Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.mft
File:                     D97287D57D96D036C529C9616F5E53D9E23B6716.mft (raw, json)
Hash identifier:          DYh/4cWerxejLewRzMCjPlyvUkjJbBrWAc4YlYn3yes=
Subject key identifier:   C0:D5:0C:1E:2E:B0:D7:1C:48:C0:AD:79:A6:9A:DA:1A:59:05:A1:52
Authority key identifier: D9:72:87:D5:7D:96:D0:36:C5:29:C9:61:6F:5E:53:D9:E2:3B:67:16
Certificate issuer:       /CN=D97287D57D96D036C529C9616F5E53D9E23B6716
Certificate serial:       1F4BC3A7133EBAB3B4A67A2D132CCC30C6F047B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97287D57D96D036C529C9616F5E53D9E23B6716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.mft
Manifest number:          EC
Signing time:             Mon 20 Jan 2025 19:38:57 +0000
Manifest this update:     Mon 20 Jan 2025 19:33:57 +0000
Manifest next update:     Tue 21 Jan 2025 19:41:57 +0000
Files and hashes:         1: 323830343a383534633a3a2f33322d313238203d3e20323732353730.roa (hash: CTzgrJKBLqv4pMeOIPhcK+piJ/ZYzjgl4kN1/mhiX/w=)
                          2: D97287D57D96D036C529C9616F5E53D9E23B6716.crl (hash: sOaoeGx/MZsLknOx2aWvCmZVx5gY/XlvAQoL8kpRC04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4b:c3:a7:13:3e:ba:b3:b4:a6:7a:2d:13:2c:cc:30:c6:f0:47:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97287D57D96D036C529C9616F5E53D9E23B6716
        Validity
            Not Before: Jan 20 19:33:57 2025 GMT
            Not After : Jan 21 19:41:57 2025 GMT
        Subject: CN=C0D50C1E2EB0D71C48C0AD79A69ADA1A5905A152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:81:aa:2a:2d:d3:af:e0:d3:23:04:71:dd:
                    9e:b4:03:6b:ca:35:dc:f9:12:e9:1e:d0:b3:5f:09:
                    5a:f2:de:28:cc:30:58:36:ff:63:c4:b9:c1:a1:c2:
                    98:b5:af:c7:a7:24:a7:d3:3b:1a:8c:b4:a8:8f:73:
                    92:6f:d1:3d:b8:e3:65:2b:7b:6d:7c:62:9b:bb:3b:
                    fc:d9:56:55:4d:a2:72:25:f6:26:60:3d:7d:51:00:
                    19:09:7b:53:04:2e:f3:68:65:87:d5:09:d9:b0:ec:
                    50:dc:8e:96:df:34:b8:01:28:76:5f:19:fa:14:80:
                    eb:3c:f6:fa:44:12:d4:d6:a7:17:5b:09:32:d3:73:
                    7c:4e:dc:0b:26:e1:da:01:37:0f:5c:3d:9f:0b:d3:
                    17:ef:a2:cc:81:b9:ee:cb:d5:ec:bf:8b:39:b2:23:
                    90:35:c6:00:dc:cd:9b:29:36:d8:1d:57:b5:42:ce:
                    9f:9c:c1:8e:41:6c:b2:5c:83:57:d9:1a:1d:ca:07:
                    b9:07:81:7c:e6:86:f2:62:64:b2:3f:eb:c8:fa:64:
                    4b:dd:72:13:af:dd:ea:69:aa:be:f1:df:dc:04:20:
                    db:8e:94:33:73:4d:08:05:b5:ef:fd:55:ec:a2:24:
                    9d:bb:50:c1:3c:dc:bf:3c:23:a8:40:2c:38:54:3a:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:0C:1E:2E:B0:D7:1C:48:C0:AD:79:A6:9A:DA:1A:59:05:A1:52
            X509v3 Authority Key Identifier:
                keyid:D9:72:87:D5:7D:96:D0:36:C5:29:C9:61:6F:5E:53:D9:E2:3B:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97287D57D96D036C529C9616F5E53D9E23B6716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/0/D97287D57D96D036C529C9616F5E53D9E23B6716.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:62:4a:8e:98:40:66:cc:5e:05:90:f5:62:35:7f:23:73:9b:
         fe:69:fe:b1:00:d5:5d:7d:17:f0:9f:ef:7f:c5:94:f8:e9:e8:
         ea:97:6c:a4:f0:7d:24:2a:19:83:8e:af:14:1c:1e:46:be:00:
         a7:f7:1b:d3:8e:ca:55:30:65:e3:41:88:13:fc:de:2c:3d:78:
         4e:c1:fb:db:a3:a4:75:c8:5f:c1:81:45:e8:8c:61:ad:34:a3:
         af:c4:4d:9f:1b:3c:24:b3:13:ed:21:a9:13:c0:af:51:89:52:
         0f:48:a5:3a:45:d6:6f:95:91:87:22:c4:2a:78:f2:3e:34:57:
         c3:5c:76:3f:9d:33:cb:f3:65:b3:f2:89:75:3b:8c:1f:09:43:
         31:4f:6e:62:db:2c:ce:fc:64:a0:d6:44:37:e6:4b:9d:5d:d9:
         1d:fd:ae:a9:23:d1:b2:b1:04:ef:09:0e:c3:08:cd:a9:d3:a2:
         b5:a2:dd:3e:a1:69:2a:c8:d5:0a:70:1d:8f:75:ca:56:a3:4f:
         17:88:68:2e:f1:ab:a2:67:6a:e0:e0:50:71:1c:52:9c:cf:ae:
         1e:be:89:b4:06:73:42:0a:c2:e9:7e:0d:7c:18:fa:a0:95:d4:
         7b:96:1f:11:df:11:f3:8c:d2:bd:21:bf:81:f3:61:c9:55:2a:
         aa:af:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:43 2025 by rpki-client