Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
File:                     21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft (raw, json)
Hash identifier:          6w6lXkA1ArkP6AFvw2ryc0IoiQpO6OXbTEr3tiemPmk=
Subject key identifier:   9F:F3:C7:F7:D4:02:DC:FC:3F:68:27:B5:4F:75:72:64:8B:70:F8:72
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       639AD8C34021C4EB1B05359F6D5FD421CA4BF24C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
Manifest number:          C0
Signing time:             Thu 16 Jan 2025 16:13:07 +0000
Manifest this update:     Thu 16 Jan 2025 16:08:07 +0000
Manifest next update:     Fri 17 Jan 2025 18:45:07 +0000
Files and hashes:         1: 34352e3139302e3130382e302f32322d3232203d3e20323639363236.roa (hash: CD2iN89tbOF26Y17Dz9pqTL2C/4slIYiS6DwVquAa8A=)
                          2: 34352e3139302e3130382e302f32342d3234203d3e20323639363236.roa (hash: F78uA17kBDrRS5P8C6EqmdxljVPBA8gEfmlCnHugW+E=)
                          3: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (hash: iLlF1ninPEmkNcjwElnerdmDN5HhpAeMQXWSgLfB1xs=)
                          4: 34352e3139302e3131302e302f32332d3233203d3e20323639363236.roa (hash: AFyjyb+e6fnJ7Elh0VjXOc/5/W2vV6E74x8Sqqp/QoY=)
                          5: 34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa (hash: SAky1VWNr2UCtf3FeLygZxRkgi9D1QSpDQX0Rj5TXxE=)
                          6: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl (hash: oY4zasYeT//mgIvBAIx5Y8oVDBMEUl7JpJVuur1ccq0=)
                          7: 34352e3139302e3131302e302f32342d3234203d3e20323639363236.roa (hash: wcfe7UJ64MCo0Q2488q5lzFxH8+r907X8WF8LDuykfs=)
                          8: 323830343a363736383a3a2f33322d3332203d3e20323639363236.roa (hash: 9+BXd9CE8cBP2dnVN4diw0udiQDxt3oAPF1r9F/mvuE=)
                          9: 34352e3139302e3130392e302f32342d3234203d3e20323639363236.roa (hash: x5JOjRs6ZTVLYxKPkuAixjpHH0DLQFE7GDKo6WKU9jc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9a:d8:c3:40:21:c4:eb:1b:05:35:9f:6d:5f:d4:21:ca:4b:f2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Jan 16 16:08:07 2025 GMT
            Not After : Jan 17 18:45:07 2025 GMT
        Subject: CN=9FF3C7F7D402DCFC3F6827B54F7572648B70F872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:dc:12:a4:90:7a:e2:4e:a3:b9:ad:9d:ab:
                    12:ea:65:4f:ef:92:69:52:a7:58:1b:d3:f9:06:ba:
                    13:35:23:92:84:a9:be:8b:32:be:48:21:7e:29:d3:
                    8b:15:6f:2b:3a:1a:54:d5:39:28:e1:7c:82:2f:79:
                    09:11:e1:f7:92:6d:9e:e5:6f:3d:19:ab:c1:57:4a:
                    44:b4:6c:9b:ac:c3:14:13:a1:a2:99:f6:d4:71:36:
                    32:56:f7:cc:f1:6e:70:44:c0:68:4f:4d:e6:a0:39:
                    4b:55:f5:d1:a3:d8:63:be:08:8a:a9:fd:e9:69:ef:
                    88:4b:f2:09:61:11:ea:43:f5:d1:a0:63:64:59:c1:
                    ac:7f:af:63:95:00:fc:7f:2f:e8:54:ea:03:be:37:
                    c7:05:6d:b1:41:32:c7:ff:d0:80:2c:80:33:27:dd:
                    dd:ae:e9:58:c5:ee:78:86:f9:63:c6:c7:ce:65:40:
                    c7:c0:35:85:46:ed:34:13:32:1a:7e:e4:b4:c3:72:
                    95:e0:3d:0c:19:05:9e:c6:98:a3:ac:4f:d8:31:8c:
                    06:68:0c:ff:29:99:23:8b:c4:4a:fe:6a:c7:52:a8:
                    e1:6b:2a:da:f3:14:93:d8:b2:89:fe:e8:04:e7:55:
                    eb:5d:fd:03:8e:a5:58:96:fc:6a:ff:32:e7:d9:6f:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:C7:F7:D4:02:DC:FC:3F:68:27:B5:4F:75:72:64:8B:70:F8:72
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:22:68:9b:60:c5:e0:2e:8d:a0:5e:4b:b3:2a:52:9a:a0:37:
         48:48:bc:77:7f:97:94:f3:ca:9f:c6:a4:1c:f4:b0:0c:81:8c:
         fe:d2:f0:06:a6:50:c5:1a:07:0c:f8:4a:c3:22:0e:6e:3e:99:
         53:1b:22:87:1b:99:cb:d8:aa:e0:c2:f8:61:d6:17:5c:5b:58:
         83:dd:25:d4:31:5a:11:73:77:1f:42:cc:e3:46:c3:f9:d8:ad:
         96:80:d5:90:89:52:51:fa:0c:91:55:66:25:f7:ad:02:e8:aa:
         90:b7:a1:03:da:b7:7a:61:cb:ae:8c:a5:7a:f6:b1:d9:42:b7:
         76:6c:de:9d:2b:07:0f:e4:76:b1:66:bf:83:65:86:80:30:28:
         d2:37:f2:60:55:28:01:9a:6e:0d:57:e5:da:ac:ef:16:5d:46:
         86:7f:21:6f:3d:7c:6a:bc:75:7f:a9:aa:fe:4b:7e:f9:5b:28:
         81:fe:6d:61:75:29:51:d0:51:5b:c9:35:40:34:eb:85:e0:08:
         6f:be:2d:c6:d7:cf:94:34:9d:13:db:93:d0:06:3f:c0:62:76:
         0c:3c:d6:ca:56:e4:3a:2a:4f:42:a6:f8:0f:c1:97:b9:60:83:
         79:f0:99:78:23:4d:1e:cd:eb:d2:d9:4f:de:72:42:0c:f1:c3:
         f0:05:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:02 2025 by rpki-client