Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.mft
File:                     6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.mft (raw, json)
Hash identifier:          nyZHCDCxjgUmsXdoWl07v3KJuttgP7jZc7MMIHYnNpw=
Subject key identifier:   D5:1F:01:2E:B7:F6:71:74:53:53:89:D8:19:C7:20:6C:C6:15:88:80
Authority key identifier: 6F:3D:C6:EC:FD:EB:92:A9:96:C6:A9:AD:8D:17:24:E7:15:1E:D6:45
Certificate issuer:       /CN=6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645
Certificate serial:       56AC00E2023CA984D17E3A44D38277760937A56E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.mft
Manifest number:          0148
Signing time:             Mon 16 Dec 2024 23:23:34 +0000
Manifest this update:     Mon 16 Dec 2024 23:18:34 +0000
Manifest next update:     Wed 18 Dec 2024 02:01:34 +0000
Files and hashes:         1: 323830343a333432343a3a2f33322d313238203d3e20323635343338.roa (hash: pMuxTuCFmujqNNp1ZSALOAP3EwO1yt6P5/KlJT7nUaI=)
                          2: 6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.crl (hash: nk+WeUM+UzaCkgr8Dn0iriSn2TX065N/u4RP8uSItlE=)
                          3: 3136382e3139352e3231322e302f32322d3332203d3e20323635343338.roa (hash: WCox5XHIrn/xo9qGia1xcAfXMIPKyKk3gUKNKlS3fc4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ac:00:e2:02:3c:a9:84:d1:7e:3a:44:d3:82:77:76:09:37:a5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645
        Validity
            Not Before: Dec 16 23:18:34 2024 GMT
            Not After : Dec 18 02:01:34 2024 GMT
        Subject: CN=D51F012EB7F67174535389D819C7206CC6158880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:a6:33:ca:48:4b:a5:ae:19:c0:14:9a:a8:
                    c6:55:fd:17:0b:a8:61:77:32:1c:fd:14:92:64:4d:
                    91:54:a6:4f:8e:9e:56:76:6e:46:a3:73:ea:07:63:
                    09:6c:14:c6:41:4b:a5:bc:30:86:9c:f0:1c:96:e7:
                    93:ba:91:63:28:27:fb:8f:c2:2b:fe:93:5e:b5:b6:
                    2a:8d:a6:73:8d:02:b1:b1:2a:52:aa:5a:d7:5c:83:
                    93:e7:4b:d8:bb:93:79:0c:8c:dd:89:72:68:cb:bf:
                    65:b9:bb:24:20:9f:8f:29:ad:9a:8a:7e:81:6b:07:
                    c3:77:04:cd:da:06:f2:ba:0d:41:d8:fe:f3:5b:68:
                    15:56:32:49:e3:ce:02:e1:60:ba:68:fd:b9:90:4a:
                    32:b9:70:d5:fe:f3:01:da:31:18:c6:28:df:91:08:
                    db:9a:f4:d6:ea:87:d9:01:9d:51:89:e2:fe:64:b6:
                    c9:d0:d8:ce:ef:75:db:6f:1c:65:f0:96:ef:e2:aa:
                    38:e7:5d:a2:6f:18:dc:89:f4:b3:4c:79:bc:50:10:
                    91:b3:fd:b4:e5:83:b1:f9:5f:8a:c0:da:22:21:59:
                    f7:77:bd:de:ec:bf:87:85:34:f1:a3:12:f7:6c:88:
                    4e:ae:86:5d:b9:f2:84:e0:f4:7b:95:e6:4d:d2:d6:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1F:01:2E:B7:F6:71:74:53:53:89:D8:19:C7:20:6C:C6:15:88:80
            X509v3 Authority Key Identifier:
                keyid:6F:3D:C6:EC:FD:EB:92:A9:96:C6:A9:AD:8D:17:24:E7:15:1E:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/1/6F3DC6ECFDEB92A996C6A9AD8D1724E7151ED645.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:83:bd:1a:ca:a4:26:57:98:7d:53:0e:70:10:cd:78:4b:71:
         bc:88:ca:f4:4f:b8:21:4d:5c:39:2c:3c:92:55:e4:40:29:5d:
         1f:89:f8:df:e7:c5:f5:c7:0d:73:01:1b:8c:5f:94:91:c0:b0:
         ae:8f:d2:aa:ea:b1:3c:32:00:fa:56:46:c9:42:37:84:c2:f7:
         44:0a:9b:83:34:5d:96:28:41:ae:8e:1b:c0:25:73:c0:a1:16:
         19:ff:f3:44:03:a3:13:0e:86:ea:19:e0:c5:3d:e1:4c:2a:cf:
         bc:bb:41:75:6d:23:9c:41:65:d8:27:22:08:6b:c7:6b:a4:95:
         08:b1:84:4e:39:b9:cf:90:57:a3:04:81:82:2d:a5:aa:51:62:
         3a:57:84:48:7b:61:fa:f0:1c:1f:0e:63:8a:18:fe:23:a4:2c:
         34:4b:8d:fc:00:70:9f:fb:7d:ca:71:f1:c8:d8:af:1c:10:fa:
         9e:3e:8e:67:0d:87:36:48:39:f6:f3:7a:8f:51:69:c9:23:99:
         73:92:97:de:bc:8f:e3:dc:dd:81:c1:d6:e1:88:ce:5f:21:e2:
         39:7e:b3:c1:cc:0d:e0:3a:46:31:d1:af:36:4e:24:ea:40:05:
         27:0f:31:ab:51:9e:3e:ab:cf:19:85:1e:e3:b6:b4:29:00:52:
         00:6b:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:42:28 2025 by rpki-client