Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.mft
File:                     340D91D1DC6B13AF4ED3823211FD69C447D525BD.mft (raw, json)
Hash identifier:          HHgxYUshcDosfOGSMI5JSZKBHFpzqLx/uZnx55xYOzA=
Subject key identifier:   7B:19:6E:19:CC:D9:30:73:1C:04:F2:53:FE:3C:C3:22:86:26:79:23
Authority key identifier: 34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD
Certificate issuer:       /CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
Certificate serial:       2FA06C3E79894649A3832DBA7BDA66F1E6F0F89B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.mft
Manifest number:          02
Signing time:             Thu 27 Feb 2025 18:21:51 +0000
Manifest this update:     Thu 27 Feb 2025 18:16:51 +0000
Manifest next update:     Fri 28 Feb 2025 19:41:51 +0000
Files and hashes:         1: 3137372e35322e39302e302f32342d3234203d3e203532383031.roa (hash: bRD8+i33ClCFtEHerM6pgz+jGAXm++owzvLQGjo+GU4=)
                          2: 3137372e35322e39332e302f32342d3234203d3e203532383031.roa (hash: XWWJPBWTA2Plmefrxvf29P6K2YBj1NyM6M5nEmn6/J0=)
                          3: 3137372e35322e38392e302f32342d3234203d3e203532383031.roa (hash: 4BO01mOxkyqrUsZygIRFSOxVNI0SLLy3fSIt2KbJ2mE=)
                          4: 3137372e35322e39342e302f32342d3234203d3e203532383031.roa (hash: ZcH/E0D8zY1P/WOIHtT41yWkWIt4Di0pHNtWpIRLUd4=)
                          5: 3137372e35322e39322e302f32342d3234203d3e203532383031.roa (hash: /grVXbxqJ2g9XfLuQq0ZBKrp5fsdEwFcv62+uacFUts=)
                          6: 3137372e35322e39352e302f32342d3234203d3e203532383031.roa (hash: mHS2PCLQmY5A31dkQUfrcbaMh+3BYzGtffHUOESlr04=)
                          7: 340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl (hash: b+ong2LwSFOttkxMIldx3jGpUNnFtQOy8lUMxo6/dN0=)
                          8: 3137372e35322e38382e302f32342d3234203d3e203532383031.roa (hash: BaKyM6eIPvjNo6XgEYv3iMFfj3nesQt4SFhlR/1pZyU=)
                          9: 3137372e35322e38382e302f32312d3231203d3e203532383031.roa (hash: Q+SDPOLCcnVJ/doFIEzZBwfAVua7O3mFzYj9fczHSGE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a0:6c:3e:79:89:46:49:a3:83:2d:ba:7b:da:66:f1:e6:f0:f8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340D91D1DC6B13AF4ED3823211FD69C447D525BD
        Validity
            Not Before: Feb 27 18:16:51 2025 GMT
            Not After : Feb 28 19:41:51 2025 GMT
        Subject: CN=7B196E19CCD930731C04F253FE3CC32286267923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:b4:97:96:9a:c9:4b:f9:13:fb:b4:b9:38:
                    f9:66:a5:38:ae:c8:32:2c:64:a4:50:ec:39:d6:ab:
                    cf:84:a8:dd:7f:b0:75:18:25:0a:9c:d8:86:a1:7c:
                    61:b9:89:d4:eb:e3:00:1c:ff:fe:dd:1c:d0:7f:8a:
                    27:5c:c9:32:99:2a:b1:f4:b9:a9:b9:61:97:2f:46:
                    17:ac:04:d2:63:8e:7a:c4:bf:40:03:b3:bb:66:8f:
                    6a:f7:b5:72:3e:06:3e:59:ee:e9:ed:ed:59:74:e8:
                    d2:98:52:02:9d:f3:fa:0d:fa:81:27:15:ea:b5:35:
                    02:d0:b5:0d:c3:fb:4b:6b:f1:45:a2:d3:0d:0e:dc:
                    88:fe:a2:1f:17:8c:5b:47:38:6b:09:b5:e4:92:fc:
                    02:e9:53:fe:89:d3:24:da:94:d1:fe:e4:33:7d:14:
                    0a:6e:8f:e1:cc:0d:7d:a9:5f:e3:21:0d:0e:8a:7d:
                    a7:bf:26:90:23:de:4f:90:1c:fd:98:a9:e9:b7:9b:
                    e6:90:c8:c9:bf:ac:fc:51:38:78:8b:ac:84:87:6a:
                    33:53:6f:ae:40:0c:6f:1c:1a:5b:40:80:b8:ac:16:
                    c4:d9:79:ae:c5:86:5f:f0:ca:a7:64:bd:e1:fb:68:
                    07:33:2f:64:2d:14:eb:f4:1e:8a:ff:f9:aa:34:b3:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:6E:19:CC:D9:30:73:1C:04:F2:53:FE:3C:C3:22:86:26:79:23
            X509v3 Authority Key Identifier:
                keyid:34:0D:91:D1:DC:6B:13:AF:4E:D3:82:32:11:FD:69:C4:47:D5:25:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340D91D1DC6B13AF4ED3823211FD69C447D525BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/340D91D1DC6B13AF4ED3823211FD69C447D525BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:ba:e4:28:83:79:17:a4:a8:b7:df:94:80:37:6b:b6:35:
         b6:3c:28:39:3d:2c:c3:29:50:c5:7c:47:db:2b:2f:67:4d:ab:
         fd:9c:93:db:ce:e9:f5:53:62:1d:07:63:9d:2f:4b:eb:61:56:
         13:e8:3f:1b:e8:c7:f3:c6:f0:e8:0c:76:45:95:bb:32:8c:98:
         aa:3a:be:bf:6f:ef:09:da:13:3e:c2:68:68:53:bf:46:e9:e5:
         3a:af:01:23:e3:a4:ca:4a:61:43:39:0b:b1:73:0a:09:18:4b:
         c6:b8:87:d0:75:4d:a3:e9:ae:ee:49:9e:c6:e0:da:4c:db:2f:
         30:5e:ef:e4:b5:81:4a:41:c5:bb:17:fc:68:37:b5:bf:4d:c1:
         78:f7:81:a7:9a:bd:80:31:5a:dc:02:e1:54:fa:19:2d:f6:3e:
         1f:9e:bf:1d:a5:28:3f:04:4b:f6:6b:e1:91:ee:40:8a:02:70:
         76:4a:4a:6b:8a:14:33:ed:f0:83:de:35:ac:bd:4e:a8:55:12:
         30:53:ed:6a:cd:43:b6:63:cc:bc:67:06:04:2a:c1:42:7d:50:
         ba:af:01:af:db:34:f9:e4:22:66:9b:ae:bf:2f:5e:db:97:63:
         16:98:be:a3:89:c8:db:6d:2b:7c:69:90:02:11:32:7c:be:3d:
         e2:e1:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:14 2025 by rpki-client