Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.mft
File:                     46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.mft (raw, json)
Hash identifier:          EtGFInnEUBWkqzie8hzMbrYNEs3UjOfvt9zaB93X7qY=
Subject key identifier:   FC:B9:07:9B:6A:6C:3F:C7:70:14:33:D5:D3:A9:FD:39:A8:FC:5D:A4
Authority key identifier: 46:AF:B2:FA:4A:DA:42:A7:6C:BC:C1:53:83:EF:D8:FF:C7:3D:09:F2
Certificate issuer:       /CN=46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2
Certificate serial:       106D3329E7FB1CD567FA2424CED42A2BF9E79804
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.mft
Manifest number:          40
Signing time:             Mon 20 Jan 2025 20:25:34 +0000
Manifest this update:     Mon 20 Jan 2025 20:20:34 +0000
Manifest next update:     Tue 21 Jan 2025 21:30:34 +0000
Files and hashes:         1: 323830343a346234383a3a2f33322d3438203d3e20323637323935.roa (hash: quE150ldJKsCfuVfXhEsAfjY3tBx2dEV59qsD2EuhiE=)
                          2: 46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.crl (hash: /wN+6Cpq+Jkv0Cv+7d25uP9v+QCs3qkCOHa4IXB4NyY=)
                          3: 34352e3233332e36302e302f32322d3234203d3e20323637323935.roa (hash: 17jH15Od8HCFRzdrKcVG9AghaOY837Y6AnW+Nq+u6jg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6d:33:29:e7:fb:1c:d5:67:fa:24:24:ce:d4:2a:2b:f9:e7:98:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2
        Validity
            Not Before: Jan 20 20:20:34 2025 GMT
            Not After : Jan 21 21:30:34 2025 GMT
        Subject: CN=FCB9079B6A6C3FC7701433D5D3A9FD39A8FC5DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3d:af:d8:d9:10:9d:6a:1e:ca:ed:f0:e1:77:
                    a8:1e:94:2e:1b:4a:95:67:a5:c0:75:82:76:a5:ab:
                    72:0a:bb:7e:d6:1a:d1:bf:4c:b7:93:80:2d:d5:8f:
                    98:fe:8f:53:61:42:ea:78:37:62:42:6f:37:95:96:
                    fe:d4:01:84:15:ff:48:7c:16:e5:2c:6d:31:5e:e9:
                    f8:e9:7b:14:d7:61:6d:ec:f9:82:0b:a1:85:bc:09:
                    fa:fc:1f:85:ad:7b:88:f5:aa:52:25:9b:5e:16:6f:
                    6c:11:52:66:a5:ea:bc:3e:41:ae:a7:78:bc:8b:3d:
                    97:05:7b:9c:40:27:20:0a:1a:2c:8b:e4:e2:d2:74:
                    50:65:93:16:e6:8c:50:64:37:28:d3:c7:9f:ad:f7:
                    0e:45:28:42:04:d2:75:58:e3:72:66:fa:29:7b:ef:
                    23:01:f0:b0:78:c9:b5:64:a8:53:30:37:11:74:d8:
                    f5:b8:2c:6e:47:76:a1:6f:e0:8b:02:64:5d:ce:dd:
                    e0:3a:cc:54:1a:f4:61:dd:e1:83:cd:8e:4b:49:e7:
                    12:bd:5b:34:bf:22:7d:58:98:d5:ed:49:ff:94:4e:
                    c2:eb:a1:4e:d0:f8:67:df:64:32:18:3a:06:53:96:
                    0b:f8:5a:69:11:be:4c:30:0b:83:06:bd:b5:31:22:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:07:9B:6A:6C:3F:C7:70:14:33:D5:D3:A9:FD:39:A8:FC:5D:A4
            X509v3 Authority Key Identifier:
                keyid:46:AF:B2:FA:4A:DA:42:A7:6C:BC:C1:53:83:EF:D8:FF:C7:3D:09:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:0c:04:38:26:82:97:d6:28:6e:1b:df:21:73:53:3b:19:
         63:8a:b7:d5:54:1f:8c:77:ce:ae:b2:28:c3:36:0a:08:bb:ff:
         c7:62:f4:9a:1d:25:03:37:16:0a:84:a6:12:5e:01:7a:ff:56:
         6a:38:3a:17:74:b3:01:e0:79:fe:29:e3:82:05:76:4d:14:c4:
         a5:51:21:29:42:a9:f6:25:13:6b:44:22:11:31:1b:62:d8:d7:
         cf:13:e2:c0:39:56:77:21:69:ce:17:a3:c9:ee:cb:de:87:9e:
         88:32:be:6b:ba:d7:47:f3:4d:a5:6a:bd:52:09:3b:66:ae:fc:
         3e:3a:b0:49:a2:0c:29:70:58:5f:97:ac:20:36:c9:0d:d9:8d:
         8f:e8:32:68:40:b9:96:9b:b1:fa:a6:d8:6a:7d:59:c3:9e:8d:
         07:86:20:d2:81:3e:8d:b1:3e:8d:8b:a3:1c:02:12:1f:7f:ea:
         fb:e9:4f:f6:50:ea:f1:d5:3a:c6:c0:c4:e5:01:15:c2:45:fb:
         45:e9:62:94:84:06:9a:a7:de:14:56:dc:ed:d5:43:29:49:3d:
         70:fa:8e:84:df:f8:80:52:1a:60:9f:93:45:09:42:b2:da:6e:
         d0:17:ae:ac:37:81:98:0b:3f:f6:72:e0:97:79:f2:a4:7f:fc:
         82:17:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:45 2025 by rpki-client