Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft
File:                     CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft (raw, json)
Hash identifier:          nqN/SOq08ZwHrZrguoofMc9sq5MXw2HpvMnr7KidCQY=
Subject key identifier:   2E:FA:98:87:B8:9B:36:EB:E8:D5:2E:D7:02:BB:8C:48:B5:11:76:E2
Authority key identifier: CA:3B:D6:2F:6F:B4:36:76:27:D5:1C:EF:22:D8:BA:41:02:DF:AB:77
Certificate issuer:       /CN=CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77
Certificate serial:       1B4334FF3757A51520DED70FB467E6DC349A0EF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft
Manifest number:          36
Signing time:             Wed 04 Dec 2024 21:37:44 +0000
Manifest this update:     Wed 04 Dec 2024 21:32:44 +0000
Manifest next update:     Fri 06 Dec 2024 00:11:44 +0000
Files and hashes:         1: CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.crl (hash: nbuQpnVZ1lGPUI+CJtSPhCZhDu7yWZsbhJEskAOj7pg=)
                          2: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: 8UUoTZMPwp9+BrL8VF/TGdb1NmsQDHLxmr/7nSn4EI4=)
                          3: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: 6ZoNROM9vlhK0ewfR8fg+zyN7EhymIzwpK1TlotGh90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:43:34:ff:37:57:a5:15:20:de:d7:0f:b4:67:e6:dc:34:9a:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77
        Validity
            Not Before: Dec  4 21:32:44 2024 GMT
            Not After : Dec  6 00:11:44 2024 GMT
        Subject: CN=2EFA9887B89B36EBE8D52ED702BB8C48B51176E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:29:22:58:9a:64:32:f4:74:fd:65:53:c2:
                    b4:cd:0c:64:00:9b:39:47:ef:d6:3a:7f:32:68:a5:
                    4a:69:60:fc:dd:02:c3:74:56:88:c9:d1:5a:fa:f4:
                    1d:a5:f4:c5:7f:60:98:c3:de:cf:11:06:69:96:09:
                    b6:30:a4:61:b9:38:34:93:b3:61:42:85:e7:03:09:
                    3e:71:06:73:98:e1:ce:4e:7d:4b:c0:f9:4d:b4:b8:
                    ec:9e:ae:a9:8a:ce:56:a1:ad:62:88:e1:01:8c:b8:
                    2a:a2:e7:e4:67:8a:b1:32:77:bf:5f:96:17:c9:50:
                    65:c9:33:3a:0a:8b:03:62:4e:d7:21:b8:d5:dc:39:
                    fe:60:38:4d:9a:85:ef:22:8b:97:b4:67:2d:ac:b4:
                    41:2e:41:01:1b:f5:8f:57:4a:81:aa:ba:21:aa:30:
                    e6:32:4a:49:22:f2:18:d3:59:66:db:24:45:d6:ae:
                    18:a9:92:8a:6d:c5:b4:0c:a8:4f:38:ea:ea:de:20:
                    f1:cc:6b:cd:45:4e:bd:46:12:c1:8a:33:6d:5f:d1:
                    ca:6d:68:75:7e:4b:a0:6f:90:5d:8b:5f:1a:bb:da:
                    55:bd:fc:66:7d:7f:ce:9c:69:66:8d:8c:d1:42:56:
                    c2:da:a0:8f:1c:8f:53:f2:5c:26:5c:ce:31:c2:8e:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FA:98:87:B8:9B:36:EB:E8:D5:2E:D7:02:BB:8C:48:B5:11:76:E2
            X509v3 Authority Key Identifier:
                keyid:CA:3B:D6:2F:6F:B4:36:76:27:D5:1C:EF:22:D8:BA:41:02:DF:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA3BD62F6FB4367627D51CEF22D8BA4102DFAB77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:2c:8a:f8:c9:7e:50:f5:72:56:91:fe:aa:ac:50:94:58:
         8a:03:3e:99:ab:39:5c:c7:d1:f9:9f:bf:bc:15:3a:36:87:72:
         5b:41:32:ef:f8:22:7c:2d:73:b1:f4:fa:a6:ba:df:d0:32:86:
         3d:a5:f7:ea:9f:f1:db:8e:7f:e4:19:91:ec:12:bd:56:76:32:
         13:d6:6a:da:ad:87:16:ae:87:35:e8:1f:99:87:2e:54:6d:12:
         7f:de:1c:93:c5:d4:41:1f:0e:2c:66:b9:ec:20:13:f7:1c:5f:
         7f:53:06:4b:00:c0:17:10:77:e5:88:5c:5a:af:85:f2:2a:b5:
         ea:a3:f5:47:cf:fc:64:8d:f9:fb:10:b2:d6:cb:f2:73:af:40:
         cb:ef:a2:42:d0:71:0f:75:f0:2c:15:3f:8e:55:e5:72:bc:55:
         4a:09:8b:72:e1:f6:6f:0c:8f:27:78:29:26:37:a7:dc:66:3c:
         1e:45:8f:23:21:8c:5a:87:4f:88:e6:1f:a1:02:7d:80:2d:73:
         d9:33:60:e8:41:a6:c7:2a:b1:e6:08:02:b1:04:57:48:a8:89:
         f4:ea:1f:f4:25:c6:d4:08:2b:37:10:38:95:ad:c3:52:b3:48:
         8c:28:75:6f:45:e0:a7:28:7d:6e:16:d5:fb:d4:58:a8:da:db:
         ab:03:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:35:40 2025 by rpki-client