Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.mft
File:                     1EFFCE8480188138CE6428270E5D1F413360AD3C.mft (raw, json)
Hash identifier:          kDqfocb8PH65haZU6vyNS9dydkY1dQxF2t7ummibRuY=
Subject key identifier:   3C:CB:76:DB:0A:9C:73:F1:56:54:41:61:FE:C6:66:3F:FB:88:DC:C9
Authority key identifier: 1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C
Certificate issuer:       /CN=1EFFCE8480188138CE6428270E5D1F413360AD3C
Certificate serial:       715293275C2F89231F91BF4F92E5308FE9B6AA86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EFFCE8480188138CE6428270E5D1F413360AD3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.mft
Manifest number:          14
Signing time:             Mon 21 Oct 2024 02:10:48 +0000
Manifest this update:     Mon 21 Oct 2024 02:05:48 +0000
Manifest next update:     Tue 22 Oct 2024 07:04:48 +0000
Files and hashes:         1: 34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa (hash: dr1F35BStNYFzptpR4k3fff2d7vpLrg347nEGfBnUNc=)
                          2: 323830343a363834343a3a2f33322d3438203d3e20323639363831.roa (hash: +GDHYQC5jB4UkVmhe12ztl5xRt/tmyL+bz2Gqzy4Zx8=)
                          3: 1EFFCE8480188138CE6428270E5D1F413360AD3C.crl (hash: 6awRHl7u4kBbWf8O6nlhd4qi6YnXB8qmTSYYiRs8BaQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:52:93:27:5c:2f:89:23:1f:91:bf:4f:92:e5:30:8f:e9:b6:aa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EFFCE8480188138CE6428270E5D1F413360AD3C
        Validity
            Not Before: Oct 21 02:05:48 2024 GMT
            Not After : Oct 22 07:04:48 2024 GMT
        Subject: CN=3CCB76DB0A9C73F156544161FEC6663FFB88DCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:9c:c6:8e:a6:39:e7:c4:19:4d:9b:65:58:
                    00:5c:a2:fe:20:91:03:ee:74:ab:de:f5:4c:7c:e2:
                    cd:ca:35:a9:d4:64:26:cf:78:b1:62:cc:f2:5b:fa:
                    b4:8b:84:43:29:3f:88:fd:f5:ea:ac:9d:1d:8b:f5:
                    b4:b3:63:d3:d0:21:92:7b:e4:71:47:cf:8b:fb:6a:
                    2d:d4:eb:14:a8:07:7f:d9:b8:88:a0:71:84:69:a9:
                    c5:30:dd:32:a4:c6:c2:e5:e3:b0:b6:c2:84:2b:77:
                    4f:28:63:90:7b:94:f3:38:ef:d1:7d:77:1b:00:42:
                    dc:a9:a4:42:a3:a3:a2:40:2f:bc:25:53:58:0e:ff:
                    5a:34:05:10:0d:b6:aa:b0:d2:57:02:b8:07:df:41:
                    96:c6:2c:06:d0:51:0f:31:41:14:00:a3:ee:4c:70:
                    c3:07:07:b0:1c:51:4f:af:8d:20:da:f9:9a:ac:10:
                    ad:b0:15:07:c1:f1:a9:d2:86:db:e0:73:e4:c1:f2:
                    19:e8:00:ab:d9:00:36:eb:bb:aa:df:f4:42:c0:37:
                    d8:6f:6f:8e:ed:38:09:3e:39:2e:34:e4:a7:91:70:
                    63:9b:79:85:01:69:e1:9d:9a:18:fe:44:4e:06:3f:
                    d0:09:3e:ef:8e:8f:09:fc:c1:8a:33:e8:89:38:de:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CB:76:DB:0A:9C:73:F1:56:54:41:61:FE:C6:66:3F:FB:88:DC:C9
            X509v3 Authority Key Identifier:
                keyid:1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EFFCE8480188138CE6428270E5D1F413360AD3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3f:34:de:f2:f1:d7:ce:af:53:1e:9c:10:1d:60:5a:0c:61:
         60:f4:80:44:71:c0:1f:c2:9a:80:91:05:55:d4:b1:f3:ff:a8:
         a1:a1:4d:41:8c:49:60:42:d7:d8:57:27:c7:2c:79:dd:56:b5:
         0c:fc:74:b3:86:61:22:fe:92:d5:5c:98:60:43:fe:a2:55:ab:
         27:86:6e:cd:04:73:a5:34:9d:ad:6b:28:e1:86:ba:81:f7:74:
         c6:67:45:03:ed:9f:66:b7:f7:57:52:d6:28:98:e9:38:eb:2c:
         ed:d7:00:1b:ed:c0:51:f3:30:8a:03:f2:c8:4d:51:6d:ae:e8:
         f2:03:76:05:5f:af:67:58:86:07:69:a3:1c:0c:ca:87:6a:c8:
         46:e5:c7:4b:c7:e2:1d:6c:26:de:6f:d1:4a:8e:2e:14:33:84:
         fe:d2:d9:50:f0:25:e9:e6:90:07:cf:9c:a9:a3:12:d3:9c:77:
         7b:da:00:8c:97:d6:4a:36:12:2d:c4:4f:33:77:2f:1d:cb:22:
         10:6d:5f:ad:5a:98:74:74:2d:18:51:01:02:47:2f:58:cd:44:
         37:97:e0:16:ab:36:70:88:3e:a3:06:9f:38:25:99:5c:bb:6e:
         b4:ce:5c:4c:49:9f:43:1d:e9:9d:1a:62:18:66:ea:ac:a6:07:
         d0:62:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:54 2025 by rpki-client