Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.mft
File:                     460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.mft (raw, json)
Hash identifier:          73D6VsfIllME2z9f9ueCRbViCaoJjtrT1T0MzXsMIMA=
Subject key identifier:   94:CC:6D:FA:46:04:E6:1D:20:14:DD:B2:E2:56:F4:A0:2E:33:3D:BB
Authority key identifier: 46:0E:1E:D2:9C:8A:8F:2E:BC:FE:F0:DB:6B:E3:FE:A7:AF:C8:A7:70
Certificate issuer:       /CN=460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770
Certificate serial:       3B96787C9652C9A6EAE6EF027BA54B0B940E6F90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.mft
Manifest number:          10
Signing time:             Tue 06 Dec 2022 08:50:00 +0000
Manifest this update:     Tue 06 Dec 2022 08:45:00 +0000
Manifest next update:     Wed 07 Dec 2022 10:59:00 +0000
Files and hashes:         1: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: JUXj9POjyjZo+AvbWS5JwqX5C9+GxVx4GdFUrZPq3kE=)
                          2: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: ko0L7/zLopCAjmWfYpnO7XgauzvUB1Ld75Ssab2tePE=)
                          3: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: 52jHDXkT1KelcjPh0SqevDCJMdkAhwPWXFIBJP9bfE4=)
                          4: 460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.crl (hash: os/6kQ/bdjkC6D8Yl1h1u7JGg4HYp85DwagOF/yPpho=)
                          5: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: Izq/80g2yTkDQoAK1QXeAiNTKV/RMcSrXsu+Zfk3hDE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:96:78:7c:96:52:c9:a6:ea:e6:ef:02:7b:a5:4b:0b:94:0e:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770
        Validity
            Not Before: Dec  6 08:45:00 2022 GMT
            Not After : Dec  7 10:59:00 2022 GMT
        Subject: CN=94CC6DFA4604E61D2014DDB2E256F4A02E333DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:67:31:98:d8:88:b0:45:b8:35:55:14:2e:
                    d3:de:aa:e6:09:de:ba:d1:47:f7:58:37:84:37:42:
                    72:0b:25:c6:4c:08:6d:0c:86:80:9a:1b:d5:bd:a6:
                    00:f3:15:6c:f8:de:c6:72:e1:a8:22:07:fc:92:06:
                    52:c3:e8:9b:2e:66:93:49:fb:1e:0e:42:a4:f2:25:
                    9d:d4:d2:92:a3:9f:0e:99:e9:eb:14:e6:51:9c:23:
                    18:64:28:b0:16:26:38:5d:1a:72:5b:dc:e6:f7:e6:
                    36:47:ea:3c:be:3b:87:ae:57:31:77:55:b3:e1:e1:
                    33:5e:9d:96:fd:af:5f:b5:73:98:ed:3b:4f:13:c9:
                    34:a8:71:cf:70:8f:9b:8f:e0:61:35:74:08:99:7a:
                    18:f4:38:0c:f5:4b:1f:f2:16:03:d0:aa:f7:08:b0:
                    05:e6:01:e1:0d:61:77:07:de:47:76:60:08:92:3f:
                    82:29:df:c0:00:54:73:d8:a0:70:9a:75:89:49:8a:
                    47:f6:6d:f3:49:62:79:d2:8c:c3:0a:a7:3b:1e:5b:
                    1c:1b:4b:10:1c:12:77:b6:48:73:e7:2d:44:60:02:
                    ce:77:22:67:6f:2b:90:a0:c1:9b:cd:36:36:f6:3a:
                    2f:24:47:e4:14:c7:97:92:28:e2:19:25:4a:dc:4e:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CC:6D:FA:46:04:E6:1D:20:14:DD:B2:E2:56:F4:A0:2E:33:3D:BB
            X509v3 Authority Key Identifier:
                keyid:46:0E:1E:D2:9C:8A:8F:2E:BC:FE:F0:DB:6B:E3:FE:A7:AF:C8:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/460E1ED29C8A8F2EBCFEF0DB6BE3FEA7AFC8A770.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:37:66:00:b3:9b:e1:53:62:64:26:11:91:b2:bd:03:fc:
         e3:7b:ca:79:64:93:bb:28:f3:3a:89:c3:b7:88:cc:36:68:8b:
         69:64:27:0a:1f:4c:0d:e7:fc:61:71:fe:c7:c5:0b:5c:b5:cf:
         53:64:98:15:2c:b0:88:ad:2f:de:d1:1e:3e:31:d2:10:7a:fd:
         ee:99:be:3e:49:a6:2c:18:11:fa:a5:7e:ef:6c:eb:a8:2b:3d:
         b7:da:5d:07:6a:89:62:79:8d:e4:77:59:2b:d9:1f:9a:06:b4:
         01:e3:75:5e:84:59:a0:36:d2:7a:5c:ae:56:ed:ca:93:f5:d4:
         80:71:75:7b:d0:5f:70:c0:ca:e9:dd:9f:f0:88:31:74:b1:55:
         60:ea:eb:d5:38:45:b9:ec:d4:e6:b8:5d:5f:af:d5:7e:e4:cd:
         84:56:e8:e7:a6:18:7d:73:8a:1b:28:bf:9e:5f:a5:46:09:66:
         80:34:32:36:6a:56:ba:a3:61:30:3a:31:cb:e9:d8:ca:3f:b0:
         3d:dc:d5:aa:2f:27:0b:7e:04:1c:84:8f:8b:06:8e:4f:bd:a5:
         87:c9:b6:36:bf:30:68:85:a4:ed:30:a3:fc:78:f7:10:6a:91:
         06:6c:eb:40:2f:96:23:3d:7b:ba:51:8b:18:3a:43:56:c3:b6:
         da:e9:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:55:57 2025 by rpki-client