Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.mft
File:                     FF08FFB6D0FE39D46098F29E2561500E8827C3B3.mft (raw, json)
Hash identifier:          gN1i16euslzEgvqqSy2ZaNfFfvbZr9uXqVdk6yzrtiE=
Subject key identifier:   39:5C:63:CF:19:E2:24:5B:7F:58:7A:F8:A1:FF:35:BA:C3:DA:76:0F
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       3B0D87C679642FA4E0CE886A7E28A1872A271212
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.mft
Manifest number:          DA
Signing time:             Fri 27 Sep 2024 23:01:28 +0000
Manifest this update:     Fri 27 Sep 2024 22:56:28 +0000
Manifest next update:     Sat 28 Sep 2024 23:32:28 +0000
Files and hashes:         1: 34352e3138312e37362e302f32342d3234203d3e20323731343239.roa (hash: 1C8+tv1mCtAb7Vehpx6UnMk7xHGvQiRRKIylAXX7dWs=)
                          2: 323830343a376236343a343030303a3a2f33342d3334203d3e20323731343239.roa (hash: 4UFzZNo58Xl5L7zyqGuduP90QVmfY5qdqV+1VWWZRAU=)
                          3: 323830343a376236343a3a2f33322d3332203d3e20323731343239.roa (hash: 9oT77+SnJ2GHk/gU+VlKY+o4etd97w+uwjO4243tboo=)
                          4: 3136342e3136332e342e302f32342d3234203d3e20323731343239.roa (hash: ti81J/v4XYN/bmjsdTU2NVmIWBZiAJIz0KyR0e/cB9I=)
                          5: FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl (hash: bG1chF+8we9Uc89gVTke2MQip3B0K3C8mHBjfceWKyI=)
                          6: 323830343a376236343a3a2f33342d3334203d3e20323731343239.roa (hash: j70puqiaF68J0mMTfPuSvbTC7ixdhXBYr3vM66JLTgU=)
                          7: 323830343a376236343a383030303a3a2f33342d3334203d3e20323731343239.roa (hash: nZREaIL6/KNLESunG17nRQbyBoaXbWL4/Pgrer9gPrw=)
                          8: 3137372e3132382e3137342e302f32342d3234203d3e20323731343239.roa (hash: BuOT6hndipkOg/hhHBjf53lE1qKLBRWg629eg0wgOuc=)
                          9: 323830343a376236343a633030303a3a2f33342d3334203d3e20323731343239.roa (hash: RFh32EhygrbRcHBFRm3icZMNlFj2Je+wtIZfPqQixZg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0d:87:c6:79:64:2f:a4:e0:ce:88:6a:7e:28:a1:87:2a:27:12:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: Sep 27 22:56:28 2024 GMT
            Not After : Sep 28 23:32:28 2024 GMT
        Subject: CN=395C63CF19E2245B7F587AF8A1FF35BAC3DA760F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:d6:87:85:42:ee:e2:16:d2:2b:1b:ac:2b:
                    8d:f9:0f:7e:9c:ef:fa:ad:7d:02:86:01:68:ad:ec:
                    b7:51:a8:a4:e5:64:71:48:1c:6d:65:07:3c:48:2e:
                    b1:46:22:e5:b6:55:d0:d0:51:8e:24:4d:4e:54:f0:
                    38:c9:c4:aa:4b:57:a3:6d:ca:d0:4a:57:0f:ce:91:
                    90:67:39:dc:de:2f:fe:fa:e5:27:3e:90:f6:e4:f4:
                    bf:6d:dd:67:21:7d:83:b9:64:7c:bf:40:df:38:cc:
                    1d:4e:2c:ec:4e:92:20:54:d2:3d:61:ed:3d:42:f6:
                    fa:b6:61:2a:1b:2e:57:a9:3d:48:7a:d8:97:7f:db:
                    27:33:14:ee:65:56:31:ca:f5:63:c6:d7:8d:17:5b:
                    70:6d:19:0e:9b:2d:1b:07:8a:7b:0c:4d:15:a8:9f:
                    ae:04:3c:f3:e1:fd:c9:58:23:ac:7e:b1:14:a5:2e:
                    bb:17:d4:75:e6:30:2a:f8:d3:4a:5f:b9:db:e3:77:
                    a1:52:00:21:42:ef:27:3c:17:98:e9:82:0e:ed:6e:
                    dc:38:7f:15:ef:c9:3d:31:bf:9b:6e:56:d4:7b:49:
                    ca:9a:f7:e6:ee:28:89:d3:b5:ac:e9:6f:97:28:40:
                    a2:51:4c:97:0f:7f:f5:80:df:61:60:eb:7a:9d:bc:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:63:CF:19:E2:24:5B:7F:58:7A:F8:A1:FF:35:BA:C3:DA:76:0F
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:fe:f4:dc:b1:b5:08:6a:fb:db:9f:86:16:fd:3c:ac:0c:
         d2:c2:f7:af:ea:f6:7e:17:c5:6b:77:5b:8b:6e:34:4c:a3:02:
         52:a5:90:35:da:0d:da:56:b9:00:52:a6:3e:9e:f7:e4:4f:52:
         c8:d8:63:f9:79:af:10:e9:b2:71:21:9b:83:76:bd:08:a5:79:
         d3:0e:68:21:01:35:d7:d1:10:8e:3a:d2:fc:04:63:c2:e8:25:
         97:73:53:41:71:f7:66:de:12:e0:c5:97:92:e7:db:8f:44:40:
         a0:69:e4:d5:11:2d:84:44:65:ae:59:10:0b:61:38:59:a8:21:
         90:55:19:f9:33:d1:9a:82:f6:43:c9:bc:9e:ec:54:85:72:57:
         71:cc:ab:b6:5c:44:a4:8c:a6:34:c7:4c:10:da:43:f4:c1:41:
         5e:b1:5c:1d:0a:f0:69:08:40:2a:99:de:fb:6f:9c:d0:d3:d3:
         e9:31:71:3c:cc:1d:15:99:49:0c:d3:07:e9:cd:94:79:ed:b8:
         64:40:0f:6d:6e:3e:a8:47:9e:d5:66:9e:64:e7:0f:2b:6a:bf:
         8a:17:40:e0:7f:45:f9:b9:5e:fb:62:f5:be:99:5c:63:ed:31:
         b4:f7:87:eb:8a:44:20:13:ec:dc:87:98:65:b1:2d:3e:db:75:
         05:fd:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:53 2025 by rpki-client