Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft
File:                     70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft (raw, json)
Hash identifier:          Rfy+uVzgMdinnJP0OKBawcKqlfl0cOiv7Mn2FZ07zdk=
Subject key identifier:   3F:9A:32:0C:48:1E:E0:B1:8A:C3:7C:BE:D7:3A:3E:EF:82:60:33:EC
Authority key identifier: 70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45
Certificate issuer:       /CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345
Certificate serial:       33AC6AC85FFECFB1D802A11EC3BDEF9C1AF48DBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft
Manifest number:          3F
Signing time:             Fri 28 Mar 2025 20:40:07 +0000
Manifest this update:     Fri 28 Mar 2025 20:35:07 +0000
Manifest next update:     Sat 29 Mar 2025 23:42:07 +0000
Files and hashes:         1: 70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl (hash: M/tQ+pkxiiB3dDezAtnxQwzBX47qL5xZjFjKFAJG4GY=)
                          2: 3139322e3134312e37362e302f32322d3232203d3e20323637343731.roa (hash: 31GYOHVEb3h1/buaA/2oWZzLdgJpBqjQU0DB29OrJv4=)
                          3: 323830343a343230303a3a2f33322d3332203d3e20323637343731.roa (hash: 6S+0R47GzCMBrBMBQOI4dDSt/Rq/13LxRdIrP4yVxMY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ac:6a:c8:5f:fe:cf:b1:d8:02:a1:1e:c3:bd:ef:9c:1a:f4:8d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345
        Validity
            Not Before: Mar 28 20:35:07 2025 GMT
            Not After : Mar 29 23:42:07 2025 GMT
        Subject: CN=3F9A320C481EE0B18AC37CBED73A3EEF826033EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b2:d7:5e:53:03:f8:3e:ab:2b:32:a7:7c:58:
                    7b:76:dd:69:ad:ac:be:a5:7a:bc:46:4b:10:68:4d:
                    71:aa:82:db:a5:cd:d3:b2:88:7f:14:a0:63:a9:05:
                    f0:45:70:46:8a:5c:04:52:fd:fe:55:99:75:70:ca:
                    c0:68:c5:40:60:2b:40:40:d7:07:9b:ad:50:db:0d:
                    b8:b8:1e:ac:ea:0d:78:23:8b:c9:9d:90:6d:ff:8f:
                    92:89:3f:61:3f:3c:5a:8b:a2:4a:c0:f9:33:a9:26:
                    87:e1:01:27:67:7c:a5:24:2c:57:90:6f:b5:43:7a:
                    12:c2:5f:ea:ea:92:6a:27:21:83:5d:11:24:75:be:
                    67:c8:3c:db:15:19:59:76:b5:47:0f:94:42:06:a4:
                    24:7d:d0:e3:ca:51:70:82:e2:cf:9b:b4:82:e5:af:
                    d6:1a:b2:f3:30:72:95:b4:0f:bf:d4:e7:2e:a3:08:
                    63:85:b9:6e:9c:d8:33:16:17:36:53:02:03:00:07:
                    42:a4:85:34:83:f4:2b:20:5e:02:c0:6e:17:12:10:
                    46:8d:5a:2e:3d:91:3e:8b:91:42:d2:01:a2:d5:26:
                    84:c3:71:0c:2e:d2:c9:e9:15:7b:12:6c:db:11:44:
                    65:15:b1:b6:0e:84:a0:3c:1a:f8:65:4e:23:95:a9:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:32:0C:48:1E:E0:B1:8A:C3:7C:BE:D7:3A:3E:EF:82:60:33:EC
            X509v3 Authority Key Identifier:
                keyid:70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:d3:b0:0c:81:1f:6f:9a:9c:ba:40:50:75:ee:5d:03:58:
         d9:b4:af:17:01:fb:cb:b3:55:44:0b:af:b6:72:82:35:f8:29:
         03:df:85:28:3e:0a:e6:49:67:cd:cb:93:c7:cb:6b:ff:b1:c3:
         00:bb:70:62:34:e6:34:88:68:92:42:32:9f:46:16:8f:55:fa:
         6e:21:18:16:15:53:27:8d:69:99:bf:f5:1e:58:88:5a:e2:6e:
         10:62:60:0f:28:28:f1:25:1a:69:b3:ee:ff:28:9a:f1:89:50:
         55:82:45:bc:ce:d9:86:c2:6c:4f:74:51:14:56:57:60:59:2e:
         f9:21:e8:76:5e:b6:c8:20:20:e7:c4:da:0b:d4:b4:0a:54:79:
         0e:0c:da:a9:b9:7c:9d:14:a2:9f:fb:0e:05:c9:a9:cd:f6:d8:
         e8:fb:ad:20:c2:72:43:11:d7:6e:43:5e:ba:1a:23:0d:f3:9a:
         de:5b:4f:73:81:b6:08:69:07:8d:9c:90:ea:87:58:7c:24:e9:
         2e:ce:92:24:5c:5e:63:18:06:ac:8c:50:11:4e:ff:00:df:24:
         2f:c8:f0:b1:16:08:24:b2:85:00:02:44:40:8c:29:58:fc:36:
         03:e9:27:3e:a1:4d:91:fa:15:74:b0:3b:bb:77:cd:68:c9:20:
         8c:ea:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:19 2025 by rpki-client