Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/E2279413B8B3621F64FA6AD85C34223EA352FFCD.mft
File:                     E2279413B8B3621F64FA6AD85C34223EA352FFCD.mft (raw, json)
Hash identifier:          05oTWBSrJ7LJnv+XBSh4G1v/jahSDWALJS/JrXNtcr8=
Subject key identifier:   DF:FE:E8:18:74:9E:6F:28:32:93:65:35:78:A4:09:6F:CC:19:E0:A9
Authority key identifier: E2:27:94:13:B8:B3:62:1F:64:FA:6A:D8:5C:34:22:3E:A3:52:FF:CD
Certificate issuer:       /CN=E2279413B8B3621F64FA6AD85C34223EA352FFCD
Certificate serial:       5BA25229E4CC44F82FAA14E1F5006E300F28AC52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2279413B8B3621F64FA6AD85C34223EA352FFCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/E2279413B8B3621F64FA6AD85C34223EA352FFCD.mft
Manifest number:          16
Signing time:             Sat 11 Jan 2025 14:32:38 +0000
Manifest this update:     Sat 11 Jan 2025 14:27:38 +0000
Manifest next update:     Sun 12 Jan 2025 18:00:38 +0000
Files and hashes:         1: E2279413B8B3621F64FA6AD85C34223EA352FFCD.crl (hash: Y3lc6COLndsRhina+cH3Ep4uI1M/Q88e0TtXFgMCaro=)
                          2: 3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (hash: Q84DhFRHP3qP+oBA99hEHv03kYrFHEUPhMnWrxCK4C0=)
                          3: 323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (hash: TRsJ+oVi3Z8DJP3Zc96eKm3RdP9hvGebwGXcXN2T6gY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a2:52:29:e4:cc:44:f8:2f:aa:14:e1:f5:00:6e:30:0f:28:ac:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2279413B8B3621F64FA6AD85C34223EA352FFCD
        Validity
            Not Before: Jan 11 14:27:38 2025 GMT
            Not After : Jan 12 18:00:38 2025 GMT
        Subject: CN=DFFEE818749E6F283293653578A4096FCC19E0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:29:3e:e9:8b:69:de:06:c6:6c:40:6c:ce:
                    38:1e:eb:bd:59:03:68:82:48:85:6b:d1:9e:f1:3c:
                    c9:47:40:c2:52:f1:33:43:cc:27:6a:e2:dd:73:85:
                    a4:c7:09:49:d7:b7:17:fe:4d:2c:73:c9:9a:0e:a3:
                    3c:3b:41:62:7e:f7:d5:54:8e:cc:f2:b3:c2:a8:66:
                    d5:86:9e:46:9f:1d:ed:16:9e:44:d5:36:cc:de:06:
                    ec:12:38:5f:ed:82:3a:59:09:cc:98:9f:fa:0d:bd:
                    7f:3a:30:0a:c0:d5:2f:5b:03:3e:9a:ab:be:63:e9:
                    53:72:ab:52:f3:c9:31:b4:dd:aa:9d:30:d6:03:f7:
                    8b:d3:32:68:f6:8c:1e:b5:e6:cb:11:ef:36:19:f7:
                    8b:92:14:72:f8:58:3e:14:fc:32:7a:74:62:56:47:
                    49:c7:38:46:dd:05:1b:29:21:c0:2f:ab:b8:e9:e9:
                    c9:c1:5d:6f:29:a9:c2:41:9f:f2:2c:79:14:69:cb:
                    bf:35:b0:9c:0d:ff:39:ab:33:61:fa:79:81:c6:59:
                    a8:dd:43:11:ea:25:5c:c3:dc:62:e6:d6:28:3d:e1:
                    96:b1:5b:71:82:72:8e:71:45:87:32:01:c1:5c:d2:
                    2b:1c:8d:21:e4:1a:ac:e3:17:b9:76:15:73:d8:91:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FE:E8:18:74:9E:6F:28:32:93:65:35:78:A4:09:6F:CC:19:E0:A9
            X509v3 Authority Key Identifier:
                keyid:E2:27:94:13:B8:B3:62:1F:64:FA:6A:D8:5C:34:22:3E:A3:52:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/E2279413B8B3621F64FA6AD85C34223EA352FFCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2279413B8B3621F64FA6AD85C34223EA352FFCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/E2279413B8B3621F64FA6AD85C34223EA352FFCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:f4:2a:fb:1a:27:61:7d:ad:28:a4:74:e2:e5:5d:03:71:
         67:66:6b:f4:c4:52:12:ce:4b:1f:67:dc:07:fc:c3:ea:36:01:
         45:75:0d:f5:96:cc:76:17:7e:b9:67:b7:45:3a:53:bd:89:fd:
         0a:7e:a6:5f:4d:93:2a:67:a8:0e:f8:aa:22:01:38:d5:86:7b:
         14:42:d0:12:ae:05:08:c2:09:c2:21:3e:65:f8:e5:fb:15:72:
         a3:32:db:76:58:1b:70:0a:61:85:88:0d:4c:f0:e8:df:1f:40:
         45:4a:fb:40:59:ea:9b:b6:58:34:9c:0c:1c:25:ef:71:44:62:
         ce:49:a8:b3:80:6b:1e:8b:3f:45:4a:3a:ea:50:3b:63:60:93:
         2d:42:f5:ff:e6:49:94:8f:be:5e:9f:65:f3:60:33:c8:17:5c:
         9e:8d:3f:8b:0d:b9:a3:b8:99:91:36:d4:ac:ce:e0:dd:f0:ee:
         a5:94:07:20:82:1d:7c:e6:a6:57:38:36:17:ff:61:2c:7a:39:
         f7:c4:50:54:eb:00:79:05:bb:5a:66:29:ba:94:46:68:f5:b8:
         92:f2:9c:8e:ee:7e:a5:be:0c:6a:bf:83:6d:bf:9e:e9:40:b4:
         62:8c:49:b5:6e:b0:64:5e:41:17:35:b9:0c:66:ce:d8:c0:dc:
         b5:fe:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:48 2025 by rpki-client