Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.mft
File:                     2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.mft (raw, json)
Hash identifier:          ZMhY5Zh7vS+PAU/sQoIUbfL/iCd23zsKcC8UniGR9aU=
Subject key identifier:   C6:77:13:B9:88:3C:5D:34:98:40:C2:DC:7A:17:88:7B:E8:F3:5E:FD
Authority key identifier: 2D:CA:FB:3D:2D:82:42:05:A3:59:EE:5D:E2:FF:C4:C0:7D:1B:4A:2B
Certificate issuer:       /CN=2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B
Certificate serial:       316442ACA42A2E3AF5E8D75D8340459CB396B531
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.mft
Manifest number:          17
Signing time:             Sat 27 Jul 2024 21:05:00 +0000
Manifest this update:     Sat 27 Jul 2024 21:00:00 +0000
Manifest next update:     Mon 29 Jul 2024 00:56:00 +0000
Files and hashes:         1: 323830343a356637383a3a2f33322d3332203d3e20323639313032.roa (hash: ML8uMB94ZhCuv6roLM85NT7yXGa0wWsYldAPDvBsM0Q=)
                          2: 2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.crl (hash: ex2Ze1AKKC1Zddwy885uCAaE8piVRuhBfXYEKZuUZHY=)
                          3: 34352e3137382e3233362e302f32322d3232203d3e20323639313032.roa (hash: n9WquG46AQdTmUR6l6b+RVzK7p7RoiFVnpcoCeLOBZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:64:42:ac:a4:2a:2e:3a:f5:e8:d7:5d:83:40:45:9c:b3:96:b5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B
        Validity
            Not Before: Jul 27 21:00:00 2024 GMT
            Not After : Jul 29 00:56:00 2024 GMT
        Subject: CN=C67713B9883C5D349840C2DC7A17887BE8F35EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:aa:7d:ac:87:82:d6:9b:24:15:8b:db:8c:
                    19:d4:8c:54:a6:b5:3a:5f:c9:e3:35:f0:bd:41:bc:
                    89:75:d9:b0:51:1a:86:53:2a:bb:e3:5b:62:27:29:
                    14:be:8f:4b:dd:48:a4:80:2f:18:77:21:f7:88:30:
                    11:af:89:be:0b:91:0d:a1:4a:5b:46:7e:fe:a0:a2:
                    bc:5b:f0:98:33:a0:c4:4b:be:74:67:a1:bc:75:01:
                    a7:6f:5c:b8:15:74:10:32:9f:ab:b1:86:81:ab:dc:
                    a7:42:33:fe:4e:89:c7:95:7a:6a:f5:b7:c4:f1:9f:
                    6e:34:41:60:77:7f:2f:e6:31:0f:37:c8:ee:5e:2a:
                    9a:aa:cf:3f:e1:2b:cf:fe:24:c1:a2:32:87:fe:fd:
                    84:98:a8:4e:20:fa:a5:bd:ef:e6:60:ea:25:99:14:
                    90:97:c5:e2:55:1e:df:f6:04:51:28:aa:53:91:5a:
                    85:c2:36:b6:f3:9f:e9:8b:58:92:82:55:5d:b2:65:
                    83:45:c5:10:93:91:5a:1e:3e:13:de:54:12:be:c0:
                    18:41:72:2c:cd:70:ce:9e:16:27:ab:6f:b6:92:e6:
                    96:a3:22:94:ab:0b:1a:bd:bd:18:45:27:64:6a:4c:
                    7a:ef:bb:33:ae:82:44:9e:49:76:90:44:88:f0:eb:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:77:13:B9:88:3C:5D:34:98:40:C2:DC:7A:17:88:7B:E8:F3:5E:FD
            X509v3 Authority Key Identifier:
                keyid:2D:CA:FB:3D:2D:82:42:05:A3:59:EE:5D:E2:FF:C4:C0:7D:1B:4A:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/2DCAFB3D2D824205A359EE5DE2FFC4C07D1B4A2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:17:7e:64:53:f5:72:3d:72:02:a3:f9:a7:c7:58:9d:b0:e1:
         15:ba:87:eb:e9:46:f3:e9:c7:42:92:c5:a1:1e:e5:10:99:f2:
         d1:c3:7f:97:c8:13:65:06:40:71:9e:4c:26:84:fa:d5:9c:c4:
         e4:bc:c7:40:f5:e3:97:5c:20:d1:82:c3:87:80:d7:89:63:77:
         70:6f:24:89:96:6b:cd:1d:8b:c9:9f:df:ad:93:cb:15:30:e8:
         2a:fe:2c:c0:ad:81:99:98:ed:eb:ca:3b:94:cc:6b:8f:aa:fe:
         4d:2a:42:24:40:6c:92:10:84:0d:42:f8:86:fa:d1:7a:e9:58:
         11:78:64:1f:86:cb:00:4d:8b:9c:2e:be:6e:b5:d3:79:b4:65:
         1d:2f:f1:53:5e:00:bb:fe:18:cc:12:ab:f6:e2:9e:3c:9a:ab:
         52:19:dd:09:53:75:c4:fc:17:6c:77:6d:7e:a3:fd:b4:6e:ff:
         f2:7a:77:da:d1:ec:8a:5f:5a:c5:68:83:70:d3:81:d7:ba:84:
         8d:e3:d3:ad:ee:72:74:24:53:80:9e:1f:a3:f1:ef:96:fa:9c:
         1e:65:bc:30:2b:ff:64:2f:3e:bf:01:8c:ae:31:57:7d:a3:f7:
         25:cb:b0:b6:50:a9:77:7a:c6:97:00:ee:8b:f7:bb:2e:32:d8:
         67:27:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:44 2025 by rpki-client