Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft
File:                     140BB09016E491475222C5C1D5E1A65EC41678DC.mft (raw, json)
Hash identifier:          NtCyXD9tcM9ho63y+fC+L63DiQ8nkYwKNMfABBxRtZ4=
Subject key identifier:   43:DF:27:D8:C5:5A:01:DF:27:91:7B:50:1A:3D:43:40:EF:5C:D3:BC
Authority key identifier: 14:0B:B0:90:16:E4:91:47:52:22:C5:C1:D5:E1:A6:5E:C4:16:78:DC
Certificate issuer:       /CN=140BB09016E491475222C5C1D5E1A65EC41678DC
Certificate serial:       4CF4B3BA54D3FB47276A525C87765C290F30B741
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140BB09016E491475222C5C1D5E1A65EC41678DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft
Manifest number:          3C
Signing time:             Mon 03 Feb 2025 23:41:38 +0000
Manifest this update:     Mon 03 Feb 2025 23:36:38 +0000
Manifest next update:     Tue 04 Feb 2025 23:57:38 +0000
Files and hashes:         1: 323830343a346462633a3a2f33322d313238203d3e20323638323136.roa (hash: Bml6DvmGKoW4Lf8/LSH6WfAifTG3d9FiI+9plrscLu0=)
                          2: 34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (hash: 6EAV9MNo16uluaSjX/q0IgMcBVr+m0i+ndPQyMjrpf8=)
                          3: 140BB09016E491475222C5C1D5E1A65EC41678DC.crl (hash: MOAi1eElXdTBQLKBRvnSx8E/0GlGBzM81sVL9D7RlyE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f4:b3:ba:54:d3:fb:47:27:6a:52:5c:87:76:5c:29:0f:30:b7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140BB09016E491475222C5C1D5E1A65EC41678DC
        Validity
            Not Before: Feb  3 23:36:38 2025 GMT
            Not After : Feb  4 23:57:38 2025 GMT
        Subject: CN=43DF27D8C55A01DF27917B501A3D4340EF5CD3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:78:2e:32:3a:79:5b:5e:d9:07:f7:a7:ba:
                    9f:da:55:3b:c7:60:ff:31:59:aa:cc:6b:72:0e:bf:
                    c3:a2:bb:20:36:f4:b5:c9:38:2d:21:19:24:8e:f4:
                    24:ed:25:85:aa:6a:15:cc:c5:63:9d:06:a5:be:40:
                    52:15:05:b5:56:42:21:44:d1:22:ce:58:9f:5a:c4:
                    d3:be:99:19:f6:4f:95:34:d1:42:0d:c6:fa:bd:61:
                    7a:de:75:44:89:1d:84:b1:6b:f8:fd:71:0b:bd:9b:
                    f0:97:bd:dd:d8:42:0c:a2:14:99:48:af:1f:0c:6a:
                    74:93:bc:fb:38:d7:8a:9d:bb:d7:29:90:ea:20:cb:
                    fa:c8:51:b7:81:4f:70:41:a8:8d:2e:47:a6:b2:55:
                    71:ab:94:53:1d:4b:c9:f6:80:bc:f6:5d:f0:80:21:
                    4d:f6:9d:68:e6:7e:d7:15:73:ea:e3:1c:aa:ec:53:
                    b1:43:93:6e:d0:5f:7d:e0:0e:2f:fa:ad:d5:12:f2:
                    55:63:56:32:7c:af:2d:d6:65:b9:88:b5:a1:a6:63:
                    78:00:9c:f2:c3:9f:4d:11:26:84:bd:00:26:66:cc:
                    2d:ae:fa:98:f3:3d:77:ad:60:76:90:cb:67:ec:0e:
                    67:8b:3f:73:72:3c:30:da:e8:c9:40:57:d3:42:8c:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DF:27:D8:C5:5A:01:DF:27:91:7B:50:1A:3D:43:40:EF:5C:D3:BC
            X509v3 Authority Key Identifier:
                keyid:14:0B:B0:90:16:E4:91:47:52:22:C5:C1:D5:E1:A6:5E:C4:16:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140BB09016E491475222C5C1D5E1A65EC41678DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/140BB09016E491475222C5C1D5E1A65EC41678DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f9:c3:fd:38:68:3e:1f:2f:e2:68:2e:e7:03:02:9b:2d:a0:
         cb:21:7c:91:42:72:63:09:13:0d:55:5a:a4:5d:84:f9:e2:70:
         32:64:ea:3b:bf:4e:07:b5:f2:3f:d0:7e:e7:33:32:83:ee:2a:
         33:06:fd:70:58:fe:16:d1:90:12:25:98:bb:07:d0:8a:84:6a:
         87:4c:53:a8:ea:47:0b:d0:ea:3f:56:53:9e:24:92:37:b7:0c:
         2e:c5:7d:a1:93:68:08:10:54:1b:bb:24:82:57:ae:28:49:1c:
         50:fe:4d:f3:f7:63:88:6f:a7:57:66:9e:cf:c9:0e:e3:ef:bb:
         d9:04:be:60:d7:1e:61:27:9d:f4:f1:22:ac:11:6c:62:11:c9:
         54:4d:df:45:e1:67:68:1d:8f:84:5a:64:30:a1:31:9c:4e:d1:
         af:cb:5d:83:7e:35:e6:46:1f:63:52:f3:86:73:00:fe:b4:ef:
         90:e9:4b:a1:08:cf:30:21:a5:9d:3b:f0:30:f5:7d:38:0b:38:
         b3:c1:31:57:11:d0:0c:5b:57:75:cd:3a:2b:b9:65:7f:16:5a:
         3b:fb:c6:1f:90:57:66:fb:4c:9f:d9:c8:a9:92:6c:7c:31:c5:
         7a:b1:59:d5:69:9a:6e:7f:31:af:3a:99:a7:3c:3d:d7:7e:eb:
         94:09:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:15:28 2025 by rpki-client