Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.mft
File:                     8F599B5DF56CD57359415BB8A38402E54100108B.mft (raw, json)
Hash identifier:          rgyeeZTsxZW6GmRtu2YSYtQA9+DY8NeLAkV1XjmASKA=
Subject key identifier:   DD:49:31:C7:C4:9F:E1:37:D6:6A:65:CF:7E:29:96:EF:D2:5E:FA:FD
Authority key identifier: 8F:59:9B:5D:F5:6C:D5:73:59:41:5B:B8:A3:84:02:E5:41:00:10:8B
Certificate issuer:       /CN=8F599B5DF56CD57359415BB8A38402E54100108B
Certificate serial:       7DF878AA2C673EB9C208A11A9CDB7F77638A1BAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F599B5DF56CD57359415BB8A38402E54100108B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.mft
Manifest number:          0340
Signing time:             Thu 22 Jun 2023 08:09:45 +0000
Manifest this update:     Thu 22 Jun 2023 08:04:45 +0000
Manifest next update:     Fri 23 Jun 2023 10:07:45 +0000
Files and hashes:         1: 3136372e3235302e3136302e302f32322d3234203d3e20323635323037.roa (hash: YT14wJttBNrZOqXabfFrgAZ//VywECDgxTgf5vY6Vuw=)
                          2: 323830343a326334343a3a2f33322d3336203d3e20323635323037.roa (hash: QTnAqXmK03NEeVJstUBmpEGpKmRZSTvKAnGlX2m4JAQ=)
                          3: 8F599B5DF56CD57359415BB8A38402E54100108B.crl (hash: PVIJxfBQasPItwjFusS0GiZ0sGh3FBR6EsMRmuFuepE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:78:aa:2c:67:3e:b9:c2:08:a1:1a:9c:db:7f:77:63:8a:1b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F599B5DF56CD57359415BB8A38402E54100108B
        Validity
            Not Before: Jun 22 08:04:45 2023 GMT
            Not After : Jun 23 10:07:45 2023 GMT
        Subject: CN=DD4931C7C49FE137D66A65CF7E2996EFD25EFAFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c1:6f:09:47:8b:d6:1c:cd:c8:a1:88:f6:1f:
                    32:4b:03:e1:59:2f:1f:cf:47:0e:e0:b1:9a:34:86:
                    50:b3:ee:97:38:90:20:7f:4c:c3:03:b1:c7:d5:b3:
                    20:57:61:11:72:49:f5:2c:9a:44:50:25:ac:cc:09:
                    00:fb:66:4a:fb:cc:a9:2a:3d:ee:ea:3d:8d:a4:5b:
                    82:2f:c2:66:11:10:d3:16:31:ea:88:09:fc:63:90:
                    33:31:ae:35:30:2b:e4:fa:2c:ac:a7:cd:99:a9:e9:
                    97:0e:03:c6:8d:bc:e8:97:b3:a0:25:c4:3c:22:5c:
                    75:ac:3c:c5:8e:ff:16:2a:9f:14:6a:17:8c:da:a3:
                    0a:a5:43:30:bb:5e:dc:52:0a:1c:41:87:66:31:0e:
                    21:de:c9:b5:87:9b:fd:92:d0:62:0a:44:78:9e:c1:
                    6e:17:e8:dc:a2:61:1c:fb:7d:9f:91:b9:e4:0c:ce:
                    e6:5b:0d:cc:3a:bd:b7:f6:c7:b8:30:dc:f6:ff:d4:
                    bd:f1:a0:b5:9a:56:47:9c:2b:dc:21:bb:56:c1:b4:
                    40:aa:1d:0d:db:41:53:29:d3:0c:fc:4f:93:5b:6a:
                    c4:c7:34:8d:61:68:a4:fb:9f:74:65:c6:9a:94:33:
                    40:3b:42:43:4e:3d:f5:53:76:a0:95:4e:8a:96:63:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:31:C7:C4:9F:E1:37:D6:6A:65:CF:7E:29:96:EF:D2:5E:FA:FD
            X509v3 Authority Key Identifier:
                keyid:8F:59:9B:5D:F5:6C:D5:73:59:41:5B:B8:A3:84:02:E5:41:00:10:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F599B5DF56CD57359415BB8A38402E54100108B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/8F599B5DF56CD57359415BB8A38402E54100108B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9c:2a:d2:1f:fa:8c:13:c0:ef:f3:af:9b:02:73:a7:24:54:
         eb:ab:ac:09:b0:ec:0f:a9:93:f6:ab:70:03:79:31:f5:8c:08:
         e9:25:e8:ce:47:b4:22:21:f2:a4:71:f7:46:bc:17:52:6e:f3:
         5b:68:ed:18:53:6a:b3:af:57:4e:2a:9e:d9:15:d1:ff:dd:4e:
         8a:5b:b6:56:1e:51:af:73:67:1f:9b:0f:e1:c9:85:80:9d:81:
         4a:9f:69:e4:69:d1:c2:12:bf:a7:65:bb:70:a6:a2:b2:8d:6f:
         cf:c4:b1:d7:ca:7b:0a:3d:1b:b5:52:97:2a:aa:f9:cf:9d:ca:
         0b:b0:d0:00:e6:52:97:8f:f7:5f:b0:2e:c9:18:42:2c:af:52:
         29:6c:a8:22:16:17:40:5b:20:40:54:bc:45:9f:cc:35:21:40:
         58:a1:e8:19:50:21:9c:93:bc:b2:67:50:74:01:a5:a3:8b:66:
         59:a8:67:5e:e6:47:2c:7f:db:17:19:bf:b3:ca:aa:8d:d4:b6:
         c1:27:78:94:cd:af:f9:e4:6a:d2:06:a7:e6:84:39:26:09:35:
         7f:a3:49:1b:a1:14:a2:30:17:ea:ca:79:c4:87:03:91:6c:24:
         4f:89:c9:8a:5b:aa:d3:20:b2:6a:7d:73:c4:bc:f9:48:20:fe:
         69:d6:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:36:40 2025 by rpki-client