Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/29A900C215A505163BD9D2844266656FCCF69E76.mft
File:                     29A900C215A505163BD9D2844266656FCCF69E76.mft (raw, json)
Hash identifier:          V3lcmh5nl6URvBvWzdQ4vy6i9Hdd9Q60hR+5D23ko3E=
Subject key identifier:   4B:98:C2:11:72:24:AE:3B:9E:01:6F:4A:18:0C:1E:FC:3E:7B:FE:AD
Authority key identifier: 29:A9:00:C2:15:A5:05:16:3B:D9:D2:84:42:66:65:6F:CC:F6:9E:76
Certificate issuer:       /CN=29A900C215A505163BD9D2844266656FCCF69E76
Certificate serial:       4C2AABD34CA9BF66530F5E251177220647AECA2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A900C215A505163BD9D2844266656FCCF69E76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/29A900C215A505163BD9D2844266656FCCF69E76.mft
Manifest number:          31
Signing time:             Mon 20 Jan 2025 12:10:58 +0000
Manifest this update:     Mon 20 Jan 2025 12:05:58 +0000
Manifest next update:     Tue 21 Jan 2025 12:39:58 +0000
Files and hashes:         1: 29A900C215A505163BD9D2844266656FCCF69E76.crl (hash: tMVoO2GA77K1hpqnj0qJW9805/6vIpDxS3gaA6xvveg=)
                          2: 3137302e38332e36342e302f32322d3332203d3e20323636343835.roa (hash: N1THrOy8BMUK7rheyLZbEAfFLLQV58WdDWwd4oJWLfU=)
                          3: 323830343a333838633a3a2f33322d313238203d3e20323636343835.roa (hash: wMppdLzmeoztyh+iD+6Wgu/B44ckXCwVqYEJqOyVaSI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2a:ab:d3:4c:a9:bf:66:53:0f:5e:25:11:77:22:06:47:ae:ca:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A900C215A505163BD9D2844266656FCCF69E76
        Validity
            Not Before: Jan 20 12:05:58 2025 GMT
            Not After : Jan 21 12:39:58 2025 GMT
        Subject: CN=4B98C2117224AE3B9E016F4A180C1EFC3E7BFEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:bd:d3:03:22:45:71:b6:d9:f7:6d:82:06:
                    06:b5:a2:af:55:a3:eb:b2:f8:63:98:63:e0:b7:89:
                    dd:56:72:de:c4:67:fd:80:13:4d:87:bc:8d:34:23:
                    0d:49:61:50:19:72:0a:88:f4:50:5a:f6:cc:71:d6:
                    b5:50:f9:46:8d:81:d9:bb:80:e3:2f:bc:35:20:a9:
                    24:f7:28:31:12:a0:ad:e6:63:85:26:3e:27:ef:5a:
                    43:22:ae:c3:41:bd:9f:5a:2b:06:2c:bb:36:d4:c9:
                    4d:ee:60:fd:e6:ec:55:23:4d:f1:80:a4:a6:56:1d:
                    ab:67:33:7e:1a:88:56:e3:30:f3:3c:89:46:5b:44:
                    a2:da:4a:d6:7b:16:8f:b1:06:e8:9c:e3:6c:38:1b:
                    8c:7e:65:f5:f6:26:29:fd:b3:bd:22:1b:a6:21:e1:
                    6f:b4:f4:bf:48:c6:df:0a:f3:f9:20:e8:3b:c1:cc:
                    a6:d7:88:1f:07:51:b1:b6:94:63:7e:93:69:9e:d5:
                    f7:67:31:7a:b7:aa:bf:f6:d2:1a:d1:7e:cd:9f:3f:
                    53:2c:a5:99:88:46:76:0e:6a:d9:a7:81:54:c3:d9:
                    cc:14:ea:eb:66:d0:2a:4f:b0:ce:42:c3:74:12:46:
                    ba:e2:0c:2e:cd:b8:a3:fc:c1:c7:46:38:a0:20:5f:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:C2:11:72:24:AE:3B:9E:01:6F:4A:18:0C:1E:FC:3E:7B:FE:AD
            X509v3 Authority Key Identifier:
                keyid:29:A9:00:C2:15:A5:05:16:3B:D9:D2:84:42:66:65:6F:CC:F6:9E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/29A900C215A505163BD9D2844266656FCCF69E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A900C215A505163BD9D2844266656FCCF69E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbY9QEuS4foCDkoDfpEkeCYWZze485LBqkfiofR3NRr/0/29A900C215A505163BD9D2844266656FCCF69E76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f8:0e:cd:30:75:96:59:9e:a8:8e:f2:09:52:87:e3:0a:5f:
         b6:63:be:6b:b4:b7:b7:21:40:7a:a0:b7:ef:44:c7:48:12:00:
         72:da:f8:82:e2:fc:82:ca:7d:1a:8c:fe:65:9c:3c:3d:dd:81:
         65:51:04:b4:9c:a8:13:12:83:d4:06:7e:85:fc:8a:62:89:f1:
         37:46:a8:55:ff:b9:f2:f4:a9:1b:c0:56:65:2a:f6:de:7c:5c:
         bc:7f:3f:7d:bb:35:0a:86:9d:ca:76:83:70:88:c1:30:d9:7c:
         7c:a9:7f:9d:6e:75:c9:8e:79:3c:27:ad:4d:d9:06:7f:8a:92:
         bf:b2:b9:86:8a:b3:ea:75:91:1d:3a:2c:e8:7a:5b:d0:a3:2c:
         02:98:8f:c2:16:59:1d:e9:11:67:66:7a:50:b3:86:e8:ec:00:
         29:07:b5:59:0a:75:ff:88:39:8d:d6:40:0f:07:02:4c:52:98:
         8c:ea:0e:12:a5:47:b1:6c:0d:79:99:42:ba:bb:8a:47:e7:56:
         0a:94:71:85:80:85:a3:f5:a3:96:93:03:16:59:2a:d9:5e:79:
         90:b4:bd:c8:03:73:f2:b1:14:fc:9a:f9:3f:01:b0:35:07:d4:
         9f:db:3c:1d:02:64:20:c7:86:36:5f:09:09:24:57:5e:f0:27:
         70:e9:9d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:23 2025 by rpki-client