Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft
File:                     3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft (raw, json)
Hash identifier:          WY8n+LXsmJoS7iLzo2LIxVtpim31N9aUNvSvxzaRZBM=
Subject key identifier:   BD:54:70:DC:E0:BB:27:81:45:A1:BA:19:89:BB:87:56:1C:95:A0:F0
Authority key identifier: 3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20
Certificate issuer:       /CN=3D059F9D67F14B6324D19CEDD7A94CED91E5D920
Certificate serial:       0F08FBA4599C5EDF246576F7D85C36F1793917AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft
Manifest number:          011F
Signing time:             Mon 06 Jan 2025 13:06:07 +0000
Manifest this update:     Mon 06 Jan 2025 13:01:07 +0000
Manifest next update:     Tue 07 Jan 2025 16:40:07 +0000
Files and hashes:         1: 34352e3138302e3136302e302f32322d3332203d3e20323632323835.roa (hash: 3AzxrXm3TgtodeomRTljGcJ0+TjUNauj6W4zGcLR+7c=)
                          2: 3D059F9D67F14B6324D19CEDD7A94CED91E5D920.crl (hash: XuU3QzR/w640uSCSnJdYVDcVtkfBX1vHdODJyVKupEU=)
                          3: 3230312e3135392e32342e302f32312d3332203d3e20323632323835.roa (hash: Q0HZ8OB7Kb+5cL1eyW22DcAgLyqxK91znrskt+NEJio=)
                          4: 3137372e3132342e382e302f32312d3332203d3e20323632323835.roa (hash: z3dcB32z/cyfpVLdXu8fPucfekSKqMvRzeYin+oW1J0=)
                          5: 3137372e35322e3234342e302f32322d3332203d3e20323632323835.roa (hash: eryF+ugxDpK0649B0TAVgFq8GQYJyK0pacP76yfr/V8=)
                          6: 323830343a6137343a3a2f33322d313238203d3e20323632323835.roa (hash: SwD3DCgjXHvCv4lRFDsEqCERCqg5iLPBFTKxzRlYMAA=)
                          7: 34352e3136312e3235322e302f32322d3332203d3e20323632323835.roa (hash: 6EFkUpvQiDS7Q+/lADLGO7uVoat+1Aevrs4h6dgo6FI=)
                          8: 34352e3137302e36342e302f32322d3332203d3e20323632323835.roa (hash: 8/nSFxJjb2Jlein0Y0+jEa5q1ei/KMm51Ogzpm1jDD8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:08:fb:a4:59:9c:5e:df:24:65:76:f7:d8:5c:36:f1:79:39:17:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D059F9D67F14B6324D19CEDD7A94CED91E5D920
        Validity
            Not Before: Jan  6 13:01:07 2025 GMT
            Not After : Jan  7 16:40:07 2025 GMT
        Subject: CN=BD5470DCE0BB278145A1BA1989BB87561C95A0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:f8:85:c0:99:81:3f:ac:93:c4:ad:27:e8:
                    95:42:b9:98:98:ec:52:fa:fa:60:0f:0a:b2:fe:90:
                    74:3e:ab:0a:30:4e:ac:3b:4a:dc:4a:d1:48:74:80:
                    12:29:1a:65:a2:1d:ea:5a:54:53:af:26:ae:33:0b:
                    70:ac:66:60:e7:ba:60:50:8b:a1:09:ba:bd:9a:4f:
                    9c:90:23:62:0d:29:87:36:cb:66:92:e5:01:62:12:
                    17:36:8c:c6:25:44:1b:a3:01:a9:b2:fe:11:a0:02:
                    bf:b6:b3:87:c2:c9:5e:ca:df:e2:9e:b5:79:1d:3c:
                    91:ea:f2:8b:cb:d1:b9:56:c5:31:48:d5:c2:12:e3:
                    23:4e:0c:e7:b4:a5:1f:39:27:a5:b1:b2:a6:2d:cd:
                    64:c5:fe:6b:24:f6:51:9f:01:ea:af:bd:ed:f7:6a:
                    d7:2b:26:33:e9:f8:7e:d2:e3:db:dd:f6:8f:6f:0b:
                    06:7f:7a:7c:67:c5:63:fc:86:66:bc:1d:d2:11:c0:
                    c6:4f:87:bd:cc:5f:77:15:9a:e6:a4:21:73:5a:f5:
                    4f:99:7d:a7:8f:69:25:65:38:33:52:0a:41:2b:5c:
                    f6:5b:f0:2a:9e:b4:22:a4:01:eb:e8:dc:25:88:25:
                    bb:fe:5e:d2:97:5e:d6:b5:76:89:a4:a5:3d:72:c9:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:54:70:DC:E0:BB:27:81:45:A1:BA:19:89:BB:87:56:1C:95:A0:F0
            X509v3 Authority Key Identifier:
                keyid:3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:26:7a:89:12:42:c8:ef:e4:92:69:58:fa:7f:1c:8b:ee:
         9a:1f:33:5b:43:0f:e9:51:5e:2a:b1:8c:5a:93:5f:ee:8d:92:
         c8:3e:6f:38:f4:5d:4a:60:c3:9c:ed:fb:c9:0e:c7:19:51:28:
         60:c7:05:94:27:7c:95:c0:ef:75:7d:16:f5:a7:81:83:ab:1a:
         b0:02:46:5c:f5:bc:3c:07:2b:5d:92:3d:37:86:4b:1e:f2:63:
         47:2e:33:2a:56:92:31:07:84:87:55:3d:75:d3:ee:14:ce:84:
         50:f3:cf:d6:bf:6e:37:31:c3:a5:b9:0c:9b:45:31:f2:88:99:
         56:ac:2d:15:75:40:6e:8f:97:f0:06:f4:e9:9a:25:8f:7a:06:
         a6:c3:40:35:66:e9:35:76:5c:27:04:75:2d:e9:07:16:8c:9f:
         81:fa:8a:fd:be:eb:35:81:15:74:19:4c:e4:48:09:0a:37:47:
         ce:ec:15:71:9a:d5:b4:15:1e:29:8f:9f:05:5c:86:86:df:70:
         f3:17:3b:67:b4:d5:fa:1d:0d:fe:71:e8:4d:22:19:a6:5b:2e:
         ec:cf:1a:21:ab:c7:3f:0c:38:9f:16:d3:fd:89:8d:93:c9:c6:
         17:f7:d9:c8:25:cb:9a:7f:8c:a9:44:11:03:05:8b:51:af:af:
         58:38:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:48:26 2025 by rpki-client