Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.mft
File:                     8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.mft (raw, json)
Hash identifier:          7CSUNAuzGAqw8MHCa0IAEAyzCejUDO482bY2njjCReE=
Subject key identifier:   05:8F:9D:30:15:30:1B:70:E1:24:7C:86:28:47:B6:0F:85:3C:4D:B1
Authority key identifier: 8E:7F:F2:32:5D:6F:6F:6B:E8:86:5F:82:FF:4D:99:9C:33:D3:18:87
Certificate issuer:       /CN=8E7FF2325D6F6F6BE8865F82FF4D999C33D31887
Certificate serial:       2EE9016990F5DFBCB86A76D81C3D90B965FE3AEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.mft
Manifest number:          51
Signing time:             Fri 03 Jan 2025 11:53:48 +0000
Manifest this update:     Fri 03 Jan 2025 11:48:48 +0000
Manifest next update:     Sat 04 Jan 2025 12:02:48 +0000
Files and hashes:         1: 8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.crl (hash: mFYxGsMjcxmP46DyfbckUWdpBp9arKLH3sqYLdjgflM=)
                          2: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: TyUSjMzYkVzAdUTmCmyT2g/8py0upVg6IYSv5VFEYpo=)
                          3: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: bJ3sTpMhBVybnq6EDDhg19+JEPBMjHlvqqCwoIX2OmM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e9:01:69:90:f5:df:bc:b8:6a:76:d8:1c:3d:90:b9:65:fe:3a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7FF2325D6F6F6BE8865F82FF4D999C33D31887
        Validity
            Not Before: Jan  3 11:48:48 2025 GMT
            Not After : Jan  4 12:02:48 2025 GMT
        Subject: CN=058F9D3015301B70E1247C862847B60F853C4DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:8a:e4:0e:9b:c1:fb:60:43:8a:df:e8:6a:
                    4c:6e:b0:84:e2:df:f9:b8:bd:17:ad:54:27:36:7d:
                    72:e1:91:f9:2a:f0:4d:3f:cc:38:be:fb:14:02:ff:
                    22:23:cd:e2:11:67:3b:7c:00:a6:fa:19:e6:f5:7c:
                    88:62:51:49:7e:b4:a4:52:9a:24:e9:9d:fd:ff:f7:
                    14:f1:8c:4e:f0:9d:fa:d3:ab:9a:2e:d8:c9:b7:ad:
                    09:3e:d6:69:bd:ed:62:cf:8c:bf:f0:3f:3e:97:48:
                    c9:56:41:a9:89:3b:1b:f2:14:a4:08:3c:40:d5:e1:
                    f6:48:84:a0:50:0c:80:34:50:76:b9:bd:83:8f:59:
                    fe:3c:47:66:49:4e:35:dc:d4:ed:75:65:49:3a:d7:
                    f1:e4:35:9d:c6:86:40:f3:f4:e2:8e:5f:18:59:cb:
                    70:5a:49:d7:c4:d6:5f:c8:e6:05:a8:f4:ab:6e:21:
                    49:09:db:9d:41:15:4c:61:98:c4:79:c1:07:0e:ca:
                    04:50:ab:fd:b4:5e:2e:5b:c2:9b:ea:41:67:20:9e:
                    41:5e:d8:e1:2c:8f:5c:a8:d1:c4:4e:32:1c:b3:c4:
                    6e:ad:9f:1a:a1:30:70:ac:a6:a4:a4:0e:51:ad:a1:
                    23:6b:5f:39:cd:ae:87:f6:a8:99:e7:ea:48:80:2c:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8F:9D:30:15:30:1B:70:E1:24:7C:86:28:47:B6:0F:85:3C:4D:B1
            X509v3 Authority Key Identifier:
                keyid:8E:7F:F2:32:5D:6F:6F:6B:E8:86:5F:82:FF:4D:99:9C:33:D3:18:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:36:49:fb:81:a9:a9:84:1a:e6:14:99:c4:ff:45:d2:75:9f:
         99:d1:96:c0:32:8e:d8:72:90:47:12:8d:76:94:77:b2:cd:34:
         b1:1d:21:7e:5d:49:6a:53:87:0b:5c:23:be:9f:52:2d:83:f4:
         48:c9:78:d0:81:a1:e4:ec:41:4a:91:80:e2:b0:bc:40:e1:f6:
         f2:98:a2:46:54:54:25:ca:38:4e:a3:3d:81:27:95:6a:56:55:
         3e:f5:23:bc:df:b9:19:52:c8:49:26:88:1a:5f:a2:11:ec:82:
         76:80:6b:81:99:a0:5f:b4:a7:fc:70:c9:a1:d4:5b:40:6c:d6:
         3e:63:96:87:f4:ec:2a:57:e5:48:35:6b:7b:bc:2d:57:af:5e:
         20:f8:b1:98:f5:f3:c0:ce:79:6b:96:0f:8b:77:6a:88:ab:69:
         41:6e:ae:ed:c0:ab:69:3f:11:bc:0f:cc:36:f1:b6:1a:9d:db:
         70:c5:7a:45:41:12:3e:eb:7e:94:ca:be:c1:8e:41:da:0e:99:
         e7:ab:db:67:e1:1e:49:a0:b9:79:17:df:bd:7c:95:57:f1:d0:
         ff:ae:86:76:2a:bd:24:97:1f:c7:e1:4e:7b:9e:59:6a:fa:09:
         0f:e8:cc:8d:d7:92:c7:95:7f:01:33:f1:62:99:10:8e:84:33:
         e8:f0:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:43:25 2025 by rpki-client