Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/4F8329C8BBD7CAFE38A6294270189F534E12126A.mft
File:                     4F8329C8BBD7CAFE38A6294270189F534E12126A.mft (raw, json)
Hash identifier:          imiGr8nYyyAJ7UzsxzTpDE8ZFv6EhJdNbM4K35ShxUU=
Subject key identifier:   97:2B:35:BB:04:56:45:17:AE:EA:3F:A2:4E:A9:0A:CC:42:3C:A7:D8
Authority key identifier: 4F:83:29:C8:BB:D7:CA:FE:38:A6:29:42:70:18:9F:53:4E:12:12:6A
Certificate issuer:       /CN=4F8329C8BBD7CAFE38A6294270189F534E12126A
Certificate serial:       7444D7BEB5FC6699671ED4FD44BCFE486EC6F7A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F8329C8BBD7CAFE38A6294270189F534E12126A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/4F8329C8BBD7CAFE38A6294270189F534E12126A.mft
Manifest number:          08
Signing time:             Wed 11 Dec 2024 04:28:15 +0000
Manifest this update:     Wed 11 Dec 2024 04:23:15 +0000
Manifest next update:     Thu 12 Dec 2024 04:47:15 +0000
Files and hashes:         1: 323830343a323931383a3a2f33322d313238203d3e20323633393937.roa (hash: Vb8lI3hw7JlfuL+wqq2+Odq+/DUbVKwDQTIJLEAPbSw=)
                          2: 4F8329C8BBD7CAFE38A6294270189F534E12126A.crl (hash: D2TRttHmrpwArqk5GReNh1QBB6UT9GsXTuxVOTpJNu4=)
                          3: 3134332e302e35322e302f32322d3332203d3e20323633393937.roa (hash: BXiugBNuv3WOiquv8Y5/Pze9nqNfFN+j/+JVZ8FbIWw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:44:d7:be:b5:fc:66:99:67:1e:d4:fd:44:bc:fe:48:6e:c6:f7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8329C8BBD7CAFE38A6294270189F534E12126A
        Validity
            Not Before: Dec 11 04:23:15 2024 GMT
            Not After : Dec 12 04:47:15 2024 GMT
        Subject: CN=972B35BB04564517AEEA3FA24EA90ACC423CA7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:a9:c4:2f:39:b1:44:1d:ec:84:7e:17:cc:
                    28:38:69:65:79:84:ec:b5:8c:0c:4e:2e:6f:f2:dc:
                    c2:79:83:87:0a:1b:53:c6:a8:b7:74:48:ae:06:de:
                    ea:31:c0:eb:15:a5:69:c3:63:e7:34:70:82:10:81:
                    d3:19:c1:c2:c8:3f:f2:90:6b:5b:a9:d2:77:e8:92:
                    eb:76:0f:57:75:b0:c9:50:9c:25:f6:78:b6:e6:b9:
                    0b:f4:55:17:4a:b5:b3:be:49:d0:70:2b:cb:8d:15:
                    b2:a3:34:87:6b:0f:42:4f:45:b8:57:e1:76:09:29:
                    12:18:44:fa:6b:c5:4f:1c:90:c6:e4:65:b8:b6:8d:
                    f4:63:2d:cb:c5:26:d9:f7:03:e6:b0:06:01:eb:82:
                    78:16:d8:52:1d:1a:2b:0a:40:5a:61:06:aa:a5:8d:
                    b0:f7:7f:77:69:8d:a8:57:df:15:24:f3:b6:6a:a2:
                    40:f9:45:27:1c:9c:19:88:ac:83:49:6f:fd:12:dc:
                    48:15:93:37:64:31:3f:3e:86:2e:48:da:fb:50:2e:
                    fb:df:fc:c1:8b:f3:f8:02:62:29:34:e9:c9:56:11:
                    81:38:4e:1e:78:60:ff:a0:9b:cc:24:70:1f:6e:2f:
                    f7:41:b6:ab:b0:25:9e:ff:3e:54:1f:97:75:75:8f:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2B:35:BB:04:56:45:17:AE:EA:3F:A2:4E:A9:0A:CC:42:3C:A7:D8
            X509v3 Authority Key Identifier:
                keyid:4F:83:29:C8:BB:D7:CA:FE:38:A6:29:42:70:18:9F:53:4E:12:12:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/4F8329C8BBD7CAFE38A6294270189F534E12126A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F8329C8BBD7CAFE38A6294270189F534E12126A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/4F8329C8BBD7CAFE38A6294270189F534E12126A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:f6:d4:8b:28:5a:e2:1f:20:ba:42:73:c8:91:67:c2:38:
         98:68:d7:a6:02:7a:78:3e:3d:c6:6c:11:82:52:1f:19:8a:cb:
         a7:d2:3a:b3:0e:ff:a1:9e:3d:4f:db:d9:be:62:7c:2a:d0:7a:
         f7:34:03:3d:18:20:10:f5:b2:9d:38:fc:6f:5b:bf:0c:9f:22:
         71:c2:3f:42:04:4d:ef:95:97:32:45:03:76:66:ea:64:c1:04:
         1f:5e:f3:b8:02:fa:6d:b3:7e:5e:05:18:1d:35:15:eb:9b:81:
         38:6f:d4:d1:1f:a7:e1:21:ae:eb:f7:ad:f1:e4:69:89:8f:17:
         47:2f:93:31:4b:b3:41:c0:1c:f2:cd:78:7a:0f:33:28:a1:2a:
         54:69:6d:86:92:14:9c:f2:f3:05:2d:71:41:52:b9:34:f9:67:
         92:da:9b:2c:1a:b8:15:6c:19:71:a1:a6:7d:4d:e9:42:8b:f2:
         fa:32:e3:76:3e:c2:3c:4e:15:76:e0:21:6a:e7:50:46:0c:53:
         ee:91:42:20:ca:d5:e0:98:2c:c9:29:4d:8b:3c:49:22:b1:60:
         52:73:32:e9:11:cc:45:64:73:c3:47:3c:7a:f6:01:aa:d1:36:
         36:d7:7c:c9:9b:59:2a:14:d2:78:c7:7d:e3:e3:1d:40:82:a1:
         79:bf:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:40 2025 by rpki-client