Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.mft
File:                     CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.mft (raw, json)
Hash identifier:          jskHMwZbyKf1rYTs+fqxFCFQzV9pV3pGJ1j5F+JJAh4=
Subject key identifier:   53:25:D8:31:E5:CE:2E:41:1A:52:D3:0D:BC:73:7E:A1:D0:60:F4:C0
Authority key identifier: CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01
Certificate issuer:       /CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
Certificate serial:       7E2AEDC54557F70510A0F411C541E6C81947E957
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.mft
Manifest number:          FA
Signing time:             Thu 06 Jul 2023 16:47:04 +0000
Manifest this update:     Thu 06 Jul 2023 16:42:04 +0000
Manifest next update:     Fri 07 Jul 2023 17:34:04 +0000
Files and hashes:         1: 3138312e3139312e37352e302f32342d3234203d3e20323731363531.roa (hash: zk2qn52OKcNDHX8qtDepkKIcDGqAA4KkDEY0H3g3ClI=)
                          2: 3138312e3139312e37322e302f32342d3234203d3e20323731363531.roa (hash: kKUbl9TLd7zx13jecOy8aT6CqK6VajcxUJqnH55J+R8=)
                          3: 323830343a376565303a3a2f33322d3438203d3e20323731363531.roa (hash: qfFuXzkl2MGk3ogJQ/mYn4og81bHC0vuMrL0xZunAIk=)
                          4: CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.crl (hash: cnkGitMVlobyJHMLc9D46KgQ5JhcIPw3ajJ0jqKJpUo=)
                          5: 3138312e3139312e37342e302f32342d3234203d3e20323731363531.roa (hash: HgcdrtCv0sVgrOVcE5PaQenwMX+UD6vRRl8defBCVI0=)
                          6: 3138312e3139312e37332e302f32342d3234203d3e20323731363531.roa (hash: Epjd+cQyXT5zAJw+80T5U1pUni9eM9wsScpaaygkaxY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2a:ed:c5:45:57:f7:05:10:a0:f4:11:c5:41:e6:c8:19:47:e9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001
        Validity
            Not Before: Jul  6 16:42:04 2023 GMT
            Not After : Jul  7 17:34:04 2023 GMT
        Subject: CN=5325D831E5CE2E411A52D30DBC737EA1D060F4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:ef:61:f4:1c:cd:61:40:ed:c3:41:32:e2:
                    95:58:e6:c2:0f:8a:4f:05:cb:f5:e7:1d:36:75:d2:
                    44:ce:2e:50:4b:66:05:4f:d3:68:f6:8c:24:4e:29:
                    e3:03:ae:c1:89:2e:2d:38:bb:18:c8:a7:0d:9b:e8:
                    d1:82:1a:80:a6:2c:cf:52:60:73:3f:32:01:5a:94:
                    31:83:09:6a:4e:eb:87:e9:13:3a:19:59:5b:31:42:
                    9f:c9:32:59:e1:b8:0b:07:e5:10:61:ab:d9:ce:d2:
                    e7:7e:5a:34:3b:6b:53:3e:d8:17:7e:a3:64:7a:2c:
                    f1:5d:32:92:66:81:b2:8a:c9:7d:67:d2:9c:7c:91:
                    39:33:be:d3:8f:49:5d:25:c5:1b:df:b0:f0:a0:0a:
                    ea:ec:bd:1f:b9:6a:db:4b:00:09:a9:b1:51:69:35:
                    bc:8d:51:d3:8a:1e:2c:88:25:5c:dd:80:cb:2e:1a:
                    0c:19:50:8e:f5:70:ce:c5:7f:c6:94:61:25:cd:a2:
                    3e:d8:53:8e:4d:86:e6:b6:17:29:74:88:55:47:b8:
                    03:00:5d:dc:6d:fa:53:ff:0a:60:fb:0e:63:a8:b9:
                    43:50:64:2f:9b:ee:1e:03:03:fb:55:13:eb:0e:46:
                    0f:46:f7:f6:2e:5e:6b:fd:39:a1:df:f5:41:6a:a3:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:D8:31:E5:CE:2E:41:1A:52:D3:0D:BC:73:7E:A1:D0:60:F4:C0
            X509v3 Authority Key Identifier:
                keyid:CA:A3:D5:46:71:A2:8B:5A:90:C8:E9:6E:43:5E:FE:4D:0A:3F:40:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/CAA3D54671A28B5A90C8E96E435EFE4D0A3F4001.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6d:8d:9c:1c:3e:b7:50:c7:ee:3d:a2:b0:9d:42:54:aa:e7:
         a4:bf:41:73:ec:62:a7:0a:fd:78:bc:6c:c4:4e:42:cf:6f:a7:
         e9:c3:eb:3b:e3:49:59:e4:f4:9c:7f:70:93:09:b7:5a:e3:47:
         65:e5:25:7e:d3:ec:81:64:5d:e3:74:40:89:9f:95:e1:9b:d7:
         a7:85:27:9d:79:ad:26:83:51:40:58:fa:7c:56:2b:e6:a8:73:
         da:3e:e7:16:42:61:27:1e:9b:2d:c1:6c:45:d9:ea:0c:9d:f1:
         77:de:32:10:3e:5f:07:ff:fc:ed:c2:88:48:84:81:0d:b4:39:
         25:81:b5:30:bb:af:ea:5b:ba:be:2c:42:c8:ca:5c:1e:68:b4:
         fa:13:df:2f:92:2c:11:f3:31:a1:6e:9c:c4:c8:38:3e:1d:bb:
         c7:46:da:c2:75:e1:da:5f:40:51:46:87:26:cd:f8:8c:63:fc:
         99:0e:65:f3:2a:eb:4a:50:13:79:70:77:ec:c9:be:7a:d5:a0:
         2a:93:dd:56:3b:f9:0c:e7:83:92:28:55:a2:4e:02:f9:b2:31:
         4a:8a:e8:22:f4:8f:08:3a:a4:a6:37:47:89:4c:6e:f5:9b:44:
         cc:8e:ee:d5:97:76:b3:f5:ad:96:53:6f:e2:2b:a7:dc:9f:12:
         4c:8f:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:03 2025 by rpki-client