Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.mft
File:                     CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.mft (raw, json)
Hash identifier:          9NmhvBsc4YGHFIB5JYeEZvK2dfq7PAw4LUqTW2CfFkc=
Subject key identifier:   87:B3:1E:C3:F2:7C:73:30:B3:1C:A6:C0:D6:9A:C9:07:E1:BA:9C:6C
Authority key identifier: CE:32:14:0C:85:BB:79:7C:14:AA:C2:F0:A2:F5:DB:00:63:7C:9C:36
Certificate issuer:       /CN=CE32140C85BB797C14AAC2F0A2F5DB00637C9C36
Certificate serial:       761395E093C4BD54230D5B16E9FE4931752D86E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.mft
Manifest number:          0F
Signing time:             Sun 12 Jan 2025 05:20:44 +0000
Manifest this update:     Sun 12 Jan 2025 05:15:44 +0000
Manifest next update:     Mon 13 Jan 2025 07:25:44 +0000
Files and hashes:         1: 3136382e3232372e3232342e302f32322d3332203d3e20323634383937.roa (hash: QKtpq4aR+AIpnV7WN2+VpmKRexm0HRVaXEhoAXDJmbI=)
                          2: CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.crl (hash: p9aNPx/xTwtx5LHrAywYN+27s66PGY4Bvti84nuMfCs=)
                          3: 323830343a326638383a3a2f33322d313238203d3e20323634383937.roa (hash: bjIGgoSU/qSMRS503tIZgCZ/WyDXtyNFtj384ccmZzY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:13:95:e0:93:c4:bd:54:23:0d:5b:16:e9:fe:49:31:75:2d:86:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE32140C85BB797C14AAC2F0A2F5DB00637C9C36
        Validity
            Not Before: Jan 12 05:15:44 2025 GMT
            Not After : Jan 13 07:25:44 2025 GMT
        Subject: CN=87B31EC3F27C7330B31CA6C0D69AC907E1BA9C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:53:62:2d:3b:02:0c:ff:87:58:8e:f7:54:
                    c2:7f:02:2a:f5:98:8c:ad:38:03:42:e6:c2:62:7c:
                    75:0c:e0:e4:29:95:2a:81:2e:ac:38:09:3e:9a:e8:
                    31:35:e5:95:a9:17:15:c2:94:2f:f0:2f:05:b6:ff:
                    61:98:5c:73:02:78:da:c1:fe:78:3f:3f:6f:66:3a:
                    1c:4a:72:6e:df:71:14:05:bb:43:60:c5:d7:18:fd:
                    ac:08:43:85:ea:13:3a:fe:2e:6c:7f:a3:fb:7d:dd:
                    e4:7d:3e:be:f0:aa:f9:ad:13:88:f2:58:65:df:bd:
                    f5:df:26:17:87:10:73:36:7c:59:ea:14:f2:40:b3:
                    36:72:84:a6:98:10:34:9b:2d:6c:e0:8d:f4:50:af:
                    7c:f6:e8:cf:37:ac:96:30:88:07:ae:9c:50:c6:44:
                    86:7a:72:04:af:fb:d3:09:de:fa:9c:64:e0:23:58:
                    5a:cd:15:96:6d:d7:cc:dc:b4:bf:f1:e7:84:7d:8c:
                    46:26:4d:9f:4b:ff:dc:b3:b5:2b:c4:0e:6a:4d:16:
                    9a:0c:8e:c5:ef:1e:6b:2b:e1:aa:e5:bb:5c:ee:37:
                    ad:c2:fe:66:52:72:03:3f:56:e3:eb:4b:a4:fa:b5:
                    42:df:48:b2:8e:27:cc:e8:a5:61:dd:d9:20:95:6d:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:1E:C3:F2:7C:73:30:B3:1C:A6:C0:D6:9A:C9:07:E1:BA:9C:6C
            X509v3 Authority Key Identifier:
                keyid:CE:32:14:0C:85:BB:79:7C:14:AA:C2:F0:A2:F5:DB:00:63:7C:9C:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RohyCbxTUMTiUW8J89DvgCFqxPHv4ZX8Y6bHY1NvWpg/0/CE32140C85BB797C14AAC2F0A2F5DB00637C9C36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:50:5c:21:ff:b2:8d:e6:18:28:8a:f6:90:a2:6b:93:95:
         f3:07:85:a8:50:4d:61:7b:a7:18:5d:3d:c4:74:3b:4d:e1:1e:
         62:05:5e:78:b5:cd:c1:6f:e4:c5:f0:35:fa:c7:17:02:d0:ef:
         11:4b:97:14:e2:d5:21:ae:bf:23:3c:3b:54:d8:87:8e:24:05:
         67:05:71:6a:23:18:88:24:3b:df:a8:2e:49:d9:46:3a:2b:1c:
         ea:de:01:ab:a4:dc:99:30:70:dd:a4:21:e1:45:87:c4:7c:9b:
         8a:cc:f9:51:06:b5:da:3e:33:ee:02:b1:81:7d:af:fb:43:02:
         f7:75:9f:a0:fa:3a:ff:bc:d5:9b:7e:1d:27:56:b5:06:1e:6e:
         07:cb:d1:71:a3:25:ec:87:67:50:30:d0:39:d2:35:9a:d7:97:
         ff:52:45:ae:28:d4:42:13:02:30:87:f1:89:11:cd:22:2e:d5:
         d2:f1:8c:26:bd:24:e2:9a:f7:be:1f:12:4c:74:4b:90:14:ee:
         49:3b:81:1d:c6:fe:b9:c6:2f:bd:e1:4e:91:bd:0a:ad:58:dd:
         7d:51:02:77:d8:6f:dd:87:bf:c2:af:22:a2:89:6d:16:5a:7a:
         e1:7e:9d:7f:6b:34:13:ee:dc:8b:fe:92:c5:7f:26:f3:90:ba:
         68:6c:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:47:02 2025 by rpki-client