Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft
File:                     FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft (raw, json)
Hash identifier:          hzqx8SfJUH8+Ne4rJ9Su3Fpj76ZM++zBcqObdMU0qvE=
Subject key identifier:   5D:1D:09:52:20:0E:93:A2:B1:28:C1:C8:DE:23:B6:2B:4D:15:80:D5
Authority key identifier: FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9
Certificate issuer:       /CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
Certificate serial:       0802C666EC700E99D7649CF8E5BA6EA6AEB11876
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft
Manifest number:          0107
Signing time:             Fri 07 Feb 2025 09:13:53 +0000
Manifest this update:     Fri 07 Feb 2025 09:08:53 +0000
Manifest next update:     Sat 08 Feb 2025 11:01:53 +0000
Files and hashes:         1: 34352e3233392e3232332e302f32342d3234203d3e20323638333833.roa (hash: niHXqan3HwQrFxvjwsAwg6fMvKWQxV8UhqEjXmKxmKg=)
                          2: 34352e3233392e3232322e302f32342d3234203d3e20323638333833.roa (hash: ZvCRGGlparKns3/zFje/Bab2lJytFqqJyh6luU2VjBg=)
                          3: FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl (hash: fNQQeDAC8Ye2vXxwLPIaJyynCCnhCN03O+lFsCdXTwM=)
                          4: 34352e3233392e3232302e302f32332d3233203d3e20323638333833.roa (hash: EMOJDqb5P0h52TtxiX7GiVHKiVLVb9F4zZDGSmezVsc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:02:c6:66:ec:70:0e:99:d7:64:9c:f8:e5:ba:6e:a6:ae:b1:18:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFFBC5685534C8804F357B94962CC9A5C9EBEEA9
        Validity
            Not Before: Feb  7 09:08:53 2025 GMT
            Not After : Feb  8 11:01:53 2025 GMT
        Subject: CN=5D1D0952200E93A2B128C1C8DE23B62B4D1580D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:e3:62:f2:b2:54:97:06:88:ab:c3:36:68:
                    64:1c:df:cb:61:fe:f2:6f:38:0d:f2:53:4a:f7:f0:
                    01:f1:15:91:39:31:64:39:0e:94:69:28:90:4e:87:
                    7f:c7:65:1c:69:ec:1b:ca:62:c4:e0:4a:64:1d:56:
                    86:70:29:4a:83:ee:4a:b3:c2:8e:c6:38:af:1a:95:
                    ee:02:ba:c1:bb:04:f9:38:bf:d7:f4:2a:80:cf:5f:
                    94:7c:1d:80:9b:72:35:5f:98:f6:dd:c8:3d:f4:0e:
                    90:c5:01:3f:70:fc:eb:15:52:4d:d5:85:0f:ee:51:
                    41:d0:f6:38:8c:03:a5:d6:c0:56:0e:fe:b9:70:78:
                    e1:19:4d:d2:fa:24:41:9b:8e:59:21:b7:63:0d:08:
                    33:98:cc:6a:f0:e5:3c:1b:63:53:1e:94:d4:21:01:
                    ce:d9:16:7a:d6:eb:6e:59:26:a1:cc:f6:a8:38:62:
                    79:18:0c:c5:f4:fd:10:96:6e:f0:db:2d:8c:24:b0:
                    db:f1:03:37:ad:49:a2:82:15:83:4c:82:5c:cb:1f:
                    83:9f:b4:83:ff:9c:ad:b0:77:e2:a4:34:fc:67:6d:
                    e5:b5:01:e9:8f:8d:89:46:d1:2c:33:88:27:10:0c:
                    43:bb:2b:9b:79:47:38:9b:39:b2:33:3f:20:cf:51:
                    c8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1D:09:52:20:0E:93:A2:B1:28:C1:C8:DE:23:B6:2B:4D:15:80:D5
            X509v3 Authority Key Identifier:
                keyid:FF:FB:C5:68:55:34:C8:80:4F:35:7B:94:96:2C:C9:A5:C9:EB:EE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tKh9qNeaJEd5gM9oUNPXFEXgUEunVzKk5D2GmyW49Zz/0/FFFBC5685534C8804F357B94962CC9A5C9EBEEA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:80:1f:3e:5b:c9:44:4f:cb:bd:19:c8:d3:a0:bc:e9:17:12:
         9a:a9:44:5e:4c:87:88:b9:3b:8a:9f:6d:39:ce:3b:eb:44:88:
         cf:60:d7:50:87:ba:13:f3:8c:c6:b2:2b:a2:b7:44:98:38:bc:
         3c:5f:f5:fa:e9:55:ec:f6:e4:ad:36:3d:6f:d0:f8:6e:8b:18:
         09:96:95:26:c8:a4:c6:df:e2:49:69:fa:55:1a:81:26:2a:a0:
         ab:62:1c:a0:8f:d4:7b:77:d2:97:ae:00:51:01:5e:49:65:bf:
         5a:82:45:89:e6:ca:a4:46:20:0c:d4:2d:11:47:f6:1a:76:56:
         8c:84:02:9e:4e:0b:b3:be:ff:a5:42:95:51:17:fb:5f:5e:1d:
         de:3e:01:44:ad:3f:cb:89:44:40:72:66:49:82:25:54:38:ef:
         e7:6b:0d:18:4d:de:31:b4:cd:e7:88:81:48:f1:ba:7a:82:c3:
         f4:63:39:fd:b5:b4:b4:14:7b:cb:b3:f6:11:83:77:6b:b0:b7:
         36:3d:7b:de:67:40:d0:c9:a2:e6:37:2e:94:b2:aa:b6:0a:6d:
         61:fd:4d:6a:16:31:44:bd:89:79:06:ca:06:1c:df:27:45:34:
         ad:39:ad:de:ce:6e:ea:5b:71:87:da:0a:88:36:e9:cc:1e:d6:
         68:a3:6f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:04:33 2025 by rpki-client