Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.mft
File:                     2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.mft (raw, json)
Hash identifier:          HM9dwjmRhKF/lr9iSZETTKh5kUwulQfP+kVDY+S9neA=
Subject key identifier:   97:C7:D2:86:D9:0E:84:0A:AB:C4:95:5B:8C:CD:07:1B:3D:7C:B9:60
Authority key identifier: 2B:EB:AD:8A:51:D3:C8:47:E4:A4:E1:E0:99:7C:B7:84:87:F0:4F:D8
Certificate issuer:       /CN=2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8
Certificate serial:       65E53F31B05BFCCA7111E77D1B107D2FA608B2D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.mft
Manifest number:          8C
Signing time:             Mon 04 Dec 2023 09:00:10 +0000
Manifest this update:     Mon 04 Dec 2023 08:55:10 +0000
Manifest next update:     Tue 05 Dec 2023 09:03:10 +0000
Files and hashes:         1: 2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.crl (hash: zyf5wK6byUGOtfSfVqtQiE0BWV5u2hIhd+TVpEckPwI=)
                          2: 323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (hash: 0u8CrMwQlysU18iTwTwRKWAwUgR4m9S7Wm3i3M92FDQ=)
                          3: 3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa (hash: KevIFi1ssfxNobszrpNoywQArU4P6ZJwFIUH9kN2PXg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e5:3f:31:b0:5b:fc:ca:71:11:e7:7d:1b:10:7d:2f:a6:08:b2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8
        Validity
            Not Before: Dec  4 08:55:10 2023 GMT
            Not After : Dec  5 09:03:10 2023 GMT
        Subject: CN=97C7D286D90E840AABC4955B8CCD071B3D7CB960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:2b:1a:ec:a1:3d:86:99:f9:72:db:d9:89:
                    d5:85:89:04:58:ff:5b:17:81:ff:d8:eb:0a:c6:ce:
                    a5:69:80:8a:aa:82:32:2f:c6:f7:7c:a8:17:6a:92:
                    d8:0d:33:cd:f7:22:fa:07:6f:88:ca:7b:5b:cd:ba:
                    ab:d3:e3:0d:0b:f6:98:c0:36:3c:72:9c:5a:99:a1:
                    e2:b7:a1:b8:ac:0e:d0:18:c0:71:f8:a1:5d:df:45:
                    b3:1e:8f:04:00:b1:fa:f1:02:74:a0:1e:64:11:48:
                    d4:2a:da:eb:98:82:09:b4:ca:0a:14:66:25:68:c0:
                    50:0d:8e:3a:a8:bc:68:46:8c:30:23:92:83:ee:9a:
                    f5:a9:7d:32:32:2a:28:85:11:ac:d0:5b:99:6d:c7:
                    4c:86:64:c3:10:55:e9:a1:75:b4:94:7d:bb:cf:90:
                    f3:8a:29:9b:c8:d5:fe:80:eb:dc:35:c9:72:c1:d9:
                    ab:a6:db:3c:a4:af:2e:01:11:8f:5d:08:19:b3:73:
                    6a:1f:36:77:4e:2c:a9:c7:a9:0c:74:35:36:bf:31:
                    84:24:41:8a:0f:d5:6a:6e:f3:96:75:01:46:3a:ad:
                    92:f6:10:f8:06:ae:60:d5:35:e7:7c:c8:c1:db:ec:
                    96:b5:4b:9f:e1:2b:99:1e:ed:50:17:41:8c:80:fd:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:D2:86:D9:0E:84:0A:AB:C4:95:5B:8C:CD:07:1B:3D:7C:B9:60
            X509v3 Authority Key Identifier:
                keyid:2B:EB:AD:8A:51:D3:C8:47:E4:A4:E1:E0:99:7C:B7:84:87:F0:4F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:b9:32:6f:4c:06:72:0b:4c:ac:00:cb:8f:8b:b2:9c:16:
         13:16:59:1a:56:e6:34:04:19:c1:7d:c0:98:d4:7f:80:03:72:
         fc:4b:7d:5c:55:f6:04:2a:b4:96:8f:33:f5:62:d2:83:d3:99:
         24:c3:1c:6d:94:51:0d:a5:f4:cf:65:c3:48:9a:cf:c8:7f:7e:
         54:04:2f:c9:6d:e4:84:bb:15:f3:2c:91:95:aa:3c:bc:15:3c:
         ee:70:9c:b9:26:0c:79:5d:fd:7f:bf:57:be:58:c4:fe:7c:ee:
         37:57:39:7d:b4:43:9d:31:f8:91:47:2d:73:7f:76:4e:c3:cf:
         b6:a9:fe:1a:54:ed:01:97:32:03:da:34:cf:b1:b1:94:af:ea:
         67:32:f0:7a:30:82:6d:ba:c5:9e:da:3b:35:74:3a:3e:70:76:
         78:6e:55:8f:60:d1:17:ad:91:72:96:72:42:6d:be:02:b4:7f:
         d3:b1:ca:8a:65:38:03:d1:ca:5e:24:5e:cc:24:f3:84:ea:ae:
         4d:79:b1:4d:47:17:5d:57:7f:82:51:47:58:0e:01:52:bc:5f:
         03:78:c6:59:95:96:ce:24:80:99:b7:cc:23:9f:30:3f:35:0b:
         9b:d1:cb:72:4e:51:08:65:cb:f3:da:60:cc:76:3c:d7:9e:ce:
         5b:dc:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:21:59 2025 by rpki-client