Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.mft
File:                     C34966030329C8DBC6F2555D2F5E5A98C322F8A4.mft (raw, json)
Hash identifier:          4BEfyyYkKd1XbjevmrLR3eYx9DD+rvB1prG5egyVPPo=
Subject key identifier:   7E:3E:E4:CC:AE:1E:FF:D4:EF:37:E6:AB:43:2A:88:80:00:7F:37:4B
Authority key identifier: C3:49:66:03:03:29:C8:DB:C6:F2:55:5D:2F:5E:5A:98:C3:22:F8:A4
Certificate issuer:       /CN=C34966030329C8DBC6F2555D2F5E5A98C322F8A4
Certificate serial:       248B3FFD73D839FA8CD59A9AF7F0B6B6E7A3D176
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.mft
Manifest number:          1B
Signing time:             Mon 20 Jan 2025 17:19:30 +0000
Manifest this update:     Mon 20 Jan 2025 17:14:30 +0000
Manifest next update:     Tue 21 Jan 2025 19:18:30 +0000
Files and hashes:         1: 34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (hash: 1dDW8TdtufI3ZOIbqSVh8frrLYEXUwrFozb+1X836DA=)
                          2: 323830343a353864303a3a2f33322d3336203d3e20323638313531.roa (hash: cXKnYVPO2v5fVhlxc6MwujKZHDtPV8yCFSyyejd0Qtc=)
                          3: C34966030329C8DBC6F2555D2F5E5A98C322F8A4.crl (hash: o67iAowVZ5VeLRi1piMiysmEMUue2zJKMitp4cwMIrs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8b:3f:fd:73:d8:39:fa:8c:d5:9a:9a:f7:f0:b6:b6:e7:a3:d1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34966030329C8DBC6F2555D2F5E5A98C322F8A4
        Validity
            Not Before: Jan 20 17:14:30 2025 GMT
            Not After : Jan 21 19:18:30 2025 GMT
        Subject: CN=7E3EE4CCAE1EFFD4EF37E6AB432A8880007F374B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:bb:d9:3c:a0:76:10:e2:86:ea:50:04:05:
                    11:11:06:b7:a5:29:76:50:25:22:02:c4:00:47:8f:
                    88:a4:2f:fb:64:a5:ae:20:3d:b8:3f:e9:ba:0c:ae:
                    38:e6:dd:1e:2b:22:c2:31:6a:a1:e5:d5:39:28:5a:
                    a8:41:f1:3a:dc:b1:b7:24:42:6d:2e:75:dc:34:f6:
                    9b:ed:b8:c5:47:1f:fa:fc:1b:2e:0c:5d:68:65:27:
                    67:6f:b5:f3:b9:b4:a9:1c:da:be:0e:8e:07:65:0c:
                    eb:24:bf:69:47:42:94:be:25:f0:fd:5b:f5:a7:8c:
                    77:f7:f6:8a:ea:6b:7b:04:dc:c3:3e:8d:ef:e2:34:
                    f2:7f:ea:38:bf:98:bf:97:85:06:5f:93:1d:95:86:
                    ea:1c:3f:b1:7d:4a:21:2d:c0:26:87:e9:3f:4f:20:
                    71:f0:91:e9:0d:45:5d:40:55:c3:52:0a:75:51:c3:
                    c5:cf:84:a0:b3:38:07:c3:3a:28:bc:bb:ed:31:15:
                    0e:20:05:d2:e2:85:00:96:e9:ef:a6:30:96:a6:e6:
                    4f:16:e1:3c:fe:bb:91:b9:7a:e4:ea:1c:b6:3c:ff:
                    86:f3:c7:b3:c2:bf:d1:fd:00:1b:6d:d3:55:6f:71:
                    55:b4:db:e6:b6:81:02:a2:a6:56:17:c7:11:8d:06:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3E:E4:CC:AE:1E:FF:D4:EF:37:E6:AB:43:2A:88:80:00:7F:37:4B
            X509v3 Authority Key Identifier:
                keyid:C3:49:66:03:03:29:C8:DB:C6:F2:55:5D:2F:5E:5A:98:C3:22:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:13:57:27:e9:f6:13:01:b5:72:4b:8e:67:23:12:2a:b1:
         03:42:00:b4:2b:d4:22:74:98:53:d8:80:eb:76:22:b1:fc:d0:
         75:e3:bd:08:52:6c:8a:c8:c1:ab:c9:22:0a:38:2d:84:1b:2e:
         85:9f:f3:f5:b4:06:d8:14:9f:98:16:7a:20:f7:15:05:77:60:
         df:de:d9:59:f6:d8:eb:dc:a5:b7:a4:49:ad:eb:04:5e:42:41:
         d4:b7:3d:25:a7:f8:50:99:c7:f1:3b:0b:87:26:45:2e:f8:0b:
         4a:4a:2a:d7:a8:5b:a7:14:fe:e7:21:a7:4d:75:26:51:70:d7:
         b5:2a:8d:89:b8:f8:ed:0f:1b:16:9e:cc:5f:68:21:5d:8b:a0:
         e9:ae:77:58:7b:20:07:78:ee:56:33:4c:6a:52:11:51:4f:a3:
         d7:a3:11:3c:99:31:22:05:49:14:b4:05:12:61:3b:98:51:8f:
         60:03:4d:6e:55:a0:0e:40:dc:04:06:79:7f:be:d6:c5:3a:e8:
         b4:0a:8b:e2:b4:e4:19:21:4f:72:f6:2e:83:35:45:c8:39:21:
         4f:57:5a:87:8b:af:28:b5:42:9e:db:9b:41:be:8d:a1:fe:a5:
         03:6d:a5:92:70:89:7d:d8:73:ec:76:6e:18:84:53:6e:b4:c4:
         42:c1:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:59 2025 by rpki-client