Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.mft
File:                     CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.mft (raw, json)
Hash identifier:          XJCziD73JywSVLDo3eApHlRu3T9teH0o41hL0NK4VQg=
Subject key identifier:   06:75:18:AA:CA:24:D4:F5:A5:E7:41:45:4A:8E:56:4E:6E:E3:40:35
Authority key identifier: CD:8C:8F:1F:67:0F:CC:ED:D9:D0:34:09:B0:D7:E7:C4:E0:98:D3:24
Certificate issuer:       /CN=CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324
Certificate serial:       0ECB597ABC1245530969738AAEE96A9DBD9EBF3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.mft
Manifest number:          25
Signing time:             Wed 15 Jan 2025 13:50:34 +0000
Manifest this update:     Wed 15 Jan 2025 13:45:34 +0000
Manifest next update:     Thu 16 Jan 2025 17:44:34 +0000
Files and hashes:         1: 323830343a363036303a3a2f33322d3334203d3e20323639313633.roa (hash: GJhrzEbSFKOPTTNf3WCC7mY3dpyF+u9lGIGtm79pijg=)
                          2: 34352e3138312e32342e302f32332d3234203d3e20323639313633.roa (hash: bFRgNYnws4t115nmo8aSzp5mzPXSQT4yE9gyOB4/cwo=)
                          3: CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.crl (hash: 7iDToEH+MAeklDEHo/Rb559BjbtzxBuXqVpP63y3sms=)
                          4: 34352e3138312e32372e302f32342d3234203d3e20323639313633.roa (hash: GXrCOKOh8L3MPItnM6j0+q0rK5kcxojWQqczBEo/nv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cb:59:7a:bc:12:45:53:09:69:73:8a:ae:e9:6a:9d:bd:9e:bf:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324
        Validity
            Not Before: Jan 15 13:45:34 2025 GMT
            Not After : Jan 16 17:44:34 2025 GMT
        Subject: CN=067518AACA24D4F5A5E741454A8E564E6EE34035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0f:c0:7f:a8:28:67:76:1f:52:02:69:1b:b8:
                    64:bf:0c:01:46:0c:bd:03:03:92:54:66:cd:50:a6:
                    6c:a7:ca:32:95:c6:7f:70:58:73:22:85:d8:5e:f2:
                    e1:2f:f8:95:79:6b:83:69:05:2a:7f:62:fc:0f:c7:
                    df:0d:b3:ea:2b:67:ba:19:f1:fe:80:36:c6:98:6a:
                    7d:42:48:76:9a:43:e3:f6:fc:7e:d9:18:e5:34:0e:
                    79:0d:80:48:3f:d9:88:33:42:15:98:5f:b2:87:6c:
                    7c:4a:53:48:b0:12:8f:0e:f7:5e:ce:f2:4a:65:f4:
                    f0:51:f9:0e:34:ac:0e:29:14:46:4f:ae:30:84:09:
                    3e:a7:93:33:55:de:49:da:25:d5:05:6c:b9:3d:16:
                    77:5f:46:92:5e:93:44:1a:c2:a8:0a:76:4d:5b:2a:
                    52:7f:6e:bc:52:7e:b4:1d:11:73:5e:d3:c9:cc:48:
                    3d:6c:69:d9:ad:d9:c6:a6:d5:d6:f7:a0:26:51:44:
                    b1:e7:ef:91:37:5f:50:03:a8:c8:ae:fc:13:6c:96:
                    80:85:70:51:28:2b:35:d3:58:00:f8:d3:3f:13:de:
                    40:47:30:d7:c7:9b:d4:5c:ce:ce:cb:07:4f:77:46:
                    32:73:0e:80:f2:81:85:9e:bf:91:18:4a:d6:b6:12:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:75:18:AA:CA:24:D4:F5:A5:E7:41:45:4A:8E:56:4E:6E:E3:40:35
            X509v3 Authority Key Identifier:
                keyid:CD:8C:8F:1F:67:0F:CC:ED:D9:D0:34:09:B0:D7:E7:C4:E0:98:D3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/CD8C8F1F670FCCEDD9D03409B0D7E7C4E098D324.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:22:3b:3a:d1:f6:da:58:5c:27:b0:94:81:22:71:5a:85:a7:
         25:cc:de:61:9b:e5:5b:0a:c1:e6:48:f0:c4:07:23:5d:cc:e9:
         32:7e:64:aa:51:e6:15:f2:aa:61:6f:22:15:e6:91:65:8f:9d:
         67:7d:11:b5:ef:b5:0d:cb:59:63:03:70:85:0e:30:60:dd:5d:
         84:22:03:94:5c:c0:cf:cb:a9:62:25:c5:51:d6:f7:03:7a:53:
         18:17:4a:50:5b:d7:02:c4:65:0c:ab:70:31:75:1b:6c:87:a8:
         ed:72:30:cb:58:db:b9:b8:9a:52:a0:87:6c:ea:02:a5:04:03:
         fe:9b:e3:d4:03:3b:9e:73:65:77:7b:42:30:49:b1:44:e2:04:
         7e:f6:b7:6e:37:d9:4e:1e:64:41:3b:27:8b:50:72:f6:23:95:
         72:15:c5:f4:d4:cf:1f:a5:d1:ad:47:86:ff:ea:d4:15:bc:55:
         99:8c:16:35:1e:9f:4f:10:ce:36:3d:fe:79:74:a7:bc:05:ab:
         27:28:1e:ae:bb:43:ea:f8:f3:63:83:42:b5:16:4a:48:3e:d2:
         40:82:04:1f:d7:24:d8:fd:19:bc:61:94:b9:23:aa:e7:01:41:
         3e:35:c0:86:03:35:a8:76:24:d3:70:b9:11:91:92:14:f1:db:
         e3:89:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:13:06 2025 by rpki-client