Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft
File:                     F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft (raw, json)
Hash identifier:          G7mUdiLlUu5or3BCzis+K4Ndg9S7f3E9IWrtB5Uawc4=
Subject key identifier:   D9:55:A4:39:8B:A2:A5:24:D9:34:03:BC:ED:32:3F:9D:69:4D:C9:19
Authority key identifier: F7:7F:C9:D5:05:4F:C1:6B:B7:3C:04:D4:C7:86:94:19:FD:D6:C9:BF
Certificate issuer:       /CN=F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF
Certificate serial:       5868C257EBA6BEEC4E5E0AFF9A33DBDFEBF1E323
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft
Manifest number:          2D
Signing time:             Sat 29 Mar 2025 01:03:11 +0000
Manifest this update:     Sat 29 Mar 2025 00:58:11 +0000
Manifest next update:     Sun 30 Mar 2025 02:59:11 +0000
Files and hashes:         1: 323830343a336337383a3a2f33322d313238203d3e20323636323134.roa (hash: ciE9rfuAOB/j26hgoWw36xbqGfI5nXl/BunKV3l6vdg=)
                          2: 3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa (hash: oA+hQNqCJ36H+HwgKXbxf98u2zTL/v+S5yyiklCcaho=)
                          3: F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.crl (hash: lNCafYyRU2Tgi/b5leumGiKoZ4ZZfWdH7VD8u36coKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:68:c2:57:eb:a6:be:ec:4e:5e:0a:ff:9a:33:db:df:eb:f1:e3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF
        Validity
            Not Before: Mar 29 00:58:11 2025 GMT
            Not After : Mar 30 02:59:11 2025 GMT
        Subject: CN=D955A4398BA2A524D93403BCED323F9D694DC919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:50:d0:38:3c:2e:2d:90:3f:6a:5b:ce:bc:
                    4a:56:41:85:3d:fb:5c:70:e4:97:e1:36:9c:50:e8:
                    69:3c:78:2a:a9:af:4a:84:54:ae:ff:d6:f3:af:c8:
                    80:30:f6:1c:3e:b0:e5:60:c3:ee:08:df:ad:da:90:
                    60:f1:4e:d6:b1:26:1c:37:57:93:07:25:09:0d:5a:
                    76:eb:75:e8:d8:5f:c6:68:66:cb:52:54:b9:ab:77:
                    b0:b3:48:6a:a8:66:8f:f6:b6:41:b2:bc:45:e4:05:
                    78:4e:6f:5d:18:69:ea:8a:19:42:af:5b:fe:49:73:
                    7c:d3:66:a7:36:00:e2:0e:8a:bf:8c:63:f0:7f:46:
                    63:9f:c8:41:69:3e:a6:0a:cc:ad:aa:67:87:93:6d:
                    df:34:11:5e:8b:43:b8:96:13:de:ca:3c:e7:ae:d4:
                    00:03:b9:c3:62:2b:03:e4:b6:97:e8:52:6a:cf:f6:
                    ae:de:cf:1b:69:bb:3c:1b:1d:47:fb:2d:6c:f4:39:
                    a3:e5:9d:b2:7b:08:c1:ce:e7:88:f9:a4:d7:e0:bd:
                    6b:a9:e8:7c:ee:31:af:a5:22:99:1e:9f:1d:c9:30:
                    f3:6c:49:0e:fe:be:d0:63:2b:68:a5:64:48:2d:65:
                    05:8b:81:d1:17:c1:90:73:16:16:01:6c:0f:7d:2b:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:55:A4:39:8B:A2:A5:24:D9:34:03:BC:ED:32:3F:9D:69:4D:C9:19
            X509v3 Authority Key Identifier:
                keyid:F7:7F:C9:D5:05:4F:C1:6B:B7:3C:04:D4:C7:86:94:19:FD:D6:C9:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:48:53:47:70:50:3d:f2:82:3d:7e:4d:32:44:10:39:97:
         35:18:2c:7a:4c:7b:12:d0:15:9e:81:0a:39:67:32:3c:fd:9a:
         6d:bc:87:2a:49:ef:0f:b9:61:bb:64:80:0f:3c:7f:d5:34:92:
         46:b9:93:e3:05:81:7c:d4:c9:fc:fa:02:4d:5b:25:e3:7a:73:
         35:da:03:ff:fd:49:80:71:ce:52:76:3f:d7:01:dc:10:a9:04:
         04:1f:8e:6d:6c:5a:70:08:a5:b8:9b:a0:01:6f:7d:e5:77:4d:
         02:28:94:98:7d:0f:56:3b:16:f5:75:61:e4:75:71:79:40:b7:
         14:0f:5a:f6:b2:5c:d1:07:2e:40:9e:32:5e:9b:e8:a0:23:00:
         56:2c:9b:6e:79:61:3d:b9:a2:ba:0f:7d:95:e3:ef:02:89:fc:
         10:60:08:9c:17:83:5a:e4:e4:b3:af:af:70:4e:bb:ac:96:56:
         7e:09:95:28:30:42:37:b8:52:a5:93:92:4f:c2:fb:d1:de:3c:
         ca:c6:70:12:32:fa:43:25:0f:17:ff:07:22:ed:20:9c:78:ce:
         05:7c:11:d0:92:b3:2f:1f:7e:83:83:6d:1f:65:e7:97:41:1b:
         c7:97:2f:39:2d:b7:63:56:d1:b3:7c:0f:09:c1:b3:53:04:bd:
         9b:70:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:39:13 2025 by rpki-client