Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.mft
File:                     2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.mft (raw, json)
Hash identifier:          /qLA855ZaDhVxlOYiQIaT+B6wlNP7Jk6Te4a2GGNN10=
Subject key identifier:   1A:40:57:01:27:C1:AE:46:CE:3C:80:6D:7E:A3:24:D3:03:D7:79:96
Authority key identifier: 2A:A8:13:ED:B3:B0:D2:2A:F6:A1:A2:36:74:7B:6B:FC:0C:C8:0C:6F
Certificate issuer:       /CN=2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F
Certificate serial:       146E9AD9D24F140B13DB8632B8C6B17723581DFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.mft
Manifest number:          01C9
Signing time:             Sat 01 Feb 2025 20:40:00 +0000
Manifest this update:     Sat 01 Feb 2025 20:35:00 +0000
Manifest next update:     Sun 02 Feb 2025 20:40:00 +0000
Files and hashes:         1: 2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.crl (hash: jSW5STvqc+F0WeT1VaxxAOw1dKTp10wh1zrQYZ1YpVo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6e:9a:d9:d2:4f:14:0b:13:db:86:32:b8:c6:b1:77:23:58:1d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F
        Validity
            Not Before: Feb  1 20:35:00 2025 GMT
            Not After : Feb  8 20:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:c4:e2:ed:39:1b:f1:81:1d:6d:83:38:eb:
                    ab:bb:30:91:c3:b9:fc:44:ad:f4:4e:d3:e4:77:b3:
                    8e:1c:53:89:f7:07:24:0e:47:32:c4:c2:0b:c5:fe:
                    0a:49:1c:44:b2:a5:ea:cc:45:4e:da:c3:e6:44:49:
                    1f:0f:04:2d:73:d2:5d:90:50:9e:c2:95:27:8e:ea:
                    87:c3:3c:51:c0:3b:c1:15:ab:23:20:b1:cb:dc:64:
                    70:d6:38:c1:dd:61:7a:0f:31:fd:77:1d:af:30:f5:
                    5d:5d:cd:e7:90:e6:6e:1a:27:a2:24:eb:5f:53:e1:
                    08:1f:be:1a:c9:d4:0b:ce:98:64:8b:d8:b1:e6:47:
                    0b:c3:36:87:f7:26:71:76:7c:5c:fb:0d:42:39:e6:
                    ed:3a:ed:a0:c9:8d:74:78:32:7e:e0:d9:9f:86:04:
                    36:5e:eb:23:00:b2:62:ed:fa:07:cd:30:ee:e8:5b:
                    96:d3:b3:83:3a:97:83:74:49:2b:c5:72:a1:6a:8b:
                    88:06:6b:d1:08:01:e8:e7:4c:95:b7:3b:2d:fe:02:
                    51:a6:4f:ab:84:6c:12:54:69:4a:aa:94:5a:b2:58:
                    2d:89:44:a7:9f:58:7b:d1:11:e9:1e:5d:9e:fd:32:
                    5f:f4:61:9c:4f:50:ae:d1:5b:09:26:01:2c:b1:70:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:57:01:27:C1:AE:46:CE:3C:80:6D:7E:A3:24:D3:03:D7:79:96
            X509v3 Authority Key Identifier:
                keyid:2A:A8:13:ED:B3:B0:D2:2A:F6:A1:A2:36:74:7B:6B:FC:0C:C8:0C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/2AA813EDB3B0D22AF6A1A236747B6BFC0CC80C6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:14:48:6b:de:6f:61:3c:5f:8e:4f:7e:8d:2d:0e:ab:25:ab:
         3e:89:94:a9:7c:23:4b:67:72:91:83:5d:76:27:76:69:f7:1c:
         fa:b1:94:f0:76:0a:10:08:6a:c1:b3:66:6f:be:cb:a6:45:3f:
         45:79:85:e5:b8:53:60:0c:b7:58:86:35:68:20:b8:76:2e:3e:
         b1:1e:3d:16:46:e6:15:2a:70:94:78:22:14:cc:5a:63:d5:d3:
         6f:ff:56:52:f0:b4:3b:d3:5d:f8:5c:ad:62:c8:47:d9:a5:05:
         6f:a8:28:97:91:57:21:58:92:83:3f:7b:1f:dc:67:4c:76:1f:
         65:b4:31:41:d2:ef:90:28:02:7f:83:77:30:73:1d:4e:a7:33:
         7d:78:1c:f0:f4:d5:88:18:b3:8b:42:9c:04:99:e5:89:19:8c:
         b1:21:89:79:f5:56:89:02:4d:10:d8:0b:6d:8b:fb:45:52:f8:
         f7:b4:fb:ce:7a:4e:79:29:2d:8c:e0:12:6b:0b:42:c4:57:65:
         c2:40:db:3c:dd:79:bb:7c:17:41:59:01:a4:99:d9:df:d5:fa:
         33:9c:cf:c2:90:6c:18:6b:87:02:8c:f9:42:b0:2e:93:4c:5d:
         f6:74:09:b4:2a:7a:0d:9e:99:a9:ae:8b:b5:e4:e4:fc:24:12:
         a4:59:d6:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:14 2025 by rpki-client