Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft
File:                     FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft (raw, json)
Hash identifier:          SxGWA+cb0nC94i3Vr6Tvecqyi94yIsKjVgg80sBXrnk=
Subject key identifier:   8B:7D:EF:58:57:CC:A4:65:8E:D6:79:67:B4:68:B2:7F:8F:9F:52:12
Authority key identifier: FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27
Certificate issuer:       /CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
Certificate serial:       3D06338D4C977CF3F9B04BDDA187590F05F753E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft
Manifest number:          01E1
Signing time:             Sat 29 Mar 2025 07:08:44 +0000
Manifest this update:     Sat 29 Mar 2025 07:03:44 +0000
Manifest next update:     Sun 30 Mar 2025 08:43:44 +0000
Files and hashes:         1: FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl (hash: UmyrMZG9nfr0h6y7sW622N8aLhFziAGMqVdD2KK1Heg=)
                          2: 3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa (hash: MXqk6cN9SWRBCWeCnvsiQM4qr1q4rLAs2Hf+/ZKYTbA=)
                          3: 323830343a366663303a3a2f33322d3438203d3e20323730363832.roa (hash: k/pJSUtwCEnoy0b52W9ekCCIWfftcSg9UN8J61XpcIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:06:33:8d:4c:97:7c:f3:f9:b0:4b:dd:a1:87:59:0f:05:f7:53:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
        Validity
            Not Before: Mar 29 07:03:44 2025 GMT
            Not After : Mar 30 08:43:44 2025 GMT
        Subject: CN=8B7DEF5857CCA4658ED67967B468B27F8F9F5212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:ea:ba:b0:0e:9b:c7:90:7e:46:d1:39:43:
                    b9:00:a1:a3:94:76:f1:07:d6:71:9f:f9:8f:da:cc:
                    3d:e6:8b:c3:d2:30:23:f5:b7:97:ef:22:fa:20:18:
                    df:b8:21:48:a4:f3:e6:62:96:c9:bc:18:4c:56:8f:
                    c0:78:6e:eb:57:a7:90:64:56:e1:48:cb:95:0d:84:
                    a7:b0:1e:09:a8:ee:e6:c2:09:84:b4:d7:df:d0:a5:
                    ab:70:d6:03:04:80:c1:de:04:ad:1b:ee:b6:8c:28:
                    7b:ba:09:82:6d:ab:0a:80:2c:e8:4b:94:71:7a:fa:
                    d0:9c:13:7d:2c:e4:40:71:56:ec:1e:c0:0b:05:9e:
                    0d:ef:7c:71:70:12:bf:28:f3:ae:46:99:06:12:cd:
                    4b:8b:0f:7e:13:0b:c4:0c:25:49:c0:18:e2:68:48:
                    10:4f:01:53:64:9e:10:e0:7d:d8:b2:25:9f:8f:f7:
                    3a:93:e6:19:6f:2e:c1:c4:15:29:67:ce:ad:40:c8:
                    dc:36:be:cc:1c:75:92:9d:e9:5c:64:cf:bb:9e:0e:
                    62:e8:98:8f:8b:09:ae:01:54:71:ab:a5:c0:19:43:
                    cd:f5:54:5f:1a:8f:45:70:94:fa:b4:5d:6c:ce:49:
                    60:79:f6:98:b1:fe:11:70:00:a1:fc:f9:63:5d:e8:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:EF:58:57:CC:A4:65:8E:D6:79:67:B4:68:B2:7F:8F:9F:52:12
            X509v3 Authority Key Identifier:
                keyid:FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b5:90:9c:57:52:66:aa:93:9b:f5:47:03:44:45:56:6d:1d:
         10:d9:1b:c7:00:93:bd:b4:ed:33:c3:a0:04:d9:19:e9:c7:2f:
         b2:90:73:03:4b:e3:a9:4f:02:af:0f:0c:3a:b6:35:8b:8e:23:
         4a:ca:4d:a0:20:00:c1:a7:f1:b9:c5:75:d6:72:77:34:45:25:
         c8:6a:0a:ea:37:6c:5c:56:6d:f1:19:32:62:05:16:b3:7f:7a:
         4e:7d:86:40:5f:16:0c:4d:d5:b6:2c:bc:42:f0:01:dd:52:42:
         21:20:29:6d:1b:98:18:0f:62:48:71:ff:60:d2:1f:89:2e:f1:
         14:ee:16:94:f6:92:0e:6e:d2:3f:d2:56:50:77:c2:7b:24:de:
         e1:33:fd:ca:9e:f8:6b:7b:6b:bf:9f:64:28:29:3c:5d:77:a4:
         a6:90:51:46:18:56:4a:43:16:f0:5b:96:7f:84:b5:a3:de:e1:
         c0:e9:f8:d8:3a:eb:6f:ae:38:36:0b:45:c1:58:81:63:28:d3:
         58:8b:d3:68:e7:3a:94:10:7a:e2:33:69:9f:60:b8:2b:5c:a8:
         87:40:92:38:88:4a:d3:6d:fd:42:6d:da:50:b2:f4:8b:17:05:
         ae:aa:f7:98:55:27:dd:6c:23:f7:bb:38:c1:34:f8:e9:51:91:
         10:00:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:04 2025 by rpki-client