Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/2D3C3E98DCD04B2591712EEEC2AF947460A73486.mft
File:                     2D3C3E98DCD04B2591712EEEC2AF947460A73486.mft (raw, json)
Hash identifier:          /3vP2B/IUL2etGvzqb4wuKgjt5zAXCDAmerNxh9cZqU=
Subject key identifier:   4D:A1:62:35:39:70:8A:E3:45:D3:A7:A3:FD:B4:26:40:A5:9E:4E:4C
Authority key identifier: 2D:3C:3E:98:DC:D0:4B:25:91:71:2E:EE:C2:AF:94:74:60:A7:34:86
Certificate issuer:       /CN=2D3C3E98DCD04B2591712EEEC2AF947460A73486
Certificate serial:       0CCC3C6652B6E424E4580D2D40D4EB81FD48EA03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3C3E98DCD04B2591712EEEC2AF947460A73486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/2D3C3E98DCD04B2591712EEEC2AF947460A73486.mft
Manifest number:          1F
Signing time:             Mon 17 Mar 2025 10:39:11 +0000
Manifest this update:     Mon 17 Mar 2025 10:34:11 +0000
Manifest next update:     Tue 18 Mar 2025 14:18:11 +0000
Files and hashes:         1: 3137392e36332e3135362e302f32322d3234203d3e20323731363032.roa (hash: +CWNleuqZACgDpeebfvyI4UULvKxI0s9stOXjsxl1Os=)
                          2: 2D3C3E98DCD04B2591712EEEC2AF947460A73486.crl (hash: weNsn8qR3D5N0vMcHLoeqPHuc32TJX8rhSRk/THCHYI=)
                          3: 323830343a376531383a3a2f33322d313238203d3e20323731363032.roa (hash: 78dEsBCNnXIal6iSJ3mEMholnE4yX16vntte2ZsuoiY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cc:3c:66:52:b6:e4:24:e4:58:0d:2d:40:d4:eb:81:fd:48:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D3C3E98DCD04B2591712EEEC2AF947460A73486
        Validity
            Not Before: Mar 17 10:34:11 2025 GMT
            Not After : Mar 18 14:18:11 2025 GMT
        Subject: CN=4DA1623539708AE345D3A7A3FDB42640A59E4E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:c5:21:1d:08:13:bd:7c:bf:fc:e0:b3:2e:
                    01:24:41:5a:ae:ee:e9:56:26:f7:04:50:84:68:3f:
                    94:14:08:8b:60:68:f2:d7:0d:4e:61:a6:17:0d:b6:
                    93:f7:66:4a:3c:4e:00:d9:ea:98:ec:0b:c3:91:7d:
                    76:80:9f:3d:98:27:fd:fa:fd:fd:8e:b2:8e:7b:6d:
                    bd:42:cf:d7:a3:cd:db:b5:4e:9f:eb:b1:7f:b7:80:
                    87:d8:dc:ea:19:ec:13:81:d1:27:37:7d:4d:08:84:
                    0f:03:99:c8:55:e1:76:b1:59:d2:dd:7e:7e:99:4f:
                    fb:f8:c8:c5:4c:43:de:55:db:10:fe:e4:63:d9:a9:
                    fe:9e:f4:62:9d:0b:88:5f:67:0f:a0:6c:3b:1b:be:
                    68:8c:93:9e:a8:60:2b:5b:4b:26:d9:aa:3d:7a:a3:
                    f6:48:3c:bd:e0:eb:08:28:ee:8a:be:68:d0:86:5a:
                    ca:b3:ca:d3:38:36:f7:05:9c:a7:12:70:ef:70:2d:
                    bb:22:1a:1a:96:9f:c0:61:10:44:f6:4b:21:e0:26:
                    4a:40:c5:86:99:38:4a:8c:f5:ab:04:7b:f2:36:a1:
                    fd:aa:18:04:db:97:b6:fb:48:67:10:34:ae:18:7c:
                    a7:2f:a8:11:ce:6b:a8:11:35:b3:33:7b:4e:4a:19:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A1:62:35:39:70:8A:E3:45:D3:A7:A3:FD:B4:26:40:A5:9E:4E:4C
            X509v3 Authority Key Identifier:
                keyid:2D:3C:3E:98:DC:D0:4B:25:91:71:2E:EE:C2:AF:94:74:60:A7:34:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/2D3C3E98DCD04B2591712EEEC2AF947460A73486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3C3E98DCD04B2591712EEEC2AF947460A73486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/0/2D3C3E98DCD04B2591712EEEC2AF947460A73486.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:33:6b:5b:7c:fa:30:8b:38:43:e1:98:11:31:15:75:dc:
         2a:c5:72:40:a7:db:27:d4:69:8c:b3:f5:26:a3:df:69:f0:21:
         83:90:36:13:8e:d7:7f:30:24:cf:6f:eb:8b:9d:fd:6e:70:5e:
         fd:b2:7b:58:56:07:92:66:64:ee:b9:9f:d6:08:77:64:88:fe:
         25:87:a7:ee:28:e5:16:9d:63:d9:e0:74:e9:dd:78:e5:23:f5:
         94:d2:a0:7f:b6:f3:f3:97:1e:47:99:11:9c:12:42:e5:0d:87:
         37:54:15:1b:86:42:ae:57:82:e2:37:e2:fb:b9:55:c3:bc:c3:
         31:29:f6:6c:94:4a:8e:92:d8:9d:ba:c0:c7:5b:33:4b:72:c1:
         01:8c:8c:21:1d:68:d5:da:16:06:c2:e4:3c:5c:13:5e:a5:89:
         fd:42:86:af:54:a1:2a:3f:cb:b8:36:9e:2f:45:ac:56:e2:9a:
         31:f9:be:fa:10:0e:7f:2f:d0:c9:b8:05:cb:cc:7c:a2:0e:96:
         41:c4:1e:05:ac:ca:83:09:e5:d6:d8:0e:2b:cb:ae:90:b8:3c:
         fc:19:b4:4e:1d:c7:74:48:36:9b:52:66:4b:24:bb:41:c8:16:
         0e:6e:d8:10:29:02:b0:7a:f0:f1:d2:af:d3:26:39:0d:ca:f6:
         3c:c5:d3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:04:54 2025 by rpki-client