF3334B1ED42A3D2CAADF.mft
File:                     237120C35335F61709EDF3334B1ED42A3D2CAADF.mft (raw, json)
Hash identifier:          WUA02LM3Ce/otOwDd0Dup8AULvPmhVVucZqKYztZyr0=
Subject key identifier:   2E:D4:C2:35:28:90:18:E3:E1:8D:2D:F6:DE:27:BE:80:45:11:E3:E4
Authority key identifier: 23:71:20:C3:53:35:F6:17:09:ED:F3:33:4B:1E:D4:2A:3D:2C:AA:DF
Certificate issuer:       /CN=237120C35335F61709EDF3334B1ED42A3D2CAADF
Certificate serial:       17487780CDB562E0FA5C2A420EFB454D71E78C3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237120C35335F61709EDF3334B1ED42A3D2CAADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/237120C35335F61709EDF3334B1ED42A3D2CAADF.mft
Manifest number:          E8
Signing time:             Fri 31 Jan 2025 12:51:04 +0000
Manifest this update:     Fri 31 Jan 2025 12:46:04 +0000
Manifest next update:     Sat 01 Feb 2025 14:54:04 +0000
Files and hashes:         1: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: 086U1fXOrUjuBBadDtxccUOTQJPFEb4+9X+m2GJy6oA=)
                          2: 237120C35335F61709EDF3334B1ED42A3D2CAADF.crl (hash: asR4f34S84WFgKy8YxKv1a+TDtzReAzbsjIBu+KrtWM=)
                          3: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: Q/V7y0eNrdsCS0ItHEZu9hBi1YKF6iM6bQQPheUf3BM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:48:77:80:cd:b5:62:e0:fa:5c:2a:42:0e:fb:45:4d:71:e7:8c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237120C35335F61709EDF3334B1ED42A3D2CAADF
        Validity
            Not Before: Jan 31 12:46:04 2025 GMT
            Not After : Feb  1 14:54:04 2025 GMT
        Subject: CN=2ED4C235289018E3E18D2DF6DE27BE804511E3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:a1:d7:af:46:b2:4b:ea:3c:be:8c:35:13:
                    79:53:36:59:d0:24:a9:62:e3:c9:8d:1f:fd:af:2a:
                    ac:92:31:d8:5a:32:f8:14:f3:cd:06:ec:ba:10:d7:
                    cf:1c:83:1b:fe:48:7c:89:05:12:b7:37:9c:24:84:
                    46:1a:34:33:60:78:30:20:32:f5:16:f7:06:a9:7c:
                    2a:a3:10:8e:b4:6a:81:f9:ee:21:a2:64:45:14:5d:
                    cd:fb:9f:af:3c:29:1e:f2:8f:35:0f:a2:b9:3c:9f:
                    b9:3b:81:00:c0:0f:76:7a:1b:50:a9:dc:09:87:43:
                    19:9c:95:e6:d8:d3:da:d2:57:5c:cf:e6:be:c9:28:
                    e8:65:2e:40:07:d7:77:7c:f1:c0:59:a1:74:04:e1:
                    e1:c2:02:2b:a3:e4:5d:82:5c:f7:53:84:64:bd:4d:
                    a6:cc:90:ad:8b:4c:d8:18:bf:36:d2:0f:32:f2:7e:
                    39:31:51:a2:03:30:3a:79:d9:b7:1a:de:7b:87:31:
                    2c:96:da:86:4e:18:8e:78:a6:28:41:66:ad:2c:3f:
                    d9:32:1c:6b:6e:7f:2c:e1:21:a0:98:d7:45:af:3a:
                    01:6e:62:f6:87:58:9d:3e:cc:35:cc:56:a8:ca:b0:
                    13:95:36:1e:f5:e8:38:2a:86:40:58:0e:c7:16:49:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:C2:35:28:90:18:E3:E1:8D:2D:F6:DE:27:BE:80:45:11:E3:E4
            X509v3 Authority Key Identifier:
                keyid:23:71:20:C3:53:35:F6:17:09:ED:F3:33:4B:1E:D4:2A:3D:2C:AA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/237120C35335F61709EDF3334B1ED42A3D2CAADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237120C35335F61709EDF3334B1ED42A3D2CAADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/237120C35335F61709EDF3334B1ED42A3D2CAADF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:23:22:21:b8:f8:8d:9d:cd:f4:60:17:47:17:e9:94:de:
         58:70:8c:c4:52:9e:17:3c:3f:3b:33:0c:1c:1b:87:c0:19:7a:
         da:d7:90:7f:bd:e2:ac:09:0c:c0:71:55:49:a1:9c:38:28:f2:
         ee:9c:73:24:b0:31:08:68:9d:18:5f:f2:7f:07:3a:98:c0:e4:
         9c:e1:f2:cf:29:c5:9d:a4:e9:8b:d6:2a:2c:0e:ff:9c:49:5d:
         b4:43:20:af:df:a1:33:3f:59:27:59:2b:ed:77:a5:c5:a0:2d:
         b5:ae:43:70:57:39:33:82:1d:a9:be:3d:d3:cb:bd:15:fd:b1:
         5c:bc:55:d0:d0:06:43:e4:2f:44:53:0f:7a:97:2a:01:1b:88:
         ad:23:9c:f0:08:4f:9d:5e:f3:2d:1b:9a:81:a3:e9:43:c9:b7:
         5a:09:4f:1e:c7:77:07:32:15:b6:8d:8f:d9:cb:c5:13:a1:35:
         d1:62:b2:d7:d0:5d:32:39:a1:b6:b6:83:8c:ca:1f:11:d8:72:
         a3:d3:24:59:e6:25:d7:bc:fb:ca:c6:34:c6:e4:d3:20:d6:b0:
         3c:7d:f2:70:55:30:e6:9e:f5:d3:42:c0:5b:3a:2f:42:3a:af:
         bf:ba:bd:c9:5e:4a:3a:f4:5b:ac:1a:0b:04:3e:46:d3:92:46:
         82:fb:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:23:03 2025 by rpki-client