Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.mft
File:                     DE888425B89835354B62227D843F72DA4DC0E2E4.mft (raw, json)
Hash identifier:          y3NLEIfXNu1GCCaHrsM7hqrOOk6spCEC3ZFixNfVOKk=
Subject key identifier:   3B:BF:BC:D5:3F:EB:9A:B7:D2:3E:1F:AE:F6:B7:35:0F:ED:28:18:FC
Authority key identifier: DE:88:84:25:B8:98:35:35:4B:62:22:7D:84:3F:72:DA:4D:C0:E2:E4
Certificate issuer:       /CN=DE888425B89835354B62227D843F72DA4DC0E2E4
Certificate serial:       1DFC59BABEAED77D727CE69008F2F5A7144E316A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE888425B89835354B62227D843F72DA4DC0E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.mft
Manifest number:          0166
Signing time:             Sat 28 Dec 2024 15:11:58 +0000
Manifest this update:     Sat 28 Dec 2024 15:06:58 +0000
Manifest next update:     Sun 29 Dec 2024 16:15:58 +0000
Files and hashes:         1: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (hash: S7kJDoCcNaThVOAGrv888uaSpqFlDfOV2iGQ9Rm40hw=)
                          2: 3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (hash: 4nNfhDo+XW3vPbI3LeL3ui93IjlWe2nxkdaixkds2qE=)
                          3: DE888425B89835354B62227D843F72DA4DC0E2E4.crl (hash: jSH02JC1BVa9/XJCURUi0gY/6xP3GiMCURoBI7VM3+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:59:ba:be:ae:d7:7d:72:7c:e6:90:08:f2:f5:a7:14:4e:31:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE888425B89835354B62227D843F72DA4DC0E2E4
        Validity
            Not Before: Dec 28 15:06:58 2024 GMT
            Not After : Dec 29 16:15:58 2024 GMT
        Subject: CN=3BBFBCD53FEB9AB7D23E1FAEF6B7350FED2818FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:bc:ac:8f:2d:74:27:55:2d:12:2f:36:72:
                    76:8f:8b:72:34:ff:6c:18:11:61:eb:a6:34:08:68:
                    0d:d9:53:43:a9:87:b2:f5:88:2c:9d:df:00:58:9d:
                    f2:b9:3a:2a:47:a2:ab:86:38:6f:51:f2:ba:e0:25:
                    bb:6c:97:6b:00:e1:4e:23:3f:4f:ca:a0:33:86:69:
                    eb:e0:dc:15:4f:79:e1:fc:da:87:f6:f6:ec:f9:31:
                    7b:65:81:5d:66:35:38:b7:30:d1:6e:36:07:7a:80:
                    e3:c2:a8:8b:a8:2e:1a:61:90:a9:f4:25:82:0b:38:
                    9f:1d:c0:ab:a9:e4:ac:10:cc:1b:d6:04:39:6b:72:
                    72:cd:0a:c1:15:f4:21:b0:22:2b:ad:75:60:d3:45:
                    89:64:c3:26:1e:2d:73:3a:6d:c6:dd:5d:d3:1e:6a:
                    85:0a:bd:d8:00:cf:de:8f:a1:fc:17:61:c4:ea:5e:
                    a7:3c:3e:f6:6f:8a:93:4e:c8:40:a3:07:2c:ab:ff:
                    99:5e:54:e8:a9:2e:f7:20:1f:9f:c0:99:29:1c:cd:
                    11:8b:7f:b1:c2:88:82:a8:7d:cc:c0:13:9f:fd:f4:
                    ed:db:ff:b5:1b:55:70:d7:e8:38:e3:74:45:be:d8:
                    fe:6a:04:ad:f1:7a:34:cf:74:9c:93:4f:c6:c3:fd:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BF:BC:D5:3F:EB:9A:B7:D2:3E:1F:AE:F6:B7:35:0F:ED:28:18:FC
            X509v3 Authority Key Identifier:
                keyid:DE:88:84:25:B8:98:35:35:4B:62:22:7D:84:3F:72:DA:4D:C0:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE888425B89835354B62227D843F72DA4DC0E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/1/DE888425B89835354B62227D843F72DA4DC0E2E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:ac:a5:49:ab:71:02:04:f2:70:d2:70:c0:5c:08:1d:33:
         91:4b:2e:98:10:4a:4f:81:d5:31:de:df:f9:6d:2f:7f:2b:00:
         0d:91:db:ce:ef:5d:b5:eb:07:f8:04:a5:1c:ef:e2:03:08:90:
         35:8e:1b:53:db:77:fc:36:96:b0:45:ce:92:75:3f:15:67:c6:
         a9:db:07:01:93:17:25:ac:63:cf:9a:a7:5b:16:84:f7:89:e0:
         c5:fb:0d:f5:0d:7d:70:4f:72:74:47:9a:ba:bb:c1:32:6d:6b:
         d1:71:5c:ee:8e:81:79:e2:f6:c5:52:c8:89:1e:d6:de:51:a5:
         7e:07:ce:d5:fa:45:70:86:32:9b:a9:17:97:fe:0a:c3:9d:16:
         b6:df:6f:c5:22:53:06:e3:02:94:74:b9:ff:5b:0f:16:0d:fc:
         3d:a3:e5:14:27:a9:56:9c:66:76:9a:00:4a:7b:6f:9a:fc:b5:
         71:5f:7b:8c:54:00:f5:74:02:37:a0:7c:57:10:5e:5b:fa:cd:
         54:a6:d9:9d:63:fd:d3:c6:5d:a9:d6:3c:7a:28:65:11:c1:74:
         2b:b0:d3:d0:42:62:17:b3:6e:2e:d6:de:a5:cb:b2:95:11:23:
         a3:27:00:89:53:98:6e:06:5f:15:c5:b6:48:fa:5d:d4:55:4e:
         2f:df:76:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:30 2025 by rpki-client