Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.mft
File:                     20D709AF200623B78B233AF45514E6AB9E7CCBBC.mft (raw, json)
Hash identifier:          2WmAp7QXwTR35+sv5jsLStrM2T+CJ7iri17twSqvoyA=
Subject key identifier:   8B:C9:FC:30:D1:EF:9D:6E:BF:23:40:7C:7C:25:AB:69:9C:8F:EB:1D
Authority key identifier: 20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC
Certificate issuer:       /CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
Certificate serial:       76D57AE4001C36ED4FD2943C4B37088BF497750B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.mft
Manifest number:          0D
Signing time:             Mon 05 Feb 2024 09:13:24 +0000
Manifest this update:     Mon 05 Feb 2024 09:08:24 +0000
Manifest next update:     Tue 06 Feb 2024 11:07:24 +0000
Files and hashes:         1: 3136382e3230352e3235332e302f32342d3234203d3e20323634383932.roa (hash: LkiN/nZdf1vKuEoTO/ekhxrFv95oqTxBCrWad2fPdxY=)
                          2: 3136382e3230352e3235352e302f32342d3234203d3e20323634383932.roa (hash: 29UqjdE8gEp0vrP8uJE3IfEqeYzlxA7bvTScKNA4hq8=)
                          3: 20D709AF200623B78B233AF45514E6AB9E7CCBBC.crl (hash: C78Pl8VvwMuHTMq7Gg7XMPWcBBI+3E7F33NAW0DGCD8=)
                          4: 3136382e3230352e3235342e302f32342d3234203d3e20323634383932.roa (hash: fPYIzBvq2r69p9ACmG6Q0XoWXqxES9mcjxA+hK8ZOhg=)
                          5: 3136382e3230352e3235322e302f32342d3234203d3e20323634383932.roa (hash: 5pA+YN+OpruM5+uWHioargYMfJ5tPN1MriK9GmrQOyk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d5:7a:e4:00:1c:36:ed:4f:d2:94:3c:4b:37:08:8b:f4:97:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20D709AF200623B78B233AF45514E6AB9E7CCBBC
        Validity
            Not Before: Feb  5 09:08:24 2024 GMT
            Not After : Feb  6 11:07:24 2024 GMT
        Subject: CN=8BC9FC30D1EF9D6EBF23407C7C25AB699C8FEB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:e5:18:35:c8:74:c3:55:c0:fb:dc:2c:a2:
                    97:78:ba:47:b5:29:9f:0c:e8:d4:d7:34:6f:d2:0c:
                    a7:b6:d9:47:00:8c:51:a1:86:4a:97:23:6d:12:09:
                    72:af:1e:c5:a2:86:08:f4:c2:81:d1:f1:ca:8f:7c:
                    5e:4f:02:de:30:22:c1:43:ec:60:06:2d:a1:6e:02:
                    3d:f3:08:f8:bc:e0:f3:0b:84:9d:f2:ec:38:b1:34:
                    43:47:1b:be:45:3b:34:c6:86:f4:82:80:fd:85:90:
                    7d:3f:8d:ce:1e:a8:7b:56:ed:69:0d:9c:88:a7:b5:
                    45:e3:91:1a:31:d1:63:c0:19:79:f2:55:12:8b:ec:
                    2f:17:ae:8a:02:d1:42:b0:c6:1d:a2:2c:82:4b:f8:
                    57:b3:7f:73:0f:b5:00:a0:ff:16:bb:fb:c5:00:47:
                    36:e9:5c:e1:09:5a:1a:13:a8:5e:56:95:1b:b9:55:
                    0c:20:6d:51:cd:d1:7f:e3:53:9c:3a:01:ec:a3:6e:
                    46:0d:34:f3:92:18:c4:fa:f8:b6:53:0a:dc:3c:66:
                    d9:27:09:37:85:19:fc:c2:64:24:95:07:f8:e5:f8:
                    b4:5c:66:53:11:74:b4:fc:fe:18:62:d0:ff:11:2e:
                    9f:9e:7e:49:81:96:82:1e:b9:23:fb:a9:10:0b:5f:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C9:FC:30:D1:EF:9D:6E:BF:23:40:7C:7C:25:AB:69:9C:8F:EB:1D
            X509v3 Authority Key Identifier:
                keyid:20:D7:09:AF:20:06:23:B7:8B:23:3A:F4:55:14:E6:AB:9E:7C:CB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AKkcAgzkwVkeoTXSLmV2t2XMWLm3QskX6pRTQaeSaHH/0/20D709AF200623B78B233AF45514E6AB9E7CCBBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6a:ac:10:4f:09:1e:99:71:59:65:57:f1:1c:04:ac:ae:e1:
         24:cb:4b:c8:ec:c2:b9:e9:b9:db:cf:db:e1:ec:12:07:00:21:
         4c:d2:8f:d5:6e:c5:ec:2b:82:1c:8a:5e:f6:15:5b:2f:51:e6:
         47:f3:e7:6a:4e:3f:9c:76:8f:81:fc:e5:88:76:26:ff:7b:5b:
         e1:77:f2:7b:db:3b:ee:5b:42:58:27:09:a2:b7:cc:8b:8d:5f:
         0a:0e:75:81:2c:08:25:d0:59:75:e0:86:bd:6a:46:19:65:a4:
         74:59:9b:16:2f:e2:83:35:0c:23:64:1c:59:f8:2f:ef:3f:93:
         98:f7:bf:7d:42:4c:c1:f8:35:a6:aa:30:4f:e1:da:79:3c:b7:
         03:c7:e2:5e:4c:ca:d9:d4:45:5f:83:e9:21:bf:97:df:be:ed:
         88:2c:e3:cc:8d:16:76:d4:50:46:ad:b7:0b:5a:b1:93:73:71:
         43:b1:cd:16:63:67:8f:ca:9a:31:16:e4:a1:35:8e:57:3f:5f:
         a0:92:b4:17:85:f8:21:ea:49:cc:56:47:a9:23:c4:c4:26:68:
         5b:63:50:ca:2d:5e:e9:d1:26:cb:24:1f:bf:4f:77:d3:5b:5f:
         8b:70:73:6d:0a:ee:4d:cc:12:f7:31:c0:76:cb:8f:25:80:4b:
         9e:f6:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:55 2025 by rpki-client