Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/1/20E5818344F6D1881DE9F9289FF82381BDB72487.mft
File:                     20E5818344F6D1881DE9F9289FF82381BDB72487.mft (raw, json)
Hash identifier:          KYMDzpD+IKohGsJwE2+Uy1Koc2RfO/fAJgLOvsTSPa0=
Subject key identifier:   72:3A:6D:91:D0:21:4E:E8:2C:02:3A:DA:7D:41:D5:D6:E5:DA:8D:12
Authority key identifier: 20:E5:81:83:44:F6:D1:88:1D:E9:F9:28:9F:F8:23:81:BD:B7:24:87
Certificate issuer:       /CN=20E5818344F6D1881DE9F9289FF82381BDB72487
Certificate serial:       505A931117696E958135CC55749E92AB6E23E9D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5818344F6D1881DE9F9289FF82381BDB72487.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/1/20E5818344F6D1881DE9F9289FF82381BDB72487.mft
Manifest number:          020C
Signing time:             Tue 18 Mar 2025 13:10:00 +0000
Manifest this update:     Tue 18 Mar 2025 13:05:00 +0000
Manifest next update:     Wed 19 Mar 2025 13:10:00 +0000
Files and hashes:         1: 20E5818344F6D1881DE9F9289FF82381BDB72487.crl (hash: kbHQ7Bv3628klG+BiNYoRWBZx04p4U7Kor56EXuTrs4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5a:93:11:17:69:6e:95:81:35:cc:55:74:9e:92:ab:6e:23:e9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E5818344F6D1881DE9F9289FF82381BDB72487
        Validity
            Not Before: Mar 18 13:05:00 2025 GMT
            Not After : Mar 25 13:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:cd:fc:b9:26:6e:f7:42:9b:51:9e:d0:8b:
                    5f:a3:31:1c:76:12:b5:a5:da:73:57:c6:01:32:3e:
                    6f:7b:13:08:b0:69:33:1a:96:b5:09:bf:35:48:b2:
                    dc:a2:e4:6c:54:44:98:03:5e:32:05:3c:50:a7:73:
                    ea:b1:4b:75:e8:61:0f:f7:86:84:67:e8:62:2d:48:
                    3f:18:14:24:17:4d:98:b1:bf:96:3b:1f:c8:99:43:
                    07:f8:f3:04:b4:36:c0:60:d3:e4:93:c6:f5:1c:cc:
                    a5:e1:d8:22:cc:42:24:f4:39:8c:f0:31:d1:80:65:
                    7e:ee:d0:e1:e9:fc:3b:78:0c:a4:ec:80:4a:36:7f:
                    01:34:ae:c7:f0:36:a6:48:13:42:f7:19:ac:66:cc:
                    70:67:01:02:91:58:40:0d:db:00:2f:b5:d6:1e:96:
                    06:4d:3d:4f:f8:ac:0d:bb:98:02:21:4f:b0:a2:25:
                    f1:bf:e2:39:44:6e:cc:e0:59:b3:bd:e1:91:67:56:
                    6c:13:a3:5c:ca:f7:27:93:17:0a:cc:fe:d3:ac:d1:
                    35:fc:25:11:3b:50:a8:ad:9f:d8:ed:cd:4e:8d:53:
                    57:c3:18:10:b7:be:d5:60:27:46:ff:2d:b1:e2:35:
                    90:f6:d7:87:90:1d:7a:e3:60:11:53:e1:27:ff:eb:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:6D:91:D0:21:4E:E8:2C:02:3A:DA:7D:41:D5:D6:E5:DA:8D:12
            X509v3 Authority Key Identifier:
                keyid:20:E5:81:83:44:F6:D1:88:1D:E9:F9:28:9F:F8:23:81:BD:B7:24:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/1/20E5818344F6D1881DE9F9289FF82381BDB72487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5818344F6D1881DE9F9289FF82381BDB72487.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3g6jUsvMjdgHULGp5Ydie7oUZ9AKXTgtaHtv5nGUrJfU/1/20E5818344F6D1881DE9F9289FF82381BDB72487.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:44:fa:8a:99:3e:38:31:6a:ed:9c:e9:60:30:17:bd:76:50:
         70:1b:bb:84:f4:f5:21:ef:5f:07:74:84:69:66:c7:7d:00:a9:
         41:80:51:f6:7d:40:01:1e:92:07:32:1e:b1:d6:08:50:3d:5b:
         fb:8f:a5:26:f0:8b:a0:ec:29:74:bd:a7:20:6a:71:f3:48:ac:
         d1:ba:37:6e:03:0e:dc:15:f0:59:ea:cf:23:4b:21:83:1b:57:
         b7:51:f3:cc:a4:09:f1:b1:58:31:f7:b9:4e:31:8c:43:f9:e8:
         38:e7:ba:85:ab:45:54:a9:4b:7c:62:e0:7c:6a:54:06:f2:f6:
         7d:79:57:46:51:9d:94:1c:85:08:67:dc:41:1a:3d:22:b2:a8:
         37:78:3d:1d:82:15:15:43:99:27:56:ab:f3:e9:b8:17:10:34:
         40:a2:7d:93:62:b3:6c:29:83:d1:db:47:f7:89:5d:86:13:f3:
         33:95:0c:44:45:54:1d:8a:4d:f1:10:6b:f9:42:db:82:45:44:
         ce:35:66:2d:62:d2:28:9c:b3:f3:19:ea:d8:f8:47:02:7b:c2:
         30:85:a0:ea:11:36:bb:e1:c9:97:4d:aa:28:a1:7c:c4:4e:80:
         89:72:17:6d:bb:c0:45:b2:0c:b9:d6:b5:7e:28:fe:86:3c:67:
         38:0a:2b:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:46:47 2025 by rpki-client