Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.mft
File:                     9000A8326BD1A57773C7C207FBF8BA44DD2C350D.mft (raw, json)
Hash identifier:          eojNocFMH+O8ZCItiIBbs1HfiKlWPuoc6bKFYehMpC8=
Subject key identifier:   19:9E:AF:D3:A9:04:40:94:16:B0:22:11:4C:C5:66:EF:45:2B:68:15
Authority key identifier: 90:00:A8:32:6B:D1:A5:77:73:C7:C2:07:FB:F8:BA:44:DD:2C:35:0D
Certificate issuer:       /CN=9000A8326BD1A57773C7C207FBF8BA44DD2C350D
Certificate serial:       97D6FACF6669345094ACE2FBA6E0C5F2BBEFE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.mft
Manifest number:          2B
Signing time:             Fri 22 Mar 2024 06:58:18 +0000
Manifest this update:     Fri 22 Mar 2024 06:53:18 +0000
Manifest next update:     Sat 23 Mar 2024 07:27:18 +0000
Files and hashes:         1: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: MNBtuJvZNLKJtoxNzM87hNOSk/LCtkY/bYVE0wsPVLQ=)
                          2: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: +x1kL6DeWq91h2O7kCvDmDFoDYjH4xPVBeNACH7Oevk=)
                          3: 9000A8326BD1A57773C7C207FBF8BA44DD2C350D.crl (hash: MgLo+hAoKLaxp8RfwnXyivre4BEjzwKMqqwcxCIBwrs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            97:d6:fa:cf:66:69:34:50:94:ac:e2:fb:a6:e0:c5:f2:bb:ef:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9000A8326BD1A57773C7C207FBF8BA44DD2C350D
        Validity
            Not Before: Mar 22 06:53:18 2024 GMT
            Not After : Mar 23 07:27:18 2024 GMT
        Subject: CN=199EAFD3A904409416B022114CC566EF452B6815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:96:ce:ec:0f:eb:30:40:f1:93:ba:df:95:
                    5f:3e:ee:b7:ad:5f:22:1d:02:b9:b2:a5:1a:93:0e:
                    f5:48:91:c4:cf:ef:3a:63:50:83:13:1d:dd:22:ca:
                    17:3a:ed:10:76:84:a8:cc:12:f8:66:26:56:4c:35:
                    ae:a0:50:f9:20:bc:fd:9a:f0:53:1b:6a:89:a5:9d:
                    5c:c7:2f:5b:ea:c0:be:4a:37:42:b3:34:90:24:94:
                    29:cb:df:56:01:90:ab:89:2b:b4:17:8c:bd:82:60:
                    0f:64:04:58:9b:c2:ae:bf:fb:97:44:b6:cf:df:8f:
                    47:87:74:83:b7:de:28:41:87:6e:2a:72:38:07:f2:
                    59:37:c4:2b:fc:16:5a:77:44:5c:02:2d:b4:7e:9b:
                    ab:de:2d:4f:41:3c:52:21:62:89:3f:65:7f:25:19:
                    ab:12:3b:67:cf:35:2b:3b:a2:ef:87:c0:d5:89:63:
                    42:0a:c0:f4:71:ea:60:91:7c:e4:e8:5d:59:80:bf:
                    2a:9c:30:c5:2f:08:18:ca:74:df:77:df:11:da:24:
                    e5:dc:ae:24:e5:e9:20:10:d0:b3:fd:ca:10:1f:c4:
                    a3:01:bf:e8:87:2d:bd:ce:d7:3a:e8:e4:4d:aa:87:
                    8c:37:80:f8:0f:cb:0d:ab:3c:d9:07:12:f8:5d:ce:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9E:AF:D3:A9:04:40:94:16:B0:22:11:4C:C5:66:EF:45:2B:68:15
            X509v3 Authority Key Identifier:
                keyid:90:00:A8:32:6B:D1:A5:77:73:C7:C2:07:FB:F8:BA:44:DD:2C:35:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/9000A8326BD1A57773C7C207FBF8BA44DD2C350D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:ba:b0:cb:77:0a:b1:e5:90:78:20:db:be:d7:12:50:fd:
         a0:94:13:07:d8:f7:9f:9d:ec:ac:0e:ac:50:11:5e:78:f4:76:
         30:7d:d2:d2:b1:ed:bb:e2:29:c5:0b:67:69:ec:65:a1:0d:55:
         f9:8f:da:36:34:19:56:9c:16:f6:29:dc:30:6e:8c:16:04:e8:
         c8:be:7e:61:dd:14:d4:0c:2a:48:07:9f:51:65:70:90:83:ef:
         9a:35:27:63:8d:93:e0:06:d1:b8:cc:c9:12:73:cc:3a:95:f8:
         4d:06:47:04:ec:49:92:fd:cd:a6:23:11:ec:78:cd:ca:98:2d:
         8f:69:8a:27:03:b0:db:ef:a9:bc:c3:f5:cb:33:1a:79:84:92:
         84:dc:f5:f8:c1:47:b1:58:56:fe:40:a4:71:2e:5f:30:06:b0:
         00:02:92:89:ed:9e:e3:75:cd:07:5e:6e:7d:bd:88:23:e4:58:
         31:82:f7:c6:94:d7:b1:51:6b:85:87:4e:e0:db:6b:55:16:ce:
         d6:35:a1:35:28:3f:3c:16:9a:7c:0e:04:6c:a7:aa:16:ef:14:
         06:07:2a:11:f8:d3:34:d2:d9:0f:ab:28:91:9a:c1:e0:a6:5b:
         1b:b4:c8:4d:31:aa:62:d5:3c:22:9d:97:4d:c9:ba:86:67:c3:
         20:e7:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client