Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.mft
File:                     25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.mft (raw, json)
Hash identifier:          5c+UY7fWVulCANH0uiMOpurzbv3DoQWf5L152ZZzHoM=
Subject key identifier:   9E:67:8A:BF:35:0A:62:FE:A8:BB:47:37:93:4C:65:16:A1:A0:01:31
Authority key identifier: 25:C4:5D:74:DF:12:39:BC:71:DF:AE:D0:BF:4D:FF:A1:92:E3:8C:2F
Certificate issuer:       /CN=25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F
Certificate serial:       0342F9FD4EF71E49DC0969885B1567A8974DF53B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.mft
Manifest number:          1A
Signing time:             Mon 13 Feb 2023 23:23:00 +0000
Manifest this update:     Mon 13 Feb 2023 23:18:00 +0000
Manifest next update:     Tue 14 Feb 2023 23:57:00 +0000
Files and hashes:         1: 323830343a386134383a3a2f33322d313238203d3e20323733363539.roa (hash: BHMJJReyqT2hYOViCWYxGK4rmMS5/AljvbWHZiftdC8=)
                          2: 25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.crl (hash: Vtg3GrycB0hUciqTp3DQFVzvn9r0L95heIHO12RSkXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:42:f9:fd:4e:f7:1e:49:dc:09:69:88:5b:15:67:a8:97:4d:f5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F
        Validity
            Not Before: Feb 13 23:18:00 2023 GMT
            Not After : Feb 14 23:57:00 2023 GMT
        Subject: CN=9E678ABF350A62FEA8BB4737934C6516A1A00131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:18:6d:97:ce:d7:0c:0a:59:d7:f3:87:f9:
                    a3:58:8e:d6:8f:a3:7d:d1:86:2e:c6:30:f3:f9:ca:
                    99:86:6b:f3:f0:6e:bb:eb:2d:e6:10:b8:a3:dd:ad:
                    f4:5e:0f:7f:df:6d:0c:be:e4:4c:70:51:20:bd:d4:
                    79:38:aa:51:cc:2b:d0:fd:28:16:6f:d6:ff:90:9f:
                    62:38:ee:bd:49:29:03:f1:0d:ef:ff:2f:98:58:64:
                    f8:ee:cd:2a:76:fd:bc:a3:91:b2:d6:74:e2:6d:56:
                    f1:6f:59:e7:7f:64:56:31:d6:6e:d1:86:be:77:a5:
                    97:33:98:51:88:e8:d8:aa:1c:bf:02:05:e5:fb:cd:
                    98:28:9d:98:89:4f:94:fd:b4:c8:86:7d:34:e9:6a:
                    9c:8f:f2:fb:97:a6:c2:4e:52:cd:67:07:5c:cf:13:
                    46:ae:b8:29:59:95:4d:66:98:ac:af:30:2a:be:38:
                    2e:18:02:ad:ec:8d:ac:1b:02:6a:58:dd:25:b9:9d:
                    cd:ce:44:69:41:25:59:a1:68:fb:f5:df:64:86:b7:
                    f3:39:4d:ec:42:4c:a5:7e:83:4a:98:1c:98:58:3a:
                    ac:b8:04:8e:da:92:16:7d:da:52:34:2a:e4:41:5c:
                    1b:34:68:02:4c:08:3c:aa:c7:57:fd:6b:69:d8:c4:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:8A:BF:35:0A:62:FE:A8:BB:47:37:93:4C:65:16:A1:A0:01:31
            X509v3 Authority Key Identifier:
                keyid:25:C4:5D:74:DF:12:39:BC:71:DF:AE:D0:BF:4D:FF:A1:92:E3:8C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/25C45D74DF1239BC71DFAED0BF4DFFA192E38C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:38:ed:f8:1b:d7:2e:92:05:b6:34:b7:df:fa:9f:2f:c0:
         75:5e:b8:74:a1:14:bd:72:52:bc:02:2c:1e:7e:4a:ff:e8:f8:
         82:61:03:ef:64:e2:f0:2b:92:90:a5:a1:c4:f2:da:4e:8e:fb:
         36:40:7d:5c:d6:1f:2c:47:53:e1:0d:d1:06:96:18:6f:70:93:
         dd:1e:2d:c5:b3:91:2c:90:67:80:cd:37:f4:0c:ce:e9:57:e2:
         ae:55:6f:ca:d0:cf:84:94:a6:c1:5d:cd:82:86:7d:ca:8b:05:
         89:0f:ae:96:80:0b:df:bf:07:6d:d7:46:65:b1:a0:68:9b:ff:
         4f:6e:85:0b:f4:1a:48:56:9f:1d:1c:9f:c0:22:ee:43:3a:65:
         35:87:fa:3e:60:bd:2d:23:3e:cc:b0:d8:e6:fe:5f:3c:7a:e2:
         7d:83:b5:03:9c:7a:0b:89:d4:44:2e:86:94:05:fd:99:58:b1:
         fd:c9:9f:57:d1:dd:8f:45:3a:24:e5:56:68:c1:d1:c2:6f:e4:
         bd:fe:81:9f:45:6b:3b:5e:b7:ed:40:64:b4:10:ff:9d:02:f1:
         d5:66:a9:17:b2:32:b7:f0:e9:99:0f:d3:da:09:d3:6e:47:ae:
         dc:18:c9:01:a7:cf:b4:ff:92:5b:92:ca:83:0c:72:5c:23:ec:
         ef:3d:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:34 2025 by rpki-client