Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
File:                     E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft (raw, json)
Hash identifier:          yxchNTYqjHsHovS6LfOwaNlMh5o819HOouIiWjZykbA=
Subject key identifier:   B2:36:3F:0A:BE:C2:5D:8F:89:BA:B3:00:2F:56:02:11:CE:E9:AD:24
Authority key identifier: E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF
Certificate issuer:       /CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
Certificate serial:       0C10FC092800CF23F7B2F02F2D7C78F45C4284F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
Manifest number:          01CD
Signing time:             Fri 28 Mar 2025 23:24:32 +0000
Manifest this update:     Fri 28 Mar 2025 23:19:32 +0000
Manifest next update:     Sun 30 Mar 2025 01:39:32 +0000
Files and hashes:         1: 34352e3138322e37362e302f32322d3332203d3e20323639323334.roa (hash: A8jVb1tQyc/DXdbQAa6uuALyzyTbs8kJoiLtfsfCcZU=)
                          2: 323830343a363137303a3a2f33322d313238203d3e20323639323334.roa (hash: h6D+9BexD48ISIugnRM+sSXcxvLgV0d5nLrOB8LY8jY=)
                          3: E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl (hash: 6jGo4Jv0clW5W6N1/rvhMcwDWtbtfth6b1FYb3o+RC4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:10:fc:09:28:00:cf:23:f7:b2:f0:2f:2d:7c:78:f4:5c:42:84:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
        Validity
            Not Before: Mar 28 23:19:32 2025 GMT
            Not After : Mar 30 01:39:32 2025 GMT
        Subject: CN=B2363F0ABEC25D8F89BAB3002F560211CEE9AD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:71:fd:f9:91:b1:3a:f0:4d:e1:bd:7a:39:f5:
                    06:74:02:cf:74:0e:72:fa:e9:8a:45:c3:73:db:44:
                    6d:bb:dd:88:81:06:1d:84:19:12:22:c2:ce:59:bf:
                    a3:a7:1e:63:63:9a:41:a0:3d:cf:33:37:af:2c:d7:
                    19:a3:68:f2:86:d5:ce:8b:90:41:7a:00:2a:13:b1:
                    db:07:b5:38:46:57:7f:94:92:1a:b4:f5:fb:a4:2b:
                    86:7d:63:5c:5f:c9:47:f3:5e:a8:7d:e7:18:9f:53:
                    d1:f6:82:b6:9e:41:0e:b2:14:32:cf:2e:be:1f:9c:
                    bc:7a:ec:4e:a4:d6:62:a6:66:e1:c5:26:44:3d:f4:
                    35:50:f9:30:4c:e6:65:94:8c:aa:87:79:6c:27:77:
                    d3:6d:6c:8d:cb:b3:2b:a7:7d:9e:0a:76:45:fc:bc:
                    e0:e0:8d:4a:be:b3:bc:96:0c:50:2f:07:09:bd:c5:
                    3c:cb:4e:5b:4c:28:c6:3e:cc:6a:6d:40:c6:5a:98:
                    51:ac:71:0a:74:7d:72:f0:d4:a7:b4:b0:ab:71:54:
                    78:48:e1:61:24:c4:71:74:b5:d4:7a:b1:29:61:1a:
                    9f:50:53:4e:d9:a7:a7:7c:b3:97:cd:be:86:c4:57:
                    1d:72:15:8e:57:3d:a8:7e:da:04:58:7d:fc:ff:ed:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:3F:0A:BE:C2:5D:8F:89:BA:B3:00:2F:56:02:11:CE:E9:AD:24
            X509v3 Authority Key Identifier:
                keyid:E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a6:48:ee:6d:61:7d:91:fc:80:41:70:e8:13:ae:4b:ec:6d:
         1d:86:02:e8:0d:92:23:91:f9:1c:8b:66:e6:99:ce:7c:4f:19:
         86:45:a6:94:54:91:b1:bc:ff:ed:42:d2:3b:01:48:fb:14:10:
         6f:f1:e2:d2:0e:75:2d:12:de:0b:2d:93:85:c5:a6:47:a8:8e:
         48:1f:74:e5:b7:0a:60:0e:8c:9b:ac:61:fe:67:b6:b8:07:3e:
         a1:b7:b8:4b:23:00:1a:3e:68:fd:1a:d2:4d:ff:ea:ae:2f:2c:
         07:56:a5:9b:06:29:14:5b:d0:5a:ed:6d:23:0b:86:35:6d:1a:
         a0:54:86:a6:0a:99:4e:67:57:9f:a1:9e:12:22:a4:50:12:6b:
         e9:33:84:bc:09:48:3a:df:e1:65:e1:6f:00:5f:ec:4e:42:cb:
         38:d0:3d:7c:07:4c:8c:68:5c:12:47:9d:b3:38:3d:bf:2d:08:
         12:db:98:66:b9:6e:0e:35:a8:98:52:b8:73:67:72:25:89:1a:
         c8:e8:bc:3a:38:be:e2:5a:16:c4:15:87:7a:9b:db:49:fb:7f:
         8e:02:3b:8e:88:ae:cf:9a:0d:06:cc:79:9e:3f:a6:9f:11:f5:
         dd:ce:59:cc:b9:18:8c:cb:8a:ff:d4:e2:33:e7:7e:25:c4:b4:
         81:3a:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:28 2025 by rpki-client