Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
File:                     EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json)
Hash identifier:          DfDA6XOZ9OEzi0Op79mhH18pTsIxhlqD4JFT27S+q1s=
Subject key identifier:   D2:49:58:37:04:27:4B:10:BC:43:59:7D:FD:1A:E8:ED:54:BF:F7:40
Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Certificate issuer:       /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
Certificate serial:       355799C7A0ED0805DF6CD6A9BBE6B97517EA60DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
Manifest number:          01E2
Signing time:             Fri 28 Mar 2025 16:30:00 +0000
Manifest this update:     Fri 28 Mar 2025 16:25:00 +0000
Manifest next update:     Sat 29 Mar 2025 19:35:00 +0000
Files and hashes:         1: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: h5ZbShRyf6a9djvBfVUYZNDwI63lUNghsgSzyARdb0k=)
                          2: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: ijOGHcQVW5WCW6t/98d9ECpQUH3zoG7e0RBQlqD5P9I=)
                          3: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: zB3RAYBJ5ds+DR9vGHFVJDE/Fhcry/mu8n6ADfs/cdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:99:c7:a0:ed:08:05:df:6c:d6:a9:bb:e6:b9:75:17:ea:60:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
        Validity
            Not Before: Mar 28 16:25:00 2025 GMT
            Not After : Mar 29 19:35:00 2025 GMT
        Subject: CN=D249583704274B10BC43597DFD1AE8ED54BFF740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:f0:c8:a4:19:10:e1:e2:9d:05:55:7a:34:
                    73:cd:16:2a:3e:73:2f:2a:0e:eb:07:32:f8:b2:b4:
                    02:e2:34:e0:de:e3:1b:a1:12:ca:0e:c4:6d:40:c9:
                    da:76:66:86:bc:6e:92:d8:b3:01:93:72:29:93:52:
                    e2:1f:b2:4e:5c:1e:a1:b8:59:6b:4f:a0:14:82:0a:
                    80:fe:07:f0:07:37:95:9e:a4:d7:63:db:b5:17:b6:
                    c8:02:92:8f:99:08:a3:91:49:4a:f7:48:8a:fd:dc:
                    4b:00:9c:25:e1:3d:47:d9:26:aa:91:aa:26:68:50:
                    54:f9:5d:67:34:26:ce:5c:5e:d4:e4:37:76:8a:27:
                    48:8a:0d:57:98:d6:ed:14:cb:7c:c7:1f:ed:b1:0f:
                    7a:3a:3e:f4:39:77:32:53:21:67:b3:18:74:38:fb:
                    a1:aa:c9:3d:a6:86:10:60:32:12:97:11:d1:84:4a:
                    8b:57:fd:89:c9:a1:cb:b8:cf:e2:38:bb:f7:86:d0:
                    6f:ff:a2:31:e6:b0:5a:f8:e4:9b:54:15:70:a1:e2:
                    a7:aa:60:d9:04:1a:42:45:9f:68:06:d9:b1:6a:00:
                    4f:28:a0:d8:84:27:d8:1e:ba:f3:87:96:14:87:d7:
                    5c:01:28:49:69:16:8b:e0:95:b3:8a:dd:c2:19:22:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:49:58:37:04:27:4B:10:BC:43:59:7D:FD:1A:E8:ED:54:BF:F7:40
            X509v3 Authority Key Identifier:
                keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:ba:a7:ce:05:b8:db:9a:98:92:39:3a:5d:26:bc:d4:a4:
         3c:d8:a1:b1:03:0b:75:1a:fa:3c:7a:99:bf:86:24:26:96:72:
         f7:de:f2:dc:08:7a:a5:a5:8f:e9:50:2f:c8:f3:79:28:25:b0:
         f4:06:c9:a5:21:a6:6b:53:72:b3:e3:37:e7:f7:a0:ff:b5:78:
         d7:66:5e:ce:e6:81:8c:fc:83:d6:9a:ce:2a:d8:ab:57:2d:b4:
         c3:3e:33:9b:2a:fc:dd:41:88:f6:a5:5a:ce:e2:c7:4f:1e:4f:
         b9:17:bc:42:b0:0c:9e:df:3c:0f:e0:14:4d:81:8a:dd:7f:db:
         6f:f2:41:c9:df:74:ff:b5:d9:55:a5:82:53:d0:a3:72:9f:d0:
         3b:b4:d9:f7:85:ed:04:ab:54:07:bd:8b:b5:bb:97:9a:36:89:
         d8:15:9a:a8:c7:1b:68:e8:9d:db:5e:21:1f:13:98:17:1b:a1:
         8a:c9:58:15:cb:10:77:c3:a8:b3:cc:53:b9:3d:da:dd:4c:36:
         ed:63:98:99:f5:07:eb:5c:79:fe:2b:54:b9:66:b4:5b:ce:68:
         4e:69:ff:84:16:ed:ae:ce:cd:e7:5c:8e:81:8c:8d:28:95:c3:
         ff:37:c8:4e:e5:bd:c8:22:dc:1a:22:5c:81:cd:92:80:24:80:
         2c:06:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:19 2025 by rpki-client