Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft
File:                     8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft (raw, json)
Hash identifier:          Q3LMESDcLVDcl3WwY9Z/9FPwiDPafpNTVH1Bs7Bj8QA=
Subject key identifier:   DD:BC:CB:B8:54:E4:81:22:C6:F0:A5:6F:09:CD:A2:BA:B2:39:8F:12
Authority key identifier: 8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97
Certificate issuer:       /CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
Certificate serial:       7664B7B6B058F0E9F16710E92A6C67456282E9CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft
Manifest number:          FA
Signing time:             Mon 27 Jan 2025 06:49:49 +0000
Manifest this update:     Mon 27 Jan 2025 06:44:49 +0000
Manifest next update:     Tue 28 Jan 2025 08:12:49 +0000
Files and hashes:         1: 323830343a326634303a3a2f33322d313238203d3e20323634383830.roa (hash: VEJ7OcQJGGfF5fPaQZnKkPW2WyDRvTpQi3nKgaPALOk=)
                          2: 3136382e3232372e35362e302f32322d3332203d3e20323634383830.roa (hash: /4sK/DbCyiwrW7udz9+3KlYpFvUBLqIFFWtM14z87Gs=)
                          3: 8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl (hash: G8oMOtoS4KFL4bGSpHrELXaY6muBKem2vQmWzFBTtxQ=)
                          4: 3137302e3234362e3138362e302f32332d3332203d3e20323634383830.roa (hash: ZTRzD+PstYDDrPZ+Hc6Xq5vgB8mysa4kUf/2KhtlX9w=)
                          5: 3137302e3234362e3138352e302f32342d3332203d3e20323634383830.roa (hash: vKQzC8kdawTEvlIYmIAk6cywKRtUWWgPJ78l4OSGd/A=)
                          6: 3137302e3234362e3138342e302f32342d3332203d3e20323634383830.roa (hash: HnEMJMH/1NPXZKtqeZYeJuE+vwhShiYX+6bCvJ8dbo4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:64:b7:b6:b0:58:f0:e9:f1:67:10:e9:2a:6c:67:45:62:82:e9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
        Validity
            Not Before: Jan 27 06:44:49 2025 GMT
            Not After : Jan 28 08:12:49 2025 GMT
        Subject: CN=DDBCCBB854E48122C6F0A56F09CDA2BAB2398F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:52:4e:5b:75:3e:69:e0:84:3e:88:77:c9:
                    0a:87:cd:1e:af:da:03:be:6a:62:05:98:8d:92:28:
                    e1:f1:ba:28:91:88:77:05:13:55:e7:52:ef:5c:35:
                    e1:da:20:09:a0:89:8e:8d:86:8d:99:60:2a:16:4a:
                    4d:79:64:db:eb:21:50:28:70:d3:bb:a0:43:b6:d1:
                    1c:98:03:8d:d8:87:52:f8:69:63:14:1e:b6:71:88:
                    3b:a0:9f:34:ef:b4:2b:a5:ae:ec:21:cd:00:95:d1:
                    00:4d:18:35:b8:5e:5e:c0:77:61:0a:05:84:8f:01:
                    f9:be:f8:6b:d3:45:d1:bb:9e:33:be:f1:ca:58:19:
                    a9:6e:ec:dd:9c:c5:55:9a:b2:4a:9f:7f:6a:7d:0d:
                    da:14:9c:bd:cf:9e:c4:b4:61:b7:91:58:78:3f:17:
                    4a:a6:5b:57:63:3d:61:3e:33:18:93:49:8d:e6:b5:
                    e6:27:6a:46:c1:aa:09:d8:37:2a:1b:5f:43:ba:fb:
                    58:87:61:4d:4c:fb:3d:61:5f:37:56:3e:82:b2:17:
                    37:dc:7e:34:5a:f6:96:8a:92:0c:08:51:46:17:c0:
                    6e:ea:f5:db:aa:ff:07:dd:9e:b7:fc:18:25:4b:18:
                    96:ef:3d:da:be:84:5e:2d:22:80:67:59:26:64:d5:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BC:CB:B8:54:E4:81:22:C6:F0:A5:6F:09:CD:A2:BA:B2:39:8F:12
            X509v3 Authority Key Identifier:
                keyid:8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f7:99:6a:38:7e:8c:05:91:61:98:d9:21:bd:be:13:2f:0b:
         a8:76:0d:c8:3b:02:7c:a1:19:62:78:ed:6a:31:4e:a8:ef:a5:
         71:d4:8d:de:c4:a5:72:fe:de:b5:cd:6b:87:b1:c7:d6:9c:a6:
         bd:ad:c7:ec:0f:a7:3b:d2:8d:af:fc:c4:ac:c7:df:49:64:08:
         f7:35:ff:2e:c3:ad:78:d3:7c:2c:99:a6:f3:9a:6a:88:56:d8:
         a2:b0:0f:25:33:78:cd:cf:a2:d2:e5:3c:31:dc:c2:f9:56:73:
         7e:51:d5:82:67:d4:88:ad:f1:2d:82:f5:ee:78:c3:85:5e:d0:
         d1:67:5b:9b:53:5e:14:f9:46:f5:e3:33:85:f6:41:d5:f8:2d:
         0b:b1:1f:a9:89:6a:ef:1a:01:8f:8d:95:25:ed:02:ff:96:f6:
         4b:f9:2d:2b:ec:43:4b:cb:11:3d:48:2e:43:9d:94:69:a0:5e:
         1a:93:e2:37:5e:04:a3:8d:bb:35:68:e7:6d:d7:72:bf:22:b4:
         22:c6:72:c4:12:9a:e0:69:72:a4:88:58:1e:f9:3c:d0:68:91:
         57:b7:4b:f3:ab:f1:61:ef:e7:16:d8:89:72:89:14:9b:08:1e:
         d8:19:fc:e5:c0:0d:b3:72:81:25:d4:d3:c7:e2:f4:26:ac:86:
         88:68:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:49 2025 by rpki-client