Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.mft
File:                     72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.mft (raw, json)
Hash identifier:          bEs582WH+mmBqZXDz16In6OJXOo7hOvfpEL3kmGyp7U=
Subject key identifier:   05:F8:C6:94:8F:E4:B8:92:AB:BE:6C:19:04:2C:92:E5:92:8D:32:04
Authority key identifier: 72:B1:58:5A:B7:E1:4F:C0:BE:6B:5D:2C:62:E5:F2:8D:C3:E5:72:22
Certificate issuer:       /CN=72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222
Certificate serial:       7D6981D724FD71EA108CF4C9639998D9B2D2B50B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.mft
Manifest number:          8D
Signing time:             Thu 16 Nov 2023 07:14:56 +0000
Manifest this update:     Thu 16 Nov 2023 07:09:56 +0000
Manifest next update:     Fri 17 Nov 2023 11:10:56 +0000
Files and hashes:         1: 323830343a366638633a3a2f33322d3334203d3e20323730363638.roa (hash: 0R2PVZEXCIO6SxoUtxLAa6tipYLPiQBFqSKpN2wH6WI=)
                          2: 3137392e36302e3133322e302f32322d3234203d3e20323730363638.roa (hash: 15Aa5EqS4i/xoOBIuB64l9zMfFke7qLETyG4uKeHcJw=)
                          3: 72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.crl (hash: imc/kNPuQL32z/Vb5IGFfadV6A9WdAyztwuRDso4DTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:69:81:d7:24:fd:71:ea:10:8c:f4:c9:63:99:98:d9:b2:d2:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222
        Validity
            Not Before: Nov 16 07:09:56 2023 GMT
            Not After : Nov 17 11:10:56 2023 GMT
        Subject: CN=05F8C6948FE4B892ABBE6C19042C92E5928D3204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bb:2a:11:c9:03:fd:88:15:52:00:12:47:b7:
                    ce:5a:7a:6f:f0:93:30:cd:9e:e8:fa:c9:fb:85:aa:
                    18:b5:2e:24:44:db:68:82:d4:9a:82:e9:c2:59:0d:
                    38:66:1e:01:ba:ce:44:3d:e0:7f:d8:e4:dd:f3:3a:
                    e9:bc:e4:06:70:37:88:d9:91:f1:12:24:46:c4:b0:
                    04:45:f4:b4:32:21:05:f4:7d:3e:f5:18:dc:a0:30:
                    64:ad:d5:12:07:2d:a4:dd:ab:48:56:3d:41:fc:5c:
                    97:d6:ad:b8:c6:f5:0f:b7:30:45:c2:c8:74:b1:22:
                    db:cc:91:9c:31:b6:d3:bb:a8:a8:c6:de:ec:ad:02:
                    94:99:68:42:05:b6:c4:7c:50:52:65:71:81:7d:61:
                    69:54:65:5b:bb:b8:53:98:2d:a1:b0:1a:24:b7:de:
                    93:80:19:b1:e8:c0:0e:b7:e5:7a:31:a8:ef:e7:e7:
                    e0:5c:3c:5c:b4:4e:7f:32:98:a6:84:f9:9f:22:45:
                    02:3a:f1:33:8c:de:32:fc:fe:6b:3a:48:a6:d4:22:
                    c3:14:a7:a4:6e:61:1a:54:32:9d:bc:32:19:dd:9a:
                    54:b0:d8:e7:93:df:58:08:18:97:2b:ea:be:c0:10:
                    91:6a:1b:81:92:fa:81:12:e8:5f:5f:e4:d9:5d:d3:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:C6:94:8F:E4:B8:92:AB:BE:6C:19:04:2C:92:E5:92:8D:32:04
            X509v3 Authority Key Identifier:
                keyid:72:B1:58:5A:B7:E1:4F:C0:BE:6B:5D:2C:62:E5:F2:8D:C3:E5:72:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:df:fc:e3:0d:fe:ee:85:f3:f0:c0:c3:4c:80:03:23:d7:84:
         91:4b:e1:6d:a2:75:6b:be:0b:a0:85:8c:95:40:7c:35:66:bb:
         95:d6:78:98:a8:69:c4:ea:03:b8:30:95:ee:6f:f6:d9:ac:90:
         fe:d8:37:58:8f:c5:82:76:bb:e6:5b:2d:e7:e1:9d:1b:de:ed:
         df:1a:3a:56:6d:86:6e:48:cc:38:98:d4:96:df:cc:2d:97:08:
         0e:0a:32:92:15:ee:7a:54:eb:3e:62:d7:d2:05:19:c3:86:74:
         ba:a0:44:1e:46:ba:25:b5:63:66:f3:44:f6:85:ad:e1:44:87:
         0b:9f:40:c1:19:6e:78:7f:21:cb:d1:8e:54:a2:e0:05:08:f9:
         b5:e3:6b:2c:3f:4a:d2:e2:85:80:05:2a:06:78:67:bf:e3:f7:
         d4:33:8f:ad:e0:46:15:f7:1e:ff:21:51:fa:f9:a3:73:c1:ce:
         37:32:4b:91:aa:df:2f:f1:bf:60:26:c8:91:ee:fa:bd:19:bc:
         55:6d:be:93:3e:35:62:5f:70:bc:c1:78:98:8a:9c:cd:eb:a0:
         1f:89:e6:0c:5e:3b:0c:6d:24:f2:87:ac:e1:46:e9:c3:ff:cc:
         19:4a:14:0a:44:dc:e7:86:20:4b:17:2f:b0:d5:96:a2:47:3d:
         50:be:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:55:44 2025 by rpki-client