Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
File:                     EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft (raw, json)
Hash identifier:          Z9nWNl3J6WlqSLH5DgLRPZaFgLQiWkEpzymn8VxtPFY=
Subject key identifier:   77:6C:86:71:D6:CA:38:EE:96:3C:AE:B7:26:28:82:EC:2B:9B:42:7D
Authority key identifier: EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53
Certificate issuer:       /CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
Certificate serial:       75CDF0956353704ACAF8D5988519BC8D22A0EA9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft
Manifest number:          0198
Signing time:             Fri 31 Jan 2025 13:30:19 +0000
Manifest this update:     Fri 31 Jan 2025 13:25:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:40:19 +0000
Files and hashes:         1: 34352e3232392e35322e302f32322d3234203d3e20323637313234.roa (hash: 7rRWrWMGnhD7Ic7z9eWSHZFQ4dZ9wSA0rSQzSTjhFQc=)
                          2: EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl (hash: 0ER1WmHkWS8ioCbDWnJrjhwJkmZ7YOnDZ5/U/wO5dVc=)
                          3: 323830343a343837633a3a2f33322d3438203d3e20323637313234.roa (hash: Z1op1s62zQvCEicxBH27Fseuw0bXbQuF26Y6X7UQ5Jk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cd:f0:95:63:53:70:4a:ca:f8:d5:98:85:19:bc:8d:22:a0:ea:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53
        Validity
            Not Before: Jan 31 13:25:19 2025 GMT
            Not After : Feb  1 16:40:19 2025 GMT
        Subject: CN=776C8671D6CA38EE963CAEB7262882EC2B9B427D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:73:24:07:a2:9a:53:a5:59:8c:a7:72:f9:
                    01:9d:37:f6:1d:99:09:07:85:ee:3b:51:e9:11:63:
                    cd:ff:9c:e1:99:04:56:ec:08:a1:49:84:b5:94:11:
                    4e:ce:ba:38:0e:b5:0a:db:c1:7f:9f:10:93:ea:83:
                    c3:94:01:09:c0:fa:18:b7:e4:59:ea:cf:0d:00:1e:
                    1c:d7:eb:40:ab:94:c3:6d:58:9f:f0:9a:10:4b:ee:
                    28:7d:13:0b:1c:14:3a:75:0c:4c:a9:27:90:e7:95:
                    56:e0:f5:b8:79:e5:e1:17:fe:03:75:61:bd:e1:59:
                    7c:3a:67:35:02:89:06:43:ca:83:49:c8:e5:5a:de:
                    40:6f:f8:36:48:92:c3:84:dc:a2:8e:67:ad:2a:12:
                    c8:1e:7a:ed:97:9b:50:3e:b3:aa:a0:04:db:a4:8c:
                    ed:11:8f:66:d2:87:8a:3f:8f:44:81:ca:27:83:f6:
                    a7:f4:8b:f1:f4:34:34:01:86:f0:ef:40:ec:20:5c:
                    5a:47:2f:f3:b0:e4:a8:f5:9d:55:c5:36:6c:29:98:
                    99:7b:94:5e:df:81:f1:ba:d7:1d:ee:b2:d7:8b:86:
                    44:c4:cb:8a:5c:9a:ea:e7:0c:eb:a7:29:13:1f:5b:
                    f9:7d:b9:4b:c8:0a:13:8f:1c:bd:6f:e4:51:cf:6c:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:86:71:D6:CA:38:EE:96:3C:AE:B7:26:28:82:EC:2B:9B:42:7D
            X509v3 Authority Key Identifier:
                keyid:EB:B8:C0:EC:DB:83:6F:66:0F:70:CB:02:5F:2A:1D:1E:FD:6E:4A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/1/EBB8C0ECDB836F660F70CB025F2A1D1EFD6E4A53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1e:c8:25:7f:0c:24:aa:72:d1:ee:9a:5a:7d:de:82:5c:f1:
         fa:bb:f7:d5:45:90:ac:42:57:75:16:a4:22:ef:aa:cf:f6:42:
         77:19:92:5d:63:c9:a0:b2:6b:f8:fe:b1:b1:0a:c4:ab:24:21:
         09:3e:ba:99:a5:9f:41:ac:1a:dd:e3:97:ae:ae:51:9d:03:81:
         9d:90:3c:68:82:51:e6:39:6d:3d:29:d7:7e:a4:97:08:da:51:
         17:cf:0c:af:4e:2e:af:d2:36:66:e9:c9:19:5f:72:d2:43:d7:
         85:14:aa:f1:a1:cc:59:f9:45:6b:9d:1f:56:a4:9b:eb:1a:85:
         4a:24:33:aa:79:b3:d2:84:ee:dc:54:25:93:e5:b8:3d:4d:90:
         9d:fb:bc:37:c3:0b:3c:a3:b9:f7:ff:83:a4:94:1f:70:ff:b2:
         53:52:3d:3b:71:ef:22:1c:5a:f7:41:44:64:65:0f:fc:b9:e4:
         15:5b:54:94:a5:b2:e2:53:ec:04:c7:fa:ad:33:d8:0b:c5:5d:
         72:45:48:9d:2d:2a:72:eb:7b:bf:49:90:df:f0:4d:6f:3f:5d:
         93:f3:73:35:ba:79:73:0b:0b:49:48:25:47:f8:2a:cc:e2:6f:
         ec:7a:6e:9c:54:f6:3a:46:86:df:71:e1:36:df:91:fc:2b:31:
         bc:07:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:40 2025 by rpki-client