Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft
File:                     157F6108533B10B33C69A854D184113D2CC781E1.mft (raw, json)
Hash identifier:          Zmb8N+HhexxO0eeNQ9WeZ/I3wEU6mKcQU4rZnFyy8kU=
Subject key identifier:   8F:8F:42:01:E3:20:5D:55:04:06:4F:CE:77:93:3F:C1:FF:43:B7:4C
Authority key identifier: 15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1
Certificate issuer:       /CN=157F6108533B10B33C69A854D184113D2CC781E1
Certificate serial:       3FC7B34A6813110429B5346FE1771C2B08EDE2C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft
Manifest number:          46
Signing time:             Mon 17 Feb 2025 07:43:47 +0000
Manifest this update:     Mon 17 Feb 2025 07:38:47 +0000
Manifest next update:     Tue 18 Feb 2025 09:06:47 +0000
Files and hashes:         1: 157F6108533B10B33C69A854D184113D2CC781E1.crl (hash: Ff/GzC87GmqlY3kmFEiL3v51AWFjbfWW2CVtakx4ejA=)
                          2: 323830343a313564343a343030303a3a2f33342d3334203d3e20323633343133.roa (hash: k8t9YHu5MSFLNMzZSTlBcswXAyzjRYSSWCxu4rkBF9Y=)
                          3: 323830343a313564343a3a2f33322d3332203d3e20323633343133.roa (hash: vBSNV3n807UTlt3z4BSTJKuTzDH3XzY14LVVXZckQWM=)
                          4: 3137392e39372e38382e302f32312d3234203d3e20323633343133.roa (hash: Y/wiATdU3nHyIiu4s0K+VFRJ+dN0VV132KuRIg4AoeA=)
                          5: 323830343a313564343a633030303a3a2f33342d3334203d3e20323633343133.roa (hash: Rad2Prkofo8mizBslH9mBoBQ79sBzLHxncdQDiKpdyc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c7:b3:4a:68:13:11:04:29:b5:34:6f:e1:77:1c:2b:08:ed:e2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157F6108533B10B33C69A854D184113D2CC781E1
        Validity
            Not Before: Feb 17 07:38:47 2025 GMT
            Not After : Feb 18 09:06:47 2025 GMT
        Subject: CN=8F8F4201E3205D5504064FCE77933FC1FF43B74C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c5:35:4b:f3:85:96:97:72:ac:43:7b:ab:54:
                    bb:57:f1:61:e7:77:c8:f4:3e:54:81:03:93:b0:02:
                    a1:bc:a8:20:bc:0d:94:af:aa:e1:96:c3:df:6c:54:
                    dc:72:be:aa:a0:a0:f3:33:3d:31:0c:89:c0:5e:f5:
                    e7:02:20:4e:e8:11:42:5f:ee:f9:48:02:c1:72:9b:
                    2b:8a:19:6b:94:98:ef:a2:34:2a:f9:e0:02:29:f4:
                    ff:1b:bf:5d:49:24:e9:17:46:69:11:65:91:01:68:
                    a3:a4:d8:e1:30:3e:20:f8:cd:86:de:4a:d6:22:c5:
                    44:97:5f:e5:39:0d:c4:cf:d2:97:af:1d:fb:5c:62:
                    7a:14:37:cc:26:75:69:94:07:46:0e:78:fd:7f:38:
                    55:24:d8:c1:43:7e:4e:67:71:db:23:4f:11:a9:5a:
                    bf:d9:39:a6:a7:96:69:21:8b:0a:c8:16:69:c5:5e:
                    fd:be:fe:56:84:7a:ed:7a:a6:df:4c:63:24:61:89:
                    94:ab:21:fa:e2:13:a9:5c:c7:f1:7b:bd:8c:a4:2c:
                    c4:d5:59:8f:fa:69:1e:3c:5a:60:80:0c:d7:bc:bf:
                    6b:ed:f5:e8:ce:13:d4:e8:f8:0c:3c:d8:7b:c0:0a:
                    1e:c4:49:cd:98:df:43:8d:28:2c:b7:19:bf:0f:91:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:42:01:E3:20:5D:55:04:06:4F:CE:77:93:3F:C1:FF:43:B7:4C
            X509v3 Authority Key Identifier:
                keyid:15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:ea:2d:53:4f:79:d3:c1:ee:8b:8f:1a:20:4f:f0:fa:ec:
         88:eb:35:b0:ba:b3:a4:21:8b:95:c8:57:e9:ec:f3:90:6f:8a:
         c1:ba:f3:a4:ad:cf:88:f1:d5:52:eb:2e:39:66:f0:e0:ce:62:
         b1:8e:db:f3:9d:a5:c8:bd:db:ef:23:7b:30:81:27:80:f6:2b:
         ec:11:13:65:53:84:58:a2:ef:b4:6b:64:3b:95:1c:ff:a6:14:
         6a:a8:c6:b0:90:68:81:fd:f4:85:62:86:d2:1d:66:41:38:01:
         e3:5e:c9:f8:95:20:25:a9:f9:72:f7:c1:9c:9d:2d:be:17:26:
         47:a6:a0:7a:a3:ed:a0:e2:31:21:f1:b8:9a:88:93:a0:9d:1d:
         50:d9:28:20:c7:48:7c:95:9b:f4:4d:f2:6c:88:9e:87:95:cd:
         86:dc:ca:54:d3:74:2c:01:7f:0c:4a:12:ba:85:ff:53:83:fd:
         25:22:76:5e:8c:fb:ef:39:19:82:aa:9a:89:4d:b0:3b:b8:38:
         14:72:d1:86:62:24:50:a7:02:4b:51:96:18:bc:f4:c4:c6:f9:
         01:5b:d8:ec:de:cc:d7:02:95:02:9f:38:c1:5d:0f:c5:d5:28:
         80:2a:c5:1a:5d:48:e9:c6:48:4b:69:1b:16:97:25:07:05:bc:
         bd:aa:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:25 2025 by rpki-client