Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
File:                     3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft (raw, json)
Hash identifier:          /kSG5lxP4EPHLZmTyXVUXI2Uh8K2Lz7hHY6q5sU6CHI=
Subject key identifier:   9C:C0:C1:15:A5:CF:07:E7:91:9B:6E:B9:B5:61:0F:53:0C:F9:7D:83
Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05
Certificate issuer:       /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
Certificate serial:       3F66478BA1A16F28D9C5AD8A742112A51DDEE8E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 13:31:54 +0000
Manifest this update:     Fri 31 Jan 2025 13:26:54 +0000
Manifest next update:     Sat 01 Feb 2025 17:06:54 +0000
Files and hashes:         1: 323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (hash: g/+0bueo9txCIcFaahIl//AfEHPb+cnmMRv1Nvts77A=)
                          2: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl (hash: bJEfYWDoewDpPD4PgFcWhRUYOgCPQYj4pwfSfRqp0wQ=)
                          3: 34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (hash: EfQ8Gc5gFNN5bFE807I/NKE6zSUK8gFLkDo9Y3vr6H4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:66:47:8b:a1:a1:6f:28:d9:c5:ad:8a:74:21:12:a5:1d:de:e8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
        Validity
            Not Before: Jan 31 13:26:54 2025 GMT
            Not After : Feb  1 17:06:54 2025 GMT
        Subject: CN=9CC0C115A5CF07E7919B6EB9B5610F530CF97D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:56:f7:ba:90:ed:29:18:ba:a6:9f:8c:ec:
                    9f:16:b3:e4:56:57:c3:8a:5c:fd:2c:be:b9:54:1e:
                    cf:c4:a1:44:bb:29:4a:b5:41:30:05:ba:27:15:77:
                    82:f3:b7:96:5b:b9:d7:25:e2:08:07:af:b8:ed:2f:
                    32:26:33:d2:ef:90:20:bf:2f:d1:a9:cf:93:da:77:
                    b6:53:02:0b:9e:c0:43:06:47:86:5d:c8:9a:66:a2:
                    7b:cb:4e:fa:ee:25:99:df:af:b2:93:ac:ff:1e:56:
                    31:af:78:28:87:5e:a1:0f:80:a8:73:51:a8:0c:2b:
                    3f:2f:2d:43:bf:11:ce:02:f1:72:0e:a1:4e:95:35:
                    b3:34:79:3b:c8:b3:e6:83:10:2c:4b:c8:09:cd:58:
                    a5:70:6b:f3:6f:07:ff:96:73:3b:cc:6f:66:b1:df:
                    14:7f:6e:d5:24:6f:ec:52:50:b4:77:e2:91:53:7c:
                    4c:b1:d8:1b:95:5d:83:80:2d:3d:1c:85:77:98:d1:
                    bc:83:28:5a:e7:5d:57:5f:fa:1f:a5:5d:07:cc:0b:
                    5a:70:05:9f:b0:6f:a5:1b:d0:19:d4:90:c4:b5:8b:
                    c7:d6:fe:c2:9a:df:36:3b:c8:67:34:2c:23:2f:14:
                    3d:7e:02:c9:cb:35:df:48:12:b8:6e:6a:d0:16:43:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:C1:15:A5:CF:07:E7:91:9B:6E:B9:B5:61:0F:53:0C:F9:7D:83
            X509v3 Authority Key Identifier:
                keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:c8:2d:2e:c4:c2:25:15:a1:26:cd:e8:db:4d:7e:65:12:
         20:15:94:55:91:00:48:44:9f:1f:f7:ca:f7:42:05:2c:ee:c5:
         9f:a4:8d:dd:db:97:24:61:b3:c8:c6:f6:96:e9:21:59:3e:3b:
         ae:f0:33:83:70:33:22:b4:ad:c7:96:df:e1:d1:0d:11:e0:d5:
         7f:dd:b6:36:64:ec:f1:49:26:06:89:7d:a0:60:33:48:4c:e9:
         42:f4:88:f7:19:62:2d:9b:d4:b5:7f:17:64:89:c2:4f:2b:29:
         d5:b1:dd:9a:6d:7e:e3:f0:a3:44:ed:c4:e1:8f:42:0e:84:bb:
         e2:5e:fa:eb:6a:de:1d:98:78:29:71:38:39:e5:45:40:64:97:
         4a:74:73:71:fd:48:16:c7:8d:55:3a:cb:ca:dc:93:5e:9d:8c:
         66:4a:ed:c7:37:50:27:26:06:cb:aa:46:e4:3e:8f:a8:df:e0:
         a2:b1:10:61:6b:e7:f2:93:01:1e:63:70:b5:49:95:e3:87:cf:
         ea:b2:e8:c5:2e:99:3b:75:ba:ee:cd:7e:2b:95:7b:6d:bd:56:
         e3:03:ba:9f:9f:80:8d:3c:74:06:5a:70:be:de:84:a9:76:6d:
         2b:5e:29:c1:cf:81:0e:15:83:02:24:ae:05:2d:72:4a:14:c0:
         bb:e8:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:14 2025 by rpki-client