Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/B8EB5F427114FD7070FF54ECDA21153434C227FB.mft
File:                     B8EB5F427114FD7070FF54ECDA21153434C227FB.mft (raw, json)
Hash identifier:          pIDq1RgXscErq+3ZBIeLNB877pt2UiVXKsSNzKnDCiY=
Subject key identifier:   55:43:82:C3:72:FE:F5:42:8C:54:3B:28:0F:14:9B:C4:75:ED:1F:44
Authority key identifier: B8:EB:5F:42:71:14:FD:70:70:FF:54:EC:DA:21:15:34:34:C2:27:FB
Certificate issuer:       /CN=B8EB5F427114FD7070FF54ECDA21153434C227FB
Certificate serial:       0527CCD631A21A779CF6276E5B5BFF05F2F3A97C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8EB5F427114FD7070FF54ECDA21153434C227FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/B8EB5F427114FD7070FF54ECDA21153434C227FB.mft
Manifest number:          42
Signing time:             Thu 05 Dec 2024 08:58:35 +0000
Manifest this update:     Thu 05 Dec 2024 08:53:35 +0000
Manifest next update:     Fri 06 Dec 2024 11:12:35 +0000
Files and hashes:         1: 34352e3137322e3137342e302f32332d3234203d3e20323733343030.roa (hash: R4CrQ8zHzVpdtgvCW6NWd6CNE0HNgjzIfR0hTymnOU8=)
                          2: B8EB5F427114FD7070FF54ECDA21153434C227FB.crl (hash: uMPEvxkxYmkGs0Vh0TNFRy2An2MnotfGaEtBv/DbBL0=)
                          3: 323830343a386531303a3a2f33322d313238203d3e20323733343030.roa (hash: A/xZtvcmgE/kI9XeOEDyS0s8Jf6fkHsswD0jI8tt4mc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:27:cc:d6:31:a2:1a:77:9c:f6:27:6e:5b:5b:ff:05:f2:f3:a9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8EB5F427114FD7070FF54ECDA21153434C227FB
        Validity
            Not Before: Dec  5 08:53:35 2024 GMT
            Not After : Dec  6 11:12:35 2024 GMT
        Subject: CN=554382C372FEF5428C543B280F149BC475ED1F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:c5:0d:8c:6a:49:d8:90:39:d4:11:97:c7:
                    48:ac:a6:a3:bf:c2:1f:84:6d:54:4a:18:a2:89:0f:
                    f2:cb:ef:39:7e:85:96:9a:dc:3c:a5:99:71:26:9a:
                    9d:d0:29:48:b2:68:37:3b:4c:78:c9:b3:15:12:29:
                    44:c6:bc:84:39:8a:54:4d:62:2d:d1:a9:94:f2:c6:
                    39:03:c9:70:e3:03:92:d1:61:89:7f:4d:bf:2d:9a:
                    85:19:88:2d:ae:b2:b8:52:bf:04:8b:8d:4e:b4:69:
                    01:b6:a3:f5:e7:15:9f:c1:72:cb:cd:fb:54:82:82:
                    ed:43:07:94:f3:7a:76:4c:a1:92:a4:53:e7:d5:cc:
                    7a:44:19:82:59:c1:52:d1:09:7f:50:5a:67:aa:44:
                    90:c9:94:2c:d0:de:b5:2b:57:87:b7:0d:2a:d7:21:
                    ae:b9:6c:52:43:40:4e:d1:59:c0:5f:17:43:8b:45:
                    88:78:21:7b:a6:0b:94:2b:0a:e8:25:d4:30:09:83:
                    3f:c0:04:38:5e:20:93:7c:92:a5:0f:d3:0b:c0:b4:
                    6a:ef:be:77:92:78:66:77:30:58:ca:20:24:34:d3:
                    03:d2:a5:aa:45:7f:48:8f:cf:90:07:69:da:21:ac:
                    c5:e6:08:d2:a7:6e:bd:2a:7d:19:19:f9:59:81:8f:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:82:C3:72:FE:F5:42:8C:54:3B:28:0F:14:9B:C4:75:ED:1F:44
            X509v3 Authority Key Identifier:
                keyid:B8:EB:5F:42:71:14:FD:70:70:FF:54:EC:DA:21:15:34:34:C2:27:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/B8EB5F427114FD7070FF54ECDA21153434C227FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8EB5F427114FD7070FF54ECDA21153434C227FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/B8EB5F427114FD7070FF54ECDA21153434C227FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:10:10:54:e1:54:13:2b:1b:2b:a7:fc:b3:78:59:e5:a6:0a:
         99:13:b5:96:1f:d5:aa:d4:ab:da:3b:77:e2:38:ba:0f:dd:30:
         77:0d:0b:ef:50:c9:92:ec:ce:04:2b:e0:45:57:a9:43:b2:36:
         c8:00:eb:44:b2:2a:6f:e8:c8:d4:bc:62:4d:15:e5:e6:7e:7e:
         ca:52:38:bb:fa:19:53:a9:da:e0:89:4e:92:79:a9:f0:2f:05:
         52:15:78:37:74:db:59:99:e3:23:51:ba:da:da:c7:aa:fe:f1:
         4f:89:3f:b3:f5:91:bb:8c:11:e8:55:bb:0d:d5:0f:d6:82:55:
         52:74:59:f3:2a:25:fe:9a:4f:9b:00:f8:85:75:1a:d8:86:d3:
         19:a2:09:20:b7:71:16:a5:2c:14:0d:d5:7e:fc:c6:f3:1f:03:
         ff:9e:a6:0c:bd:94:e1:b1:85:1d:62:6d:8c:61:af:56:49:7f:
         24:9b:bc:5e:62:6c:c6:44:97:98:bb:07:51:70:58:4a:97:da:
         f6:65:88:55:7f:2a:9a:c9:28:0f:f5:87:d4:c4:c2:d5:8e:cf:
         fa:97:59:a8:71:31:80:16:fe:76:dd:8c:c9:d0:42:f7:70:2d:
         f4:48:b2:d9:32:26:70:76:9c:e7:23:c7:b5:ca:75:d4:41:78:
         28:46:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:42:07 2025 by rpki-client