Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.mft
File:                     F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.mft (raw, json)
Hash identifier:          2z3ZLHPYO+OMZ41LoePwH1iWqkoQRhmiH+/AeVFOaFU=
Subject key identifier:   76:B1:3A:1F:FA:88:B1:47:E7:D2:05:ED:87:76:1B:CF:23:F4:A6:12
Authority key identifier: F1:46:CD:0F:75:E9:28:D3:EF:D8:DD:AA:71:13:DD:F9:1F:F2:6F:14
Certificate issuer:       /CN=F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14
Certificate serial:       0F513ECC9285D456D50DBCEE84212364C48D5C7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.mft
Manifest number:          0B
Signing time:             Thu 06 Feb 2025 21:39:10 +0000
Manifest this update:     Thu 06 Feb 2025 21:34:10 +0000
Manifest next update:     Fri 07 Feb 2025 21:58:10 +0000
Files and hashes:         1: 34352e3136362e342e302f32322d3332203d3e20323637393432.roa (hash: 9iA9/H9p+As6ykDZ3wzo7Zbt5QcG08ZUjRYlCvwPaRI=)
                          2: 323830343a353539303a3a2f33322d313238203d3e20323637393432.roa (hash: g/qqxIOQthwwNV+KnqEghVYQSEhO/wGnYImrzYSzHwU=)
                          3: F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.crl (hash: a+ccexNTYtq3KHnWX3KquYGBaIj6Pi6hwLcgqpgHzi8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:3e:cc:92:85:d4:56:d5:0d:bc:ee:84:21:23:64:c4:8d:5c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14
        Validity
            Not Before: Feb  6 21:34:10 2025 GMT
            Not After : Feb  7 21:58:10 2025 GMT
        Subject: CN=76B13A1FFA88B147E7D205ED87761BCF23F4A612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:68:0d:16:1a:43:e5:ce:8d:d0:b9:55:2b:
                    98:df:36:45:7f:f7:8a:6b:a6:08:ad:16:da:09:cd:
                    ef:ae:08:83:62:b0:10:e1:33:2c:8a:91:4e:de:d2:
                    94:80:4e:68:b7:6a:14:18:7d:4d:29:66:10:f4:15:
                    54:ed:8a:09:f4:54:5b:3e:70:e5:5f:26:cb:e4:6f:
                    be:ad:2c:e2:c7:3e:1d:dc:dd:7b:06:34:47:ac:67:
                    8e:09:e6:a8:c5:51:b4:22:5a:98:d6:ca:0f:a6:cc:
                    35:78:77:87:37:5c:34:f5:e0:4d:df:82:e7:f4:6d:
                    67:50:d1:4d:ac:53:60:a1:40:6e:2a:f7:38:a4:07:
                    57:86:52:7c:a7:a0:44:16:43:4e:70:6d:b6:48:fd:
                    50:63:c9:5b:98:48:7d:04:86:d0:91:f9:24:07:b8:
                    d6:46:9b:a5:48:a3:0d:bc:25:0a:15:7a:b6:72:86:
                    7a:a6:be:c5:50:f5:ad:b3:24:50:f5:b2:6b:5d:9c:
                    53:db:6a:3d:a9:90:b1:ac:d8:2a:be:24:38:90:51:
                    5d:c2:f9:bd:67:91:27:48:83:b8:6c:66:43:86:58:
                    c6:c2:70:de:90:b1:7b:7a:e3:97:3f:85:40:b6:45:
                    74:71:ad:af:1b:7c:ef:71:ca:67:99:97:a6:09:47:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:3A:1F:FA:88:B1:47:E7:D2:05:ED:87:76:1B:CF:23:F4:A6:12
            X509v3 Authority Key Identifier:
                keyid:F1:46:CD:0F:75:E9:28:D3:EF:D8:DD:AA:71:13:DD:F9:1F:F2:6F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F146CD0F75E928D3EFD8DDAA7113DDF91FF26F14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:90:2b:36:2b:64:53:c1:93:14:7b:bd:2f:b2:6c:c5:0b:
         7f:42:ed:dd:72:1b:40:d6:e3:e0:fa:d0:33:99:af:fd:e3:3d:
         ce:16:4e:92:35:8b:66:66:a1:1b:16:5f:ca:44:37:e4:a8:25:
         be:26:dc:c8:b3:7d:d2:9e:6e:b8:57:2e:58:36:f9:e5:b7:2a:
         32:28:cf:f4:7b:a5:e1:0c:a9:81:c1:e5:42:e6:c4:72:20:87:
         6c:bb:e4:b1:f9:3f:23:bb:b2:25:db:af:bc:df:6c:20:1f:57:
         6e:e6:da:22:95:2f:a9:30:11:7f:88:0a:a8:b3:c5:d8:3f:e4:
         d3:ae:f6:53:9b:b4:71:ed:23:d4:dc:cb:50:d1:53:79:58:b3:
         db:a6:d4:58:85:d8:5d:12:19:7f:55:50:8c:07:65:4f:bf:a7:
         92:aa:49:40:b8:97:2a:e8:26:86:ed:f0:1e:e5:61:8f:8f:b9:
         f8:29:c8:73:5e:28:cf:14:a9:b0:7d:cf:4c:76:10:d2:bd:21:
         86:40:8b:20:25:38:db:e1:66:e2:89:1c:11:fe:98:52:c1:87:
         29:1e:c7:fe:d6:63:c4:14:17:48:8d:96:41:4f:f8:04:0f:57:
         b3:e8:d8:20:df:9e:61:79:0a:85:53:4a:1b:2b:1a:99:4f:a7:
         54:42:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:45 2025 by rpki-client