Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.mft
File:                     39ADE53D58805E5FE43277F03B00463702D1142A.mft (raw, json)
Hash identifier:          fZPyjm/EXf6xti281TNAtsUTL5kSfrS2S8w1GydfiTo=
Subject key identifier:   88:DE:14:C0:E5:9D:F5:AD:CB:4D:94:81:C1:B6:6A:A0:50:34:50:13
Authority key identifier: 39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A
Certificate issuer:       /CN=39ADE53D58805E5FE43277F03B00463702D1142A
Certificate serial:       5D1B247862FB494543A8C26123E658D503CF2594
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.mft
Manifest number:          C1
Signing time:             Thu 05 Dec 2024 09:39:43 +0000
Manifest this update:     Thu 05 Dec 2024 09:34:43 +0000
Manifest next update:     Fri 06 Dec 2024 11:05:43 +0000
Files and hashes:         1: 34352e3139302e3234382e302f32322d3234203d3e20323639363536.roa (hash: 6HG+lIKWIr1+hSykh1q9X7e5FG4dZPIdM8vrYiKwbhU=)
                          2: 323830343a363765303a3a2f33322d3438203d3e20323639363536.roa (hash: fXI8tW2X3zNG4t1InN64D/2asrlAu/gIgd6PTG7RJZk=)
                          3: 39ADE53D58805E5FE43277F03B00463702D1142A.crl (hash: v+sDF6xd1D55NYvzHDK0duOWfjWH8SeEcDi7Sq0csJo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1b:24:78:62:fb:49:45:43:a8:c2:61:23:e6:58:d5:03:cf:25:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ADE53D58805E5FE43277F03B00463702D1142A
        Validity
            Not Before: Dec  5 09:34:43 2024 GMT
            Not After : Dec  6 11:05:43 2024 GMT
        Subject: CN=88DE14C0E59DF5ADCB4D9481C1B66AA050345013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:6c:5b:52:ee:76:da:58:9a:03:6d:49:0b:
                    65:a1:9a:0e:e7:6e:b9:87:42:d2:58:d4:1c:de:b3:
                    5d:8f:7c:a7:0a:f0:4f:6e:96:1f:3b:05:e8:7a:d7:
                    3a:15:15:36:ae:4f:51:a8:6f:7a:b5:f4:52:a0:f0:
                    a9:d2:fd:2a:9e:ad:76:75:14:de:9e:44:f2:81:a0:
                    83:b6:34:ef:1d:c3:a6:61:1f:75:e7:5d:84:d1:7f:
                    f5:28:66:72:d3:18:8e:15:7a:61:46:e4:be:c6:96:
                    e8:32:c0:4f:62:25:10:50:57:4a:4a:1d:c7:5c:c6:
                    6f:be:11:a8:d9:43:54:67:e5:30:ed:04:cb:3d:82:
                    3a:74:89:40:82:be:b1:82:15:a3:74:39:fa:e7:bc:
                    af:c3:4e:91:8e:2f:cd:14:98:b9:04:72:da:ae:e0:
                    a0:d7:7e:eb:d2:66:47:d2:50:2a:ef:87:eb:80:ca:
                    a7:a4:e3:f7:dd:6f:b6:2f:f6:92:4c:d1:62:b5:6a:
                    00:ba:d5:68:e2:5e:87:16:78:a6:18:bd:7b:b9:8e:
                    74:b5:e3:38:83:94:b6:b7:d6:62:07:f6:02:9a:ca:
                    71:68:4d:0a:ff:81:2b:78:65:a0:20:b1:35:f7:26:
                    f2:b1:48:aa:13:cf:5c:4e:ff:6b:4d:b3:6a:f6:ba:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DE:14:C0:E5:9D:F5:AD:CB:4D:94:81:C1:B6:6A:A0:50:34:50:13
            X509v3 Authority Key Identifier:
                keyid:39:AD:E5:3D:58:80:5E:5F:E4:32:77:F0:3B:00:46:37:02:D1:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39ADE53D58805E5FE43277F03B00463702D1142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/39ADE53D58805E5FE43277F03B00463702D1142A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:c4:bc:58:29:b3:ef:28:46:f5:31:ca:cd:34:a1:a8:46:
         8c:f4:a7:60:39:f4:ad:d5:ae:fa:d5:2f:84:bf:75:7c:87:a3:
         30:76:20:a8:74:3a:ab:31:13:9d:d7:9c:00:39:3e:29:be:d8:
         8f:c9:39:4c:23:f8:d0:16:77:3f:a7:70:64:29:13:54:fe:a7:
         85:c3:e4:89:5e:23:d9:0c:fb:91:84:c0:1a:61:31:58:f0:de:
         d8:c5:b2:f6:67:4c:c1:7c:e9:24:68:69:07:ab:b9:e3:86:68:
         02:21:c4:d7:b4:e5:00:8a:a5:fa:1a:cf:f9:35:39:2d:22:ff:
         43:33:eb:87:ca:49:50:f9:23:54:8c:70:f3:70:f9:28:2b:57:
         8b:67:3e:fd:47:70:a4:b8:24:7e:18:63:13:ce:62:0f:bc:a8:
         a9:d6:37:53:33:43:63:f9:84:03:25:36:04:7e:85:8a:97:0a:
         c5:f1:d1:4b:80:5e:8b:48:62:27:ce:f8:7a:53:88:62:c7:1c:
         c1:a3:f0:0f:43:6e:a4:52:5b:a6:ad:61:1c:c9:5d:f3:ec:1f:
         a2:49:5d:ce:75:72:c9:46:78:65:38:f4:0c:8d:c3:7a:e3:fe:
         78:eb:e0:ee:c9:3e:1d:e7:e9:20:d2:c9:29:e8:4d:e1:cf:0b:
         b3:72:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:15 2025 by rpki-client