Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.mft
File:                     81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.mft (raw, json)
Hash identifier:          hYNMIeQwMuAqx7kspi2teVw7oQ7vVCHFfLHOnrDoo+k=
Subject key identifier:   C3:EA:D7:83:92:1B:02:3D:24:88:08:6E:93:48:24:2C:E1:E4:20:ED
Authority key identifier: 81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC
Certificate issuer:       /CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
Certificate serial:       4820C9E5BE293501AD3494FF95FD3FA4C06D130D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.mft
Manifest number:          0317
Signing time:             Fri 22 Mar 2024 13:52:01 +0000
Manifest this update:     Fri 22 Mar 2024 13:47:01 +0000
Manifest next update:     Sat 23 Mar 2024 16:30:01 +0000
Files and hashes:         1: 34352e3137372e36302e302f32322d3332203d3e20323639303331.roa (hash: Sz4ESbJoh1MPsKIq3Z7RALFP9IjpS+UNzEG9Q2x1k3Y=)
                          2: 81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.crl (hash: lKvEfHZFXN/Xc0mxT+4e12FCCodp8HEHjgUtUm0eLfc=)
                          3: 323830343a356536383a3a2f33322d313238203d3e20323639303331.roa (hash: e33OhzNI6+U0v1gZSEkEKiaGitsck1HkHTycel29W34=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:20:c9:e5:be:29:35:01:ad:34:94:ff:95:fd:3f:a4:c0:6d:13:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
        Validity
            Not Before: Mar 22 13:47:01 2024 GMT
            Not After : Mar 23 16:30:01 2024 GMT
        Subject: CN=C3EAD783921B023D2488086E9348242CE1E420ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:4f:bf:38:ec:66:29:a7:e1:cc:c4:d1:01:
                    99:af:12:a4:ad:30:fb:71:33:f8:55:31:2f:84:37:
                    b2:12:06:35:b3:be:9d:6f:2b:1a:03:04:a0:a9:a7:
                    44:48:3a:ad:a9:4b:63:32:cf:77:f9:15:d5:3e:96:
                    82:1d:ed:a2:bb:19:3f:9d:93:ad:5e:cd:bd:02:7e:
                    fd:cd:07:b2:72:b6:94:b8:76:e5:1d:f5:d1:cb:99:
                    f8:6c:87:f8:3d:e5:72:88:a3:40:f5:23:c0:91:0a:
                    2b:6a:c2:fd:d5:4a:40:9a:61:1f:e0:ee:53:f7:54:
                    f0:cd:23:6f:fc:6a:11:1b:81:15:e1:86:5b:b5:18:
                    ff:c4:0a:3a:ab:ad:14:16:1b:88:bf:d9:2b:6f:18:
                    34:50:8c:c8:03:03:da:99:39:fa:46:27:02:f1:6d:
                    08:3d:b9:8b:86:9b:b8:57:3a:4d:11:6e:29:04:1f:
                    01:4a:86:ed:03:42:ac:76:92:52:3e:e1:a5:d1:6f:
                    65:18:ab:e4:c7:f5:a3:37:d7:f0:92:fd:dc:c1:87:
                    d7:a0:88:67:10:23:1e:ab:70:54:00:a3:0a:46:88:
                    3f:b8:5f:f5:41:0e:da:5a:28:0a:36:2b:6f:93:84:
                    03:5e:73:9a:8c:0d:b3:f0:7d:7b:54:e1:2f:69:27:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:D7:83:92:1B:02:3D:24:88:08:6E:93:48:24:2C:E1:E4:20:ED
            X509v3 Authority Key Identifier:
                keyid:81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:2c:77:3f:28:c2:67:7a:01:c1:a0:4b:92:9b:60:d2:ce:fe:
         10:7c:2b:b5:e2:59:7d:f8:b3:38:e0:45:e5:c3:ff:58:2d:40:
         e6:07:be:32:73:8c:68:9f:7e:07:36:01:6e:69:9a:b9:cd:2e:
         e3:62:83:1d:ca:8d:25:61:be:07:c2:53:ad:0a:35:29:11:6c:
         eb:28:48:0c:56:36:af:1e:cb:55:71:61:d8:9a:60:2c:11:0d:
         d3:c7:0a:98:e3:3f:d3:61:3e:0b:95:4a:a2:62:c2:b0:bd:a4:
         73:c8:eb:54:b3:d4:db:ae:fc:af:20:a9:60:82:6e:c5:25:f9:
         82:6e:96:9f:35:1f:ce:47:f1:9b:c9:ac:10:05:b1:4f:ef:55:
         7b:b9:b2:17:96:48:a7:1e:12:e6:fd:b2:46:b7:c5:a4:53:7f:
         aa:38:a7:cb:aa:6f:73:22:2d:02:e3:52:29:dc:b7:64:3c:0d:
         95:4e:a9:21:be:cc:45:55:b7:7f:51:dc:e0:5d:3e:8d:18:66:
         5e:d8:87:ab:22:c5:a1:56:e7:28:93:18:dc:50:b4:7c:d0:e1:
         15:cc:e3:bf:6b:6d:77:4f:fb:00:01:62:0f:19:b4:3d:fc:b7:
         92:db:18:df:5a:34:79:a0:d5:93:38:f6:05:39:75:c7:33:d8:
         68:2c:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:51 2025 by rpki-client