Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft
File:                     7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft (raw, json)
Hash identifier:          vnT5LX6ifR/MKYAm1Lb4Jiy9/deWUD3B+9UnpLyyBPI=
Subject key identifier:   72:58:4E:8B:84:E8:B9:77:EF:93:D4:E1:B4:E2:8B:DD:4D:64:45:F8
Authority key identifier: 7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1
Certificate issuer:       /CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
Certificate serial:       3AFCA460ACE79D56D73AD76CBAAB97E5190ACFCE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft
Manifest number:          05
Signing time:             Wed 15 Jan 2025 14:02:56 +0000
Manifest this update:     Wed 15 Jan 2025 13:57:56 +0000
Manifest next update:     Thu 16 Jan 2025 17:57:56 +0000
Files and hashes:         1: 3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa (hash: 5jjX0kC4AMxWGnDU8abeDghQusW0lhlE09qhra+3fsI=)
                          2: 323830343a326164343a3a2f33322d313238203d3e20323635313231.roa (hash: 6FtEEZo2DRM9CMAsnC4TCBKhnDMFKQzZ+/qgaHavP9Q=)
                          3: 7B8E1235434FD5859B1AF0FE61E3D03E968369A1.crl (hash: gO1OJ4F+ItfqELfgEBDMpxLD7Xi5Xa0HVotGxStoYO4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:a4:60:ac:e7:9d:56:d7:3a:d7:6c:ba:ab:97:e5:19:0a:cf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
        Validity
            Not Before: Jan 15 13:57:56 2025 GMT
            Not After : Jan 16 17:57:56 2025 GMT
        Subject: CN=72584E8B84E8B977EF93D4E1B4E28BDD4D6445F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:ef:22:67:b6:30:d0:79:e5:55:aa:a3:41:
                    5b:f0:fd:43:e8:9b:44:7d:7d:7d:1f:01:99:20:fc:
                    80:90:c7:c3:85:7c:83:97:d7:a5:c8:cc:c2:eb:63:
                    03:2b:ef:a8:b2:48:3a:bf:ec:2e:0e:46:fc:c4:3b:
                    84:0f:a0:96:67:d9:0f:20:b8:ab:d2:98:1f:6e:8f:
                    f8:36:f4:9a:29:c1:87:30:a1:04:8a:93:fa:70:84:
                    5c:cc:6c:fe:63:2a:ed:2c:bd:4d:51:e6:46:2c:3e:
                    e2:8c:c6:4c:a2:9a:eb:6c:7f:a2:91:90:b3:ad:a0:
                    27:24:6e:2b:9f:3c:b9:4b:6f:16:e8:e6:be:ef:d3:
                    2e:e7:49:0e:64:df:db:b1:a4:06:d2:6f:d2:cd:ec:
                    a3:db:16:bf:cb:c5:32:0d:a2:aa:a6:e9:da:07:91:
                    b1:f8:ac:1d:a3:4d:19:86:4a:57:e9:36:b7:f8:3a:
                    8c:ad:72:82:48:1d:94:6e:88:da:36:a6:6c:fe:e4:
                    fc:0a:11:1c:77:3c:1f:18:ca:fe:d7:b3:9a:e7:1c:
                    33:47:7c:d1:8a:7e:9c:34:03:fa:f5:a7:ce:c5:11:
                    32:77:ea:51:d7:dd:f0:40:f3:97:b6:d5:0e:62:73:
                    87:85:3f:36:51:1d:99:d0:d8:2c:a9:8c:7b:cf:94:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:58:4E:8B:84:E8:B9:77:EF:93:D4:E1:B4:E2:8B:DD:4D:64:45:F8
            X509v3 Authority Key Identifier:
                keyid:7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1e:2f:0e:41:88:fb:c3:2f:e7:96:d6:7a:ce:5e:55:57:cd:
         ab:07:d4:37:74:b8:0b:fd:96:72:4d:9b:64:89:0d:ae:96:67:
         ce:91:5a:9d:a7:c5:6a:6e:03:35:dc:1a:59:7c:38:28:8b:14:
         3c:4c:92:d3:73:43:58:0d:cb:1a:5c:45:72:12:c6:7a:b3:2a:
         ae:54:36:23:ff:67:4c:a0:37:fa:1a:9f:f0:a0:83:dc:d9:ce:
         65:4b:4f:9b:f7:c8:cc:c9:85:af:d6:08:37:6d:90:76:74:8d:
         f4:a7:ff:75:4c:fb:42:99:3d:da:a8:6d:88:eb:cf:b1:9d:b7:
         27:e2:46:fd:54:81:89:d5:61:76:e8:63:81:c6:d7:4e:45:ef:
         72:8c:f5:6b:05:ae:bf:5d:ed:4d:6a:45:2b:f2:70:84:44:ab:
         49:4d:76:81:e5:a4:3c:9a:75:2a:ad:d3:75:ad:8a:61:5f:ef:
         bd:62:b8:4f:a7:36:6f:b0:4f:f7:85:00:96:68:5c:9d:42:6f:
         52:66:aa:5f:8d:ff:db:f8:48:aa:01:bc:72:d9:c6:16:d3:4e:
         4a:73:8b:c8:39:f5:3c:57:07:a6:fb:92:4e:dc:12:f0:b2:97:
         00:6d:0e:fa:2b:36:b9:5d:8b:ce:6c:99:2e:2f:ab:dc:59:e7:
         e7:5c:a6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:46:12 2025 by rpki-client