Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.mft
File:                     3F34DB83950F2AE7FBA8DB28D91D12099C22D557.mft (raw, json)
Hash identifier:          Rp0rAD5Z9PwmcYwcqxL8qj1XM2OeiWsexZeI+wx+Qr8=
Subject key identifier:   3B:B5:F0:CB:14:64:9C:A8:14:9C:C8:8E:AC:48:98:7D:26:2D:E7:D4
Authority key identifier: 3F:34:DB:83:95:0F:2A:E7:FB:A8:DB:28:D9:1D:12:09:9C:22:D5:57
Certificate issuer:       /CN=3F34DB83950F2AE7FBA8DB28D91D12099C22D557
Certificate serial:       4BB0EDD1399690C1252E70B0D8C349A32AECCD99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.mft
Manifest number:          B3
Signing time:             Fri 31 Jan 2025 17:20:04 +0000
Manifest this update:     Fri 31 Jan 2025 17:15:04 +0000
Manifest next update:     Sat 01 Feb 2025 18:08:04 +0000
Files and hashes:         1: 3F34DB83950F2AE7FBA8DB28D91D12099C22D557.crl (hash: 4r9xT3ULgKv44bFUksDOwNXH0UMAqhLLx1XmiDjWU90=)
                          2: 34352e37302e3235322e302f32322d3332203d3e20323637363131.roa (hash: +gfaMMevBFTTPY3l5vq6bddjjxIfn/ajXVLgQfAG+TA=)
                          3: 323830343a343433633a3a2f33322d313238203d3e20323637363131.roa (hash: JCNYcN6ptZS0UzuHJquKpkayP2Fvn1XnJJPK/vRPpLo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b0:ed:d1:39:96:90:c1:25:2e:70:b0:d8:c3:49:a3:2a:ec:cd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F34DB83950F2AE7FBA8DB28D91D12099C22D557
        Validity
            Not Before: Jan 31 17:15:04 2025 GMT
            Not After : Feb  1 18:08:04 2025 GMT
        Subject: CN=3BB5F0CB14649CA8149CC88EAC48987D262DE7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:28:52:2b:f5:95:6c:92:64:fd:89:b0:a1:
                    34:9d:df:59:02:28:2b:f8:5e:c6:2a:19:bd:2a:1d:
                    8a:cd:71:e3:e6:cf:44:1b:ba:5c:cc:29:33:a9:00:
                    1e:f1:b9:54:77:6e:a4:47:78:ea:81:2a:e2:1b:f0:
                    65:f7:17:19:86:e7:44:90:a9:9c:38:a2:6a:c6:71:
                    ec:e0:d5:d6:c6:4a:33:1c:15:18:2d:34:a0:46:c5:
                    51:10:52:17:e6:7a:18:b6:a4:51:a3:ec:21:d1:49:
                    41:43:c5:f7:25:a2:35:8d:4e:21:30:fc:e8:78:96:
                    4f:47:10:6b:87:f9:4d:70:39:a0:7c:34:b9:b0:30:
                    07:f7:37:8c:54:47:d1:0c:e8:dc:df:9c:6c:d6:33:
                    9d:65:a4:1b:2f:51:e3:c8:3d:a1:b1:88:16:59:7e:
                    2d:96:c4:e9:b8:72:bd:a4:6f:dd:28:86:95:2e:34:
                    87:f5:83:11:e1:65:c8:3a:7e:3a:5f:e9:e9:c2:ad:
                    99:c5:90:28:73:66:97:f7:58:70:94:0d:08:00:18:
                    56:77:57:c3:2c:75:a0:f0:64:d1:6c:74:5e:5c:27:
                    4e:bb:9c:63:6f:3c:b0:ec:53:81:a3:9e:02:46:73:
                    d2:d7:c3:96:48:bf:bd:ed:f5:2c:39:0a:08:bf:f1:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:F0:CB:14:64:9C:A8:14:9C:C8:8E:AC:48:98:7D:26:2D:E7:D4
            X509v3 Authority Key Identifier:
                keyid:3F:34:DB:83:95:0F:2A:E7:FB:A8:DB:28:D9:1D:12:09:9C:22:D5:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n3bRx5jhRCUF39MPeZK7jJ8ZYLSSKo71cK2fsADYtc1/0/3F34DB83950F2AE7FBA8DB28D91D12099C22D557.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:cb:6d:33:ea:7a:df:a6:f6:ac:c7:29:75:6c:e3:3c:a2:
         ce:5a:9d:3e:e3:fb:61:ac:e8:39:19:65:f4:62:cd:fb:4d:1d:
         ca:2a:4f:d1:f8:30:13:21:9b:5c:5c:d0:5e:1f:6a:c7:1c:81:
         e4:88:70:bc:eb:7c:c9:4c:e2:6d:45:28:af:da:11:64:c3:91:
         70:b2:ea:2a:68:cc:4c:40:8c:26:09:f2:67:cb:41:5e:e6:3e:
         62:8e:f6:72:d4:8a:6b:a2:0f:73:7b:91:df:60:06:63:5b:f5:
         12:a5:ee:50:4c:f6:71:f6:72:7d:0a:61:4b:0b:1c:fb:63:bd:
         a3:c2:07:76:67:a4:67:20:a0:53:34:a1:96:36:7a:a5:4e:e8:
         7a:3f:06:04:d2:36:6b:1f:04:b1:eb:f7:97:bf:95:1d:be:ab:
         0a:fe:33:c5:7b:81:84:47:5d:c3:7c:59:4f:37:ad:73:8b:55:
         39:b4:18:71:88:89:0e:88:29:35:21:1b:61:c9:c6:27:3f:71:
         11:04:2c:b7:eb:5a:73:76:54:35:ad:4a:b7:ba:01:88:a5:99:
         43:f5:2f:4d:88:a0:f6:22:c6:1b:44:0d:0e:2e:5c:30:57:42:
         a6:4f:65:20:91:24:cb:14:f2:e4:87:b3:67:b9:8b:9c:6d:6c:
         24:44:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:51:47 2025 by rpki-client