Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft
File:                     1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft (raw, json)
Hash identifier:          V1nKeitwfP/er4CMO/kn0WVFwxhwT/PDKRrpCFWnZVk=
Subject key identifier:   9C:E3:59:EA:BC:55:77:59:22:99:82:B1:6D:B6:EB:B7:EA:BE:EE:40
Authority key identifier: 1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA
Certificate issuer:       /CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
Certificate serial:       3A9E11D7AC051655A574BDBBF4BEC70A246D1BC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft
Manifest number:          AC
Signing time:             Thu 08 Feb 2024 00:14:24 +0000
Manifest this update:     Thu 08 Feb 2024 00:09:24 +0000
Manifest next update:     Fri 09 Feb 2024 01:34:24 +0000
Files and hashes:         1: 3139322e3134342e36382e302f32322d3234203d3e20323636313536.roa (hash: Btc0jecmr7dXDf8jLZO6bjfPScPOatonZpwagpa+BM8=)
                          2: 1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl (hash: YDm/RufsOixm/Hs3t5NTt74QYWA6YKOJPac3O9DFScY=)
                          3: 323830343a336238633a3a2f33322d3634203d3e20323636313536.roa (hash: 1PX81RUtbh6B7Px9PoEdqTY29xJkVcIzMdBuolxrRfU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9e:11:d7:ac:05:16:55:a5:74:bd:bb:f4:be:c7:0a:24:6d:1b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
        Validity
            Not Before: Feb  8 00:09:24 2024 GMT
            Not After : Feb  9 01:34:24 2024 GMT
        Subject: CN=9CE359EABC557759229982B16DB6EBB7EABEEE40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:51:f6:72:41:75:ab:e8:3d:af:c4:c2:09:
                    bc:88:2e:3c:18:51:fa:a7:ef:48:8f:6d:72:f9:10:
                    48:25:a5:ba:06:82:fd:90:23:28:b0:02:77:bf:80:
                    35:c5:5d:ec:a7:7a:c1:a7:a7:e7:9b:72:6c:5d:a0:
                    3a:2c:77:1e:9a:06:d9:f2:f9:a6:0b:87:2f:33:67:
                    b2:fd:fb:bb:3e:b8:21:8c:70:e3:6d:a3:61:5c:d6:
                    b4:9b:7f:25:da:31:06:0a:f0:71:49:c3:11:58:ab:
                    8c:1d:cd:e3:85:e3:16:4e:57:46:a6:29:2f:f4:be:
                    45:ce:96:bd:e6:16:b8:8a:73:f3:16:36:3c:10:a1:
                    b1:c3:b7:75:57:8f:fb:f6:69:44:0d:e7:02:a0:60:
                    0d:91:62:87:ed:8a:97:90:a4:7b:cc:d1:cf:5a:10:
                    e8:dd:d8:fb:65:fa:0c:10:38:d9:52:4f:58:24:6f:
                    66:84:0a:66:35:8b:f6:5a:58:4e:f9:29:73:4b:fe:
                    e6:65:e1:f7:c9:02:a6:5e:ec:fd:cd:1e:10:d7:cd:
                    dd:6f:c2:11:41:26:ce:90:87:fe:83:93:f3:23:a5:
                    fe:be:6a:99:31:cb:d7:9d:7a:b3:a6:34:f2:ea:aa:
                    d8:4a:ea:12:1f:f7:c6:0e:2a:5d:7b:55:aa:8e:56:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:59:EA:BC:55:77:59:22:99:82:B1:6D:B6:EB:B7:EA:BE:EE:40
            X509v3 Authority Key Identifier:
                keyid:1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:25:ee:0f:12:1b:44:53:46:76:fe:d5:6b:95:2e:ea:6b:d9:
         16:20:1c:2d:b7:b3:76:b3:43:db:c4:1f:60:05:b3:07:aa:fb:
         ff:76:fc:c5:a9:bf:55:30:33:a2:33:29:be:74:c6:15:51:41:
         a2:ec:b3:89:31:aa:14:9c:66:c5:b9:ca:e2:25:7f:a3:29:73:
         d5:1a:0c:75:6e:9f:b5:c4:5d:1c:c1:e8:d0:ca:97:71:48:b0:
         e5:0c:bf:db:28:80:12:ec:ea:1c:7b:7c:a8:f0:65:d6:6a:ee:
         47:ff:48:4f:b1:aa:c3:4f:c0:67:36:5b:5d:2f:47:6e:56:f5:
         fc:05:5e:90:f6:8e:f0:bf:c7:93:44:c7:c1:57:8f:33:d5:0a:
         c1:60:19:da:13:d2:65:d8:43:5c:6f:85:d9:d5:37:04:db:e9:
         d1:94:3a:70:32:1f:eb:65:e5:a0:58:97:43:53:d8:5c:3c:ba:
         41:30:98:88:2c:aa:0f:fc:5c:17:c1:d4:4f:25:fe:91:15:83:
         79:14:c8:cd:db:7a:d5:5a:57:89:61:cf:76:56:97:7d:dc:89:
         df:3e:eb:a4:b8:6e:42:a3:fe:d1:70:8f:9f:82:33:5a:b6:12:
         dd:90:49:0f:3b:3d:20:74:88:7e:27:26:5e:09:16:03:28:0a:
         61:27:6f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:49 2025 by rpki-client