Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft
File:                     09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft (raw, json)
Hash identifier:          px9NIU/ZTqu9/p/iDd9cQJhkwb+yqgRbik4Mcy5YU/o=
Subject key identifier:   C6:02:79:02:D3:CF:B9:16:F2:A5:B1:8A:88:53:19:9E:A1:D9:8A:F5
Authority key identifier: 09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
Certificate issuer:       /CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Certificate serial:       4A4511E48AF8FA48BD75791EC23ABAA90E915E4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft
Manifest number:          1E
Signing time:             Fri 26 Apr 2024 17:13:05 +0000
Manifest this update:     Fri 26 Apr 2024 17:08:05 +0000
Manifest next update:     Sat 27 Apr 2024 20:10:05 +0000
Files and hashes:         1: 09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl (hash: +J/Oohxjx9OAPep1tS30USilJrfIh3JSfofpH82VXsg=)
                          2: 34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (hash: POioAg3mGE1NqO/42D19tfkbohLjZYOI+frV0M1bUaQ=)
                          3: 323830343a353865303a3a2f33322d3334203d3e20323638313535.roa (hash: Q39AfjNX4aMzt8KL49GJa/MASfbKPSxLl5QZ7pHNOQ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:45:11:e4:8a:f8:fa:48:bd:75:79:1e:c2:3a:ba:a9:0e:91:5e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
        Validity
            Not Before: Apr 26 17:08:05 2024 GMT
            Not After : Apr 27 20:10:05 2024 GMT
        Subject: CN=C6027902D3CFB916F2A5B18A8853199EA1D98AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:1e:f6:24:ec:50:d7:81:48:31:d5:52:db:
                    d1:d1:0e:9f:b8:fb:e4:eb:74:28:04:4a:22:27:ea:
                    09:52:3e:e4:76:b4:8b:29:08:b5:4e:50:01:84:7f:
                    14:55:f2:b2:08:ee:2a:6b:71:3f:dd:a3:87:7d:d4:
                    67:23:8c:85:0f:24:8e:c7:d0:b3:7e:1f:b7:69:5e:
                    de:6c:da:15:75:ef:39:69:3e:01:64:ee:b3:cf:3a:
                    1f:2b:06:61:c5:0b:82:ba:9a:82:f0:c6:36:03:43:
                    dd:fd:3f:b7:31:1d:54:37:cf:89:c6:fc:22:bb:fd:
                    56:37:55:b8:94:27:65:11:32:b2:b6:34:4f:94:95:
                    f5:90:b4:bb:f5:ea:d8:77:3c:f9:38:12:fa:29:59:
                    4c:ad:3a:f5:65:99:bf:a7:79:38:13:4b:59:31:0f:
                    a4:38:e9:a7:f4:67:e5:2f:5e:5f:da:3e:72:8e:75:
                    da:1f:5e:2d:c5:0f:49:15:a2:21:97:0f:01:45:18:
                    fe:84:45:0d:38:9e:d4:b1:7b:e6:10:0f:7c:e7:ef:
                    0e:2b:96:89:a4:a0:52:25:33:30:82:6e:3c:3c:8c:
                    5c:5a:22:c2:f4:4c:62:d3:7b:e1:98:3e:14:98:5e:
                    1d:a4:fe:2f:51:04:51:92:66:fd:64:62:85:93:d9:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:02:79:02:D3:CF:B9:16:F2:A5:B1:8A:88:53:19:9E:A1:D9:8A:F5
            X509v3 Authority Key Identifier:
                keyid:09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:58:24:63:8c:b0:c3:3e:f2:43:76:b9:18:59:5c:4f:ef:df:
         33:73:27:2a:28:ae:84:0a:d0:ed:0b:a3:1d:cf:f9:c7:f1:9b:
         da:96:ca:8b:9b:7d:3a:af:70:36:c5:c4:d0:4b:06:6d:53:71:
         dc:4f:c7:08:cc:40:28:ab:fa:cb:b4:65:c5:01:07:98:9b:b5:
         4c:b7:b6:f2:0c:58:85:b3:b9:9c:a2:64:ed:89:1f:a5:65:45:
         d5:f0:8e:4a:21:6c:c8:fd:20:b6:fb:60:d3:3a:26:84:16:fd:
         78:fd:76:35:05:8e:56:cf:92:82:95:28:ce:93:43:07:bc:41:
         12:28:a9:20:23:1d:f4:61:a1:be:91:c4:b7:75:9f:10:69:56:
         74:72:bf:30:83:b7:9a:6f:98:03:2e:d4:cf:2a:1e:97:e0:b2:
         69:3f:1c:8e:7a:80:0d:69:e1:75:6a:46:b9:b2:d1:4b:20:22:
         24:96:ed:7e:9b:02:0f:3b:db:ba:89:2c:02:f0:a3:9c:39:ab:
         78:f9:6b:90:23:d4:ca:62:16:c7:4d:e3:bc:fd:aa:12:2a:9b:
         c8:e7:2d:ab:9f:1f:8c:7c:70:aa:a6:43:ef:a4:cf:3c:88:0d:
         cc:30:f2:ef:a1:d0:c5:54:3a:e0:d7:05:81:40:83:17:f1:21:
         c5:dc:d6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:49:49 2025 by rpki-client