Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.mft
File:                     27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.mft (raw, json)
Hash identifier:          vztZGbJV9zohtgaz0PusTgnIB3dWBKG28Qu15GhBjyw=
Subject key identifier:   F2:C8:62:2D:FC:AA:0C:A8:63:AD:DA:37:6A:CE:E5:AB:51:DB:80:DC
Authority key identifier: 27:C4:A6:55:2B:2A:20:F6:DF:7C:4A:54:98:CC:6F:F9:53:BA:B4:92
Certificate issuer:       /CN=27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492
Certificate serial:       4F4CDB1CB7C7C3192A84FDCDCEF0ECBBBBCE2901
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.mft
Manifest number:          12
Signing time:             Mon 17 Feb 2025 07:29:16 +0000
Manifest this update:     Mon 17 Feb 2025 07:24:16 +0000
Manifest next update:     Tue 18 Feb 2025 08:52:16 +0000
Files and hashes:         1: 27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.crl (hash: /ADAVt7p3szMoGU/GOSgiNVpblR+SS6Cfc5S/01swm4=)
                          2: 323830343a376331303a3a2f33322d313238203d3e20323731343733.roa (hash: UUqLMHXQ1D7Yctq96s4HaMLuot0UopuAvbAYPvxZGyw=)
                          3: 3138312e3137342e3230382e302f32322d3332203d3e20323731343733.roa (hash: shN+ETtUYHn68mPizBF8VjytrTr4V+XWO5OWtqOM4/U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4c:db:1c:b7:c7:c3:19:2a:84:fd:cd:ce:f0:ec:bb:bb:ce:29:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492
        Validity
            Not Before: Feb 17 07:24:16 2025 GMT
            Not After : Feb 18 08:52:16 2025 GMT
        Subject: CN=F2C8622DFCAA0CA863ADDA376ACEE5AB51DB80DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f0:7c:ff:8d:56:c6:0f:5f:b8:63:43:be:cb:
                    f7:d0:c5:0b:1b:6f:3c:7a:04:3b:40:5c:cd:e1:2c:
                    58:a0:24:09:74:11:7b:34:0e:81:bc:db:1e:e0:6d:
                    1f:7a:d3:69:9b:1a:bf:77:cc:38:5b:89:2f:73:d3:
                    12:7d:20:e7:7a:89:1e:27:7e:7e:4f:42:7d:8d:87:
                    81:a9:ee:c9:6b:74:19:ce:0e:92:56:05:07:a3:f6:
                    e3:23:1c:37:04:b0:1f:d4:c3:bb:c2:22:c6:7f:f7:
                    49:ae:e3:2e:8b:f8:f8:c9:be:cb:82:7b:68:7e:a8:
                    d3:d7:87:20:44:fd:12:cf:e8:70:e7:a9:29:91:85:
                    ef:36:83:6a:b2:72:33:81:6d:70:54:13:34:2a:6d:
                    c2:70:de:0e:55:c1:4d:a1:1c:35:a4:6e:66:90:d3:
                    16:06:1d:3f:66:c6:a2:79:03:03:3b:0a:bd:4e:4b:
                    b7:f7:0e:0e:92:b0:ce:59:5e:d2:22:1e:2b:79:3a:
                    2e:7a:a7:8d:1e:3a:3d:d7:ca:c0:df:d7:80:ab:13:
                    53:96:3f:2e:80:ce:2c:62:b5:04:a2:e3:19:e4:07:
                    1b:7b:3e:04:7c:f1:ab:da:1d:d2:e0:93:7e:d6:91:
                    ad:bc:ca:d6:c5:e5:8c:05:0e:df:33:1e:77:4d:b4:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C8:62:2D:FC:AA:0C:A8:63:AD:DA:37:6A:CE:E5:AB:51:DB:80:DC
            X509v3 Authority Key Identifier:
                keyid:27:C4:A6:55:2B:2A:20:F6:DF:7C:4A:54:98:CC:6F:F9:53:BA:B4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:8a:4b:29:17:9e:02:bd:14:e8:55:5a:aa:a4:6e:3c:1b:
         c2:f0:d5:b4:ca:f4:e8:31:b0:e4:dd:43:cd:6e:b0:f4:d0:b8:
         3b:c9:8a:60:30:f1:70:b1:af:9d:d8:96:5a:9b:5c:0f:74:83:
         28:bd:7a:95:c9:43:3a:af:d5:d8:5d:00:05:d2:3e:fb:8b:61:
         9a:12:03:dd:34:a1:58:75:c5:b3:ff:51:93:3e:df:50:63:13:
         42:54:a2:ac:76:94:cc:b1:2a:22:69:66:2d:10:a0:88:45:f4:
         41:87:1c:66:f3:c1:00:95:5b:93:6e:0d:8a:df:8a:ee:d5:33:
         6a:03:ca:a9:4c:d7:c0:d9:91:ac:d9:e4:73:bc:87:da:ac:b1:
         85:a2:2e:bc:7e:3d:32:47:97:9a:3f:e9:4f:5d:c8:4b:59:df:
         0c:7c:fe:3c:47:cd:c6:34:68:ba:42:85:08:7b:9b:ef:47:d9:
         54:5d:81:a0:94:28:ba:7b:45:56:a9:64:cc:90:ef:37:8f:43:
         7d:1e:a5:15:a8:0a:7c:22:eb:91:b7:90:34:f8:42:30:e5:0e:
         76:15:c5:bc:23:e1:de:28:36:3b:eb:de:3c:f0:da:5d:1b:60:
         fc:e4:30:e1:61:27:b8:b3:ab:27:f1:20:97:40:3d:f5:87:f9:
         b0:b4:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:02 2025 by rpki-client