Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/34B24CCED2838D5BD986ABCE3465CD7F290ED39E.mft
File:                     34B24CCED2838D5BD986ABCE3465CD7F290ED39E.mft (raw, json)
Hash identifier:          Cnf3gq0dflTjHbSPslZCPDgq/sxUUCjRxaNxSfU69UQ=
Subject key identifier:   5B:7E:50:9A:D6:A3:7A:09:73:B3:F6:43:B8:64:29:6A:32:92:37:2B
Authority key identifier: 34:B2:4C:CE:D2:83:8D:5B:D9:86:AB:CE:34:65:CD:7F:29:0E:D3:9E
Certificate issuer:       /CN=34B24CCED2838D5BD986ABCE3465CD7F290ED39E
Certificate serial:       732D9F0D158DE7289F62F4A8912EF85E22AAD7E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B24CCED2838D5BD986ABCE3465CD7F290ED39E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/34B24CCED2838D5BD986ABCE3465CD7F290ED39E.mft
Manifest number:          1B
Signing time:             Sun 19 Jan 2025 07:30:25 +0000
Manifest this update:     Sun 19 Jan 2025 07:25:25 +0000
Manifest next update:     Mon 20 Jan 2025 08:23:25 +0000
Files and hashes:         1: 3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa (hash: jrinuLI/albhgpjTC6JBmoGU6qFnBwmeaSJY+Q2iC7w=)
                          2: 3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa (hash: Bv46USk0dZILgqqjsmSusaYO8/GhwzEtql6t/mgd28I=)
                          3: 3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa (hash: CqAwsCruMxN7hmryecRGqzF6eOgwVXi4vPs4kbfkWXY=)
                          4: 323830343a316363383a3a2f33322d3332203d3e203631363735.roa (hash: Tt79buEUDHdgwpcLhwiOs6xTkH0m34JDkufuVE1DKvU=)
                          5: 3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa (hash: bONeUa0iTS0BY9ya/7rjWNnG3ohwa/X8Ccsno9nK80k=)
                          6: 34B24CCED2838D5BD986ABCE3465CD7F290ED39E.crl (hash: OeD+r37pro9cgeL2gSBij8aZBGwTcP9FUd2gPDpib3s=)
                          7: 3133312e3130382e3136302e302f32342d3234203d3e203631363735.roa (hash: Qo3zsMmFK1xkSgCpcDQuP/cF79bPqiH1TMXf4bj/gXI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2d:9f:0d:15:8d:e7:28:9f:62:f4:a8:91:2e:f8:5e:22:aa:d7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B24CCED2838D5BD986ABCE3465CD7F290ED39E
        Validity
            Not Before: Jan 19 07:25:25 2025 GMT
            Not After : Jan 20 08:23:25 2025 GMT
        Subject: CN=5B7E509AD6A37A0973B3F643B864296A3292372B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:10:20:8c:96:a4:06:2d:e1:e4:b7:c8:d3:
                    89:3e:e5:8e:21:f7:d1:f1:5e:69:30:8e:0a:35:ad:
                    ab:e3:80:54:63:3b:a2:ab:f9:46:92:31:e2:3b:e9:
                    2d:d6:09:cf:b7:ff:fd:1b:19:08:84:5a:73:8a:f9:
                    54:d5:7c:a7:85:e7:b3:02:7e:68:25:83:56:a2:14:
                    90:75:f0:9b:0d:27:69:cb:87:09:86:e2:ec:ec:42:
                    08:06:15:4a:40:34:5e:2d:b9:56:90:7c:31:dc:22:
                    27:13:52:50:69:76:24:fd:88:97:27:99:42:ff:f6:
                    f0:bb:22:8e:d0:a0:3e:d3:a2:23:1a:34:df:7d:3c:
                    7c:37:74:f7:6e:0f:58:39:ea:7e:84:8c:2f:f5:c3:
                    9d:7c:69:00:eb:7b:ff:bc:13:51:ea:14:26:81:af:
                    ad:2d:eb:8a:6a:55:a7:97:7a:ed:e9:87:99:95:32:
                    d7:e5:40:46:2f:dc:c1:0c:84:9d:18:27:3f:e4:9c:
                    89:77:de:ef:66:48:e0:1a:bd:c9:ad:ce:a7:a8:67:
                    67:d3:d8:58:cf:44:d8:76:cd:1c:95:24:77:15:13:
                    ec:b0:f8:df:eb:38:1f:43:df:e7:a0:68:2d:4c:10:
                    30:91:3f:22:a2:8b:e0:dd:3a:4f:41:63:e6:08:3c:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7E:50:9A:D6:A3:7A:09:73:B3:F6:43:B8:64:29:6A:32:92:37:2B
            X509v3 Authority Key Identifier:
                keyid:34:B2:4C:CE:D2:83:8D:5B:D9:86:AB:CE:34:65:CD:7F:29:0E:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/34B24CCED2838D5BD986ABCE3465CD7F290ED39E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B24CCED2838D5BD986ABCE3465CD7F290ED39E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/34B24CCED2838D5BD986ABCE3465CD7F290ED39E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:cd:1b:c9:59:f4:a0:69:5e:dc:da:60:f1:c3:08:18:ff:
         6b:98:0e:57:ea:02:49:76:b3:83:dc:cf:57:7b:f3:5f:95:2b:
         2e:92:3b:06:b8:05:89:49:53:c7:1a:b7:2c:94:75:a6:a5:5e:
         1d:ff:c3:9f:5b:8d:a4:72:f7:16:cd:2e:7f:e1:62:ab:dc:f5:
         47:21:4c:53:8c:24:f0:92:1b:b4:26:02:ea:d1:48:67:55:72:
         4a:da:f1:e4:7c:4d:ad:8e:74:12:77:f8:10:44:c4:50:11:79:
         8c:85:d2:35:07:51:fe:86:73:4f:21:6a:a9:2c:d1:58:3b:ee:
         33:66:34:6f:e8:e5:cd:fd:12:c8:31:dd:4d:40:82:25:b8:b4:
         4f:03:98:3b:e9:f8:d7:c3:cc:e9:ee:8a:40:a8:a4:02:49:77:
         68:ab:dc:46:f5:5e:72:f4:31:4e:a7:33:71:b9:1e:50:16:bb:
         f0:e6:c0:6a:09:e0:2b:dd:e7:34:05:df:7f:15:71:3a:1f:e7:
         3e:6c:3d:76:a6:4e:93:2b:75:06:4d:66:be:02:74:85:b6:7f:
         65:43:4d:44:1a:8c:10:28:25:89:5c:f5:25:43:c6:5f:69:6e:
         e0:64:e1:0f:d7:04:58:e6:54:ab:d6:1e:9c:c6:be:0d:f6:31:
         e2:40:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:26 2025 by rpki-client