Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.mft
File:                     12D8BB9048654EB8B6770450FAD878383CB2E373.mft (raw, json)
Hash identifier:          1u4vN+OefMSd891eAl2o3y+mYrg/A01DK5hw0lZGNbo=
Subject key identifier:   87:06:8E:79:7F:A1:7A:AA:EC:A8:92:65:D2:17:32:E2:B3:8D:BE:42
Authority key identifier: 12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73
Certificate issuer:       /CN=12D8BB9048654EB8B6770450FAD878383CB2E373
Certificate serial:       7FD8F7FBBE7FEB7F6F4F09080F5EADFDCCAC4AE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.mft
Manifest number:          017D
Signing time:             Sat 29 Mar 2025 04:23:14 +0000
Manifest this update:     Sat 29 Mar 2025 04:18:14 +0000
Manifest next update:     Sun 30 Mar 2025 06:20:14 +0000
Files and hashes:         1: 12D8BB9048654EB8B6770450FAD878383CB2E373.crl (hash: 5ITtinj9TdHgH7aiT6nZLAemtnoeRpOZ+roavhcg/oM=)
                          2: 34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa (hash: /v+Fx0lv4p+XvnllKdW9xBDFdm+fSOcBjy975uGnVGk=)
                          3: 323830343a343662343a3a2f33322d3430203d3e20323637303036.roa (hash: sgqxM5I4o6ch8RuRarJ+QDXzKGu47pcU/DZJm4CYjU0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d8:f7:fb:be:7f:eb:7f:6f:4f:09:08:0f:5e:ad:fd:cc:ac:4a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12D8BB9048654EB8B6770450FAD878383CB2E373
        Validity
            Not Before: Mar 29 04:18:14 2025 GMT
            Not After : Mar 30 06:20:14 2025 GMT
        Subject: CN=87068E797FA17AAAECA89265D21732E2B38DBE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:60:94:e8:d4:de:a9:08:64:f6:c5:cf:96:
                    93:62:ec:83:8b:a6:e6:de:13:ab:db:f5:5d:2b:8a:
                    44:1c:82:79:52:63:04:04:52:2b:d4:14:c0:aa:3d:
                    47:54:af:4e:2b:21:9e:2e:4b:bd:8f:f7:ee:ca:2a:
                    2a:48:3a:08:33:9b:9a:59:a3:93:98:68:1d:b2:07:
                    4b:bd:ff:12:ac:12:1f:5a:64:53:28:76:ac:45:40:
                    a2:16:0e:be:2e:57:ff:5e:6f:08:ff:88:ad:fa:26:
                    d1:99:63:be:a2:01:ef:e2:8d:19:0e:76:f4:10:2a:
                    c0:6d:cd:03:8f:9f:36:36:8a:f0:80:6e:38:f8:4d:
                    79:15:33:3a:e9:a5:6c:bd:33:7f:e9:d9:23:62:f4:
                    38:a7:47:d3:2e:c5:b3:8b:09:7b:88:f1:08:4e:f8:
                    46:66:8d:55:bd:26:18:22:55:ee:95:a2:85:7d:eb:
                    2f:28:b8:d8:42:ee:db:92:33:bf:93:d8:6e:b2:39:
                    89:6a:b5:fb:0a:e0:70:a6:e6:4b:6c:48:f2:2c:13:
                    54:66:63:ec:19:12:59:65:a4:4a:b5:48:63:a5:5e:
                    28:23:be:69:57:83:0f:09:50:8d:60:6e:64:cf:6b:
                    ad:90:26:eb:db:0b:4d:e5:ab:17:c3:72:84:45:74:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:06:8E:79:7F:A1:7A:AA:EC:A8:92:65:D2:17:32:E2:B3:8D:BE:42
            X509v3 Authority Key Identifier:
                keyid:12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:66:7f:bf:a3:d0:60:88:58:b6:4b:e9:34:12:55:e5:95:
         43:fa:40:52:10:ed:34:5a:f4:90:0d:d4:34:93:26:77:06:ab:
         9b:7a:a7:18:5a:55:08:83:a1:98:fd:6a:df:2e:e7:d7:35:54:
         9a:a1:26:65:78:6a:5e:ee:55:e8:15:70:7b:3f:b9:a7:cc:1b:
         27:0c:25:81:ff:d8:a9:bf:0b:25:3e:41:51:4d:e7:d0:64:0b:
         ce:5a:d7:52:ac:86:bc:fc:66:81:7d:9c:ea:a4:15:80:ca:7d:
         b0:ab:83:6d:45:ab:3e:44:ec:d9:4f:bb:96:d4:1f:6d:4b:ee:
         3d:f2:5c:e7:e7:bd:f2:b3:04:dc:92:ec:5b:a4:b1:e5:d4:02:
         1c:ff:12:71:01:13:54:49:be:09:6a:a5:f4:ad:86:10:4b:8b:
         5a:94:ec:ef:74:30:90:f2:58:5e:dd:d1:82:86:ea:f0:7b:33:
         d7:af:b5:43:58:f1:1a:ad:ba:8e:d1:f5:43:6c:cc:95:8d:b4:
         4e:36:06:54:b9:b7:d0:78:28:83:e3:14:b3:f7:c2:af:e6:d8:
         04:65:44:36:e0:3c:6c:2c:3d:db:05:48:82:77:c2:8f:d8:c5:
         73:40:6a:4d:6c:4c:6b:78:60:61:61:0c:5f:b8:81:09:8e:90:
         3d:8d:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:44:03 2025 by rpki-client