Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft
File:                     85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft (raw, json)
Hash identifier:          157e86TGHVGxRZFy4VF/7pXxpLqwHwWVAGiHifhepyU=
Subject key identifier:   A4:96:6A:0F:90:E9:61:C8:99:49:26:44:57:2B:6C:B3:7E:4F:12:AA
Authority key identifier: 85:DB:34:EB:E6:98:EE:D5:7C:70:A2:DA:30:F6:87:0F:D1:E7:4C:E3
Certificate issuer:       /CN=85DB34EBE698EED57C70A2DA30F6870FD1E74CE3
Certificate serial:       51F4BAD81EFD2B9546E16577CE5213700AA164B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft
Manifest number:          0158
Signing time:             Thu 19 Dec 2024 01:09:02 +0000
Manifest this update:     Thu 19 Dec 2024 01:04:02 +0000
Manifest next update:     Fri 20 Dec 2024 03:07:02 +0000
Files and hashes:         1: 323830343a323231633a3a2f33322d3438203d3e20323634353932.roa (hash: IBouVo90fhO5vJyvlO8/HZ485BBuz+/0EMpeoRbfadI=)
                          2: 3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa (hash: oExCq5Kv8j4KLUaME7OyHkUv+OnDlOVIRiT03fO/B18=)
                          3: 85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.crl (hash: Cey59HzMlbTVuI0CE/6zGO9lCx3zZh4Ec9PAuDon3JQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f4:ba:d8:1e:fd:2b:95:46:e1:65:77:ce:52:13:70:0a:a1:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85DB34EBE698EED57C70A2DA30F6870FD1E74CE3
        Validity
            Not Before: Dec 19 01:04:02 2024 GMT
            Not After : Dec 20 03:07:02 2024 GMT
        Subject: CN=A4966A0F90E961C899492644572B6CB37E4F12AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:d7:10:83:2c:df:10:d4:34:26:0d:1e:40:
                    f9:34:14:fa:d6:23:82:5d:1d:78:9e:98:9e:ae:3b:
                    8a:4c:d1:24:0c:b3:56:c0:f0:e9:16:2b:4a:e1:06:
                    0c:a9:68:6a:69:1f:40:74:ea:f1:d7:bf:c5:3c:d9:
                    c7:d2:f3:28:67:7e:59:0c:69:99:60:24:34:1a:df:
                    77:b7:71:39:e9:79:33:4d:03:ed:ad:11:89:fc:2f:
                    f0:aa:f7:1c:fd:9b:26:34:22:b1:d5:c2:f6:2e:d7:
                    60:3a:b4:0f:a8:33:da:0b:b7:38:d6:4f:f5:d9:5f:
                    49:d9:3b:3d:07:c0:80:17:aa:07:84:10:8e:91:53:
                    86:44:2c:23:54:3b:62:13:80:ab:12:74:7c:6f:51:
                    97:5c:0d:91:46:e0:d1:54:ba:55:94:94:c1:1b:00:
                    ef:25:82:de:e3:e3:c8:1b:d5:93:04:21:87:40:9b:
                    03:9d:61:c6:d4:9f:90:8a:39:f4:31:85:df:70:03:
                    a7:05:71:05:55:85:ba:3f:5f:10:55:c8:1f:ed:a7:
                    ec:e2:bb:4b:fa:7f:98:34:20:12:2e:14:a2:1a:8a:
                    55:8b:0a:4c:9b:48:ee:b8:cc:9f:85:08:c7:42:77:
                    8c:06:4f:b6:ed:ae:ac:bc:30:7e:be:1e:55:34:b1:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:6A:0F:90:E9:61:C8:99:49:26:44:57:2B:6C:B3:7E:4F:12:AA
            X509v3 Authority Key Identifier:
                keyid:85:DB:34:EB:E6:98:EE:D5:7C:70:A2:DA:30:F6:87:0F:D1:E7:4C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/1/85DB34EBE698EED57C70A2DA30F6870FD1E74CE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:82:e0:07:b4:c4:17:a7:58:4c:f1:b8:4d:13:b3:5e:33:a8:
         2e:a2:de:b8:f5:38:79:2f:11:ad:c7:86:1c:1d:14:59:4e:bc:
         27:2d:83:ad:af:3d:cf:db:83:40:69:9b:d3:25:6b:4a:35:cd:
         c6:1c:7a:a2:e7:bb:0b:b1:9a:96:ae:a1:5a:70:1b:f1:d0:99:
         89:34:3f:bf:23:c2:2d:7c:05:e3:a2:0a:6a:2a:a0:92:9f:79:
         6d:34:3d:c1:b4:48:e3:01:10:fd:fd:6e:8b:87:cf:72:1c:70:
         ba:f3:3a:de:90:f4:dd:10:93:92:3e:13:04:40:59:72:78:f2:
         60:15:f5:e1:78:ae:3f:a0:4a:a6:1f:db:48:e6:c2:16:dc:31:
         8f:2f:5c:83:94:3b:70:a7:45:b5:59:d4:ca:51:1f:7b:bd:4d:
         0a:e0:57:6b:50:cf:69:a4:50:14:3c:69:d1:a1:34:8a:0a:2b:
         d8:66:9d:9d:e4:8f:ae:23:fd:f0:b6:eb:99:50:e8:69:3f:cb:
         ae:02:b0:fd:44:fd:18:18:8a:5c:81:9c:d2:b5:8f:2e:03:c2:
         28:f8:30:ad:8c:6d:d7:b2:32:e8:87:b1:e9:ba:c9:68:5a:88:
         3a:fb:9c:14:de:0e:67:a9:6d:9f:0b:c2:f2:99:0c:69:b2:4d:
         da:c1:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:33 2025 by rpki-client