Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.mft
File:                     FD419A93880C50E8553950967A4679AE5C75624E.mft (raw, json)
Hash identifier:          PUR6FZP+l2MEv1dm2Y5z5q2hX92TwCjYp6scQqYa0QU=
Subject key identifier:   77:6C:F2:FE:B4:5D:30:DE:F6:B8:5B:E9:25:CD:11:9A:54:33:F9:D2
Authority key identifier: FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E
Certificate issuer:       /CN=FD419A93880C50E8553950967A4679AE5C75624E
Certificate serial:       79E25AD5C894EC88688EEC27C90E964A414E52AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.mft
Manifest number:          32
Signing time:             Mon 17 Feb 2025 08:32:16 +0000
Manifest this update:     Mon 17 Feb 2025 08:27:16 +0000
Manifest next update:     Tue 18 Feb 2025 10:05:16 +0000
Files and hashes:         1: FD419A93880C50E8553950967A4679AE5C75624E.crl (hash: SN/Ne21Zc+01D5F8KmzfSTn6RPFR6kMAPSGHHvQIuy4=)
                          2: 3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa (hash: FV9kCIj4+tnPs7UtKX8HEdr/NpKM2MVt5LBJG9+bmMM=)
                          3: 323830343a323962343a3a2f33322d3332203d3e20323634303330.roa (hash: dUns5ppN/qeYZsXxDtpgRppdtE62LC1UpKCVVQux4cA=)
                          4: 3134332e3133372e34322e302f32332d3233203d3e20323634303330.roa (hash: eC4BXpEw8+jFJvY1BuUPaSRabMLGFFiArx9KqL+DCs4=)
                          5: 3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa (hash: sKp5cOur1S2Fp0z2dheJaz1/eCOSgdamd6fCVAkHWV0=)
                          6: 3134332e3133372e34312e302f32342d3234203d3e20323634303330.roa (hash: JqKjaiGwOqCBGokLsOTliAc9DzRcRCYwTDbkbi2tZYA=)
                          7: 3134332e3133372e34302e302f32342d3234203d3e20323634303330.roa (hash: lTRreXKISf0sJNwk5bFWC8pxFfSIkswidbmsfq93PAM=)
                          8: 3134332e3133372e34332e302f32342d3234203d3e20323634303330.roa (hash: 1n3x6431mYhqcMKjEoZ81N3aaJHZGvYrEWSHjlU/zRk=)
                          9: 3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa (hash: GiVmV+3ueOVo+pl3prgHE7b86fW+wflNGubcLec1FiU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e2:5a:d5:c8:94:ec:88:68:8e:ec:27:c9:0e:96:4a:41:4e:52:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD419A93880C50E8553950967A4679AE5C75624E
        Validity
            Not Before: Feb 17 08:27:16 2025 GMT
            Not After : Feb 18 10:05:16 2025 GMT
        Subject: CN=776CF2FEB45D30DEF6B85BE925CD119A5433F9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:44:7f:a5:98:b0:83:b6:ab:ee:50:9a:2a:
                    76:dd:ae:a8:2a:49:35:5b:4a:8e:b8:6c:be:1c:3c:
                    6d:a0:46:a0:eb:fa:17:d0:8d:ea:db:cd:30:b7:2d:
                    70:d6:4b:a9:74:54:23:0e:65:d2:b9:7b:23:b4:e0:
                    bb:99:ba:01:94:6c:a0:ae:32:10:01:2b:0f:0d:c8:
                    5c:52:a5:68:82:ec:51:2e:c1:be:b8:63:95:c2:87:
                    b2:3b:6d:de:14:e5:c2:27:88:d1:3b:d1:8a:29:57:
                    5b:96:50:fc:af:67:4f:d0:03:29:23:5b:e7:3f:a0:
                    fc:c7:cc:3a:2e:76:2f:04:7c:3c:de:85:bc:c8:64:
                    fa:e3:87:b7:3e:b4:f9:1a:49:0d:1b:b1:63:1a:cb:
                    25:b2:58:84:e9:8d:f8:74:25:a0:5d:98:f7:b7:b0:
                    5f:b0:40:c9:78:6d:44:1a:7f:1f:bf:ca:3a:46:b1:
                    1e:f6:06:ea:6e:a8:7e:65:7d:31:1f:1b:84:03:aa:
                    46:f8:d9:4c:be:38:90:2d:dc:1d:e2:aa:5f:bf:a6:
                    68:ca:ed:19:ed:cb:1e:df:da:90:9b:bf:d8:ba:14:
                    29:f6:73:4c:72:b3:bf:df:d9:26:85:34:6e:90:43:
                    12:51:a0:10:c5:34:fa:ae:8f:8c:57:c9:6e:c1:f2:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:F2:FE:B4:5D:30:DE:F6:B8:5B:E9:25:CD:11:9A:54:33:F9:D2
            X509v3 Authority Key Identifier:
                keyid:FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:5c:39:24:f4:6a:e2:86:68:d6:47:49:f1:03:08:2e:4f:
         2e:6d:a4:e2:dc:30:ee:52:02:9a:30:d1:63:63:26:93:b6:2f:
         72:11:b8:0d:6d:bd:6a:71:02:0e:68:2a:f3:2e:a0:24:65:45:
         0d:4f:40:20:63:7e:44:27:36:6c:d8:8f:ed:35:94:7f:10:e6:
         74:d7:f3:c4:13:fb:8a:31:34:94:80:56:b7:ce:2e:07:0e:d5:
         e8:4a:27:0e:2a:64:19:24:8c:15:79:3d:f1:63:0d:42:59:7f:
         50:4a:68:c6:f3:00:94:2d:2d:6d:b9:4d:ff:0c:a5:0d:46:40:
         31:fa:c2:6c:3d:7e:11:33:77:39:4b:86:88:1d:a1:29:49:4c:
         88:2d:e9:f2:73:f9:9d:6e:1d:c3:83:af:b0:84:b2:9c:fb:09:
         32:df:6f:74:1e:a2:47:d9:95:46:c3:1d:43:02:04:88:d0:82:
         6f:72:f3:0e:74:b7:f7:37:1f:51:4d:25:5b:04:ea:52:77:61:
         20:b8:40:bc:3e:c0:a6:60:be:bf:b3:72:39:2c:a1:7c:d1:12:
         a0:6c:25:fb:8c:b3:79:3c:63:af:03:81:67:ff:35:25:19:f1:
         15:58:90:e2:14:90:e1:9c:75:2a:f2:6c:d1:27:97:cd:32:ff:
         17:b4:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:17 2025 by rpki-client