Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.mft
File:                     D29DE518BF73E49B6087F7DE6776534CE238CD69.mft (raw, json)
Hash identifier:          Us+CXIf5ixqWUx35uyoWyCGytFPCej4r8G5vVwB3eY8=
Subject key identifier:   C9:B3:31:24:0C:F6:C2:41:E9:82:78:E8:B9:D8:8E:CD:9A:5E:EA:22
Authority key identifier: D2:9D:E5:18:BF:73:E4:9B:60:87:F7:DE:67:76:53:4C:E2:38:CD:69
Certificate issuer:       /CN=D29DE518BF73E49B6087F7DE6776534CE238CD69
Certificate serial:       2B9EA05FB595323C334226B99EA94C6E223A925E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29DE518BF73E49B6087F7DE6776534CE238CD69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.mft
Manifest number:          8C
Signing time:             Fri 20 Dec 2024 23:05:25 +0000
Manifest this update:     Fri 20 Dec 2024 23:00:25 +0000
Manifest next update:     Sun 22 Dec 2024 01:14:25 +0000
Files and hashes:         1: D29DE518BF73E49B6087F7DE6776534CE238CD69.crl (hash: 08N1Ba30ArW1Vc+xyXtJQ5Pr8rjwFTNwcPus181qXXo=)
                          2: 323830343a353466303a3a2f33322d3438203d3e20323638363739.roa (hash: O4NkJCTGxL7+efX88dPI/Q03lh5lD1+n/DQvq7Gu+EQ=)
                          3: 34352e3136352e36382e302f32322d3234203d3e20323638363739.roa (hash: XoC8Y89WY7ttjxamKFCIUePVs7rqov8TKqbaGW7UIhg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9e:a0:5f:b5:95:32:3c:33:42:26:b9:9e:a9:4c:6e:22:3a:92:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D29DE518BF73E49B6087F7DE6776534CE238CD69
        Validity
            Not Before: Dec 20 23:00:25 2024 GMT
            Not After : Dec 22 01:14:25 2024 GMT
        Subject: CN=C9B331240CF6C241E98278E8B9D88ECD9A5EEA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:b1:39:d8:fd:9c:05:dd:87:33:64:1c:79:
                    df:ca:c0:fa:b2:fa:60:d9:7e:dd:a7:06:90:11:0b:
                    d4:82:54:2e:e1:92:7c:17:2d:d0:a1:3f:e9:e3:b5:
                    20:fc:b5:38:2e:e6:7e:95:75:6e:c6:fd:de:0a:60:
                    17:ae:fa:ff:0a:fc:94:3b:50:9f:77:8c:b4:db:33:
                    72:44:6f:8e:46:32:f0:4d:39:b2:73:1c:cf:27:37:
                    af:28:f8:30:18:62:c6:00:b1:a3:f0:69:d6:a9:b5:
                    34:fa:90:d7:7c:d9:5e:76:ce:77:8b:69:25:8b:af:
                    6c:0f:65:f8:fc:af:fc:71:71:90:28:5b:75:af:6b:
                    94:a7:bf:9e:ee:05:35:15:3c:d3:e5:24:d1:b7:da:
                    8c:dd:9d:b5:8a:9d:33:c1:f0:18:e3:5a:ce:59:9c:
                    3d:11:23:e7:af:51:aa:1d:41:df:48:55:ab:da:57:
                    1d:1e:80:97:d6:9b:5f:ac:7c:57:a6:5a:3e:9d:d7:
                    d5:ce:6c:a4:29:97:ca:e1:33:64:bc:db:be:e7:84:
                    67:5c:1d:ac:ba:91:7f:b8:fc:5b:78:8b:f9:5e:34:
                    ab:84:93:bb:84:d7:03:c8:28:49:63:41:20:14:57:
                    2e:cb:66:9b:c4:2f:a4:a1:16:92:2f:35:a0:09:e3:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B3:31:24:0C:F6:C2:41:E9:82:78:E8:B9:D8:8E:CD:9A:5E:EA:22
            X509v3 Authority Key Identifier:
                keyid:D2:9D:E5:18:BF:73:E4:9B:60:87:F7:DE:67:76:53:4C:E2:38:CD:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29DE518BF73E49B6087F7DE6776534CE238CD69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:b9:c6:1c:7d:a1:86:62:e6:45:ba:95:1f:2d:64:8d:4b:
         60:58:65:fd:a4:30:fa:82:12:24:4a:08:26:16:9c:9a:6f:fd:
         da:3c:b0:db:1c:51:1f:f4:b1:76:de:8f:89:80:95:da:5a:8b:
         86:75:34:d7:d3:2e:ef:e0:66:9e:8b:06:c9:74:d8:84:81:0c:
         ca:3b:67:f7:43:6e:ea:7e:f0:49:fb:ff:79:af:d0:89:49:64:
         73:ec:c1:20:3f:1f:8c:38:fb:43:d9:59:ed:68:79:24:4b:f6:
         dc:13:bb:21:f6:dc:6f:e2:31:86:20:35:3b:b1:bc:bc:4d:0d:
         13:27:8b:b8:d9:fa:06:0a:aa:1e:7c:53:ce:9e:29:71:d3:00:
         e2:33:c2:24:a2:a5:96:2d:4c:c0:bf:fd:c9:32:ed:9a:d4:0e:
         6e:42:28:33:08:da:c4:3a:b6:22:05:60:22:4e:27:d8:bb:c6:
         95:32:d2:b9:e4:42:5a:72:e8:ef:2b:87:cc:41:2e:70:90:c1:
         63:6f:92:da:a6:fb:9e:ed:b5:d6:b4:9e:64:b8:1f:fa:a6:33:
         d1:0a:03:67:c9:d0:97:13:9e:e4:02:7d:cd:1d:a5:1e:67:c5:
         c2:95:cc:aa:fa:c5:1c:02:c7:cd:f4:77:ac:3a:1f:73:d0:21:
         4d:50:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:54 2025 by rpki-client