Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.mft
File:                     F110CE70C3363E6840696AD7EAD6939D5D2C89A6.mft (raw, json)
Hash identifier:          i2gn00QEQ5Vcz5cTWW9pkMBZex/eedJ9I+8Pc7iVBds=
Subject key identifier:   73:CE:98:63:E5:DB:2B:63:0C:21:0F:F0:82:AB:0D:C0:85:3D:5E:8D
Authority key identifier: F1:10:CE:70:C3:36:3E:68:40:69:6A:D7:EA:D6:93:9D:5D:2C:89:A6
Certificate issuer:       /CN=F110CE70C3363E6840696AD7EAD6939D5D2C89A6
Certificate serial:       17967C449E6702D8284EC2273246240211D861F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.mft
Manifest number:          CF
Signing time:             Thu 04 Jan 2024 12:10:33 +0000
Manifest this update:     Thu 04 Jan 2024 12:05:33 +0000
Manifest next update:     Fri 05 Jan 2024 13:50:33 +0000
Files and hashes:         1: 3138312e3139312e37322e302f32342d3234203d3e20323731363531.roa (hash: zhekiuN7I0QuHdPUgKrKdUP1jWEDnNfsULcQ+APZ3FY=)
                          2: 3138312e3139312e37352e302f32342d3234203d3e20323731363531.roa (hash: bIRy+ebezSHsB2cRUqNK68/5QpvpJXmdFon7fvz8n8M=)
                          3: 3138312e3139312e37332e302f32342d3234203d3e20323731363531.roa (hash: J3sTkemCJZtzLdaow5Yu1zhfuF1dmcuwIA+n3vmS78g=)
                          4: 323830343a376565303a3a2f33322d3332203d3e20323731363531.roa (hash: jnx+Blg+6c6QOcwgcsw3KcAGqA2+RUHUlPfrc2up2/U=)
                          5: F110CE70C3363E6840696AD7EAD6939D5D2C89A6.crl (hash: qV5ZfI+z4hNdSrhB7wzIBVl4rAXjCZqVdMRzSLr2c/s=)
                          6: 3138312e3139312e37342e302f32342d3234203d3e20323731363531.roa (hash: DOpYHIln6uQGLWGeimcjTMcixi+/685bHzuloKst2OQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:96:7c:44:9e:67:02:d8:28:4e:c2:27:32:46:24:02:11:d8:61:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F110CE70C3363E6840696AD7EAD6939D5D2C89A6
        Validity
            Not Before: Jan  4 12:05:33 2024 GMT
            Not After : Jan  5 13:50:33 2024 GMT
        Subject: CN=73CE9863E5DB2B630C210FF082AB0DC0853D5E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:56:f1:c3:6c:c2:fc:6c:83:4c:c1:43:1c:
                    0b:8f:04:c2:f2:67:e1:ab:61:4b:86:d4:69:4a:7d:
                    f7:3f:42:45:d7:bc:55:c9:1a:1e:fa:d6:8a:58:34:
                    92:22:3f:62:6e:d0:5e:a6:46:a9:d3:a6:39:c5:f1:
                    01:1c:af:65:a8:5a:26:65:ca:8b:ca:66:de:d4:d4:
                    4f:35:4d:a2:be:9c:9b:fe:a2:93:49:b4:3b:7b:70:
                    23:59:1b:54:ad:c5:bc:85:67:6e:29:d7:ca:fe:13:
                    a6:c8:57:e9:1b:e7:d6:99:22:6e:19:94:08:c8:dc:
                    60:ad:6b:25:42:cf:a4:f9:80:25:71:bf:8a:77:7e:
                    2f:67:b6:20:72:d0:bf:23:f4:6b:5f:db:4b:6f:f8:
                    90:c8:ae:8f:3f:dc:51:f1:a5:0d:96:7e:c9:e4:77:
                    a6:57:af:2d:bc:3c:9c:c1:78:d5:fd:d4:5f:8e:2c:
                    33:54:d6:3a:fa:0d:9d:97:42:6a:13:09:47:26:d9:
                    95:52:37:18:55:7b:d3:bc:0d:84:93:9b:1a:a7:60:
                    cc:d2:d9:5d:32:af:41:79:78:8c:bc:7d:b7:a1:19:
                    0f:80:9e:88:1d:72:9d:c1:e2:c1:6c:4e:47:5d:2c:
                    39:08:8a:dd:6f:7b:c3:5a:4c:9e:5f:f4:8f:31:f8:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CE:98:63:E5:DB:2B:63:0C:21:0F:F0:82:AB:0D:C0:85:3D:5E:8D
            X509v3 Authority Key Identifier:
                keyid:F1:10:CE:70:C3:36:3E:68:40:69:6A:D7:EA:D6:93:9D:5D:2C:89:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:67:b5:8d:90:84:dc:24:50:ce:23:62:81:63:49:6a:4b:
         7f:c0:79:d8:f7:db:2b:5e:ee:cc:e1:c9:9d:43:22:b3:b9:bd:
         25:78:c3:f0:e7:5d:72:85:85:fc:3c:00:a5:c9:91:b3:f7:45:
         27:6a:ef:5b:ff:52:a3:28:64:94:ac:ee:c5:4e:af:92:dc:9b:
         23:d3:bd:21:fc:09:50:ea:6f:b0:82:4e:e9:99:e7:db:e5:b4:
         ce:ce:1a:e6:2f:4d:5c:3a:b6:ee:cf:90:94:8a:39:6f:d7:bc:
         51:f9:8c:8d:1e:ab:43:56:04:b1:dc:26:45:c8:9c:09:cf:41:
         12:7c:22:72:ef:9d:fa:79:7f:1a:a2:5b:b3:4b:83:7f:ce:f2:
         ba:65:f7:6f:15:4d:6d:03:26:42:b8:03:c0:b1:2b:48:5e:4f:
         75:64:95:05:48:aa:53:30:bf:79:7f:79:1c:e4:4d:b2:97:45:
         bb:a7:64:15:83:8f:98:5b:68:ba:2d:6f:e7:67:61:5c:35:a5:
         42:4f:76:07:d6:08:30:e9:45:d7:fe:5d:ac:cd:89:d6:cf:ac:
         9c:9e:d8:6e:d5:d6:cd:ee:d2:f5:6c:09:f0:d6:d2:88:3c:aa:
         ba:04:52:f0:f7:77:31:80:3a:51:e0:6e:c1:a9:6f:da:93:7b:
         14:70:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:09:04 2025 by rpki-client