Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.mft
File:                     D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.mft (raw, json)
Hash identifier:          8MfNr7VKHfXLKMj0b6nofYlvyrDXbu1z4rG/RVnmWvs=
Subject key identifier:   19:C6:34:68:BD:7A:93:B4:71:8D:5A:33:92:67:32:6B:1C:CB:3D:DB
Authority key identifier: D2:CB:B6:0B:1E:AB:38:3D:6C:F9:F9:00:9D:9F:61:7D:7D:C1:6F:C7
Certificate issuer:       /CN=D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7
Certificate serial:       7EE7FBF58E0D179F18D0CAAA1D17ABA23D381CC0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.mft
Manifest number:          07
Signing time:             Fri 17 Mar 2023 00:50:07 +0000
Manifest this update:     Fri 17 Mar 2023 00:45:07 +0000
Manifest next update:     Sat 18 Mar 2023 03:14:07 +0000
Files and hashes:         1: 3133382e3138352e38362e302f32342d3234203d3e20323634333434.roa (hash: 6Lu7Cg8N2WZ4naVM4ePm7hdJZ8p7VaDlfP7FZg70l3U=)
                          2: D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.crl (hash: 4wLJNqdqg0k7KfmHV9ubHkB75FdvGXXzHu1PiZAgj/Q=)
                          3: 3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa (hash: ZlBVYTeJoILDkEXN5AYDZ4FmqXZHx/lbMWw1eqJDeXw=)
                          4: 3133382e3138352e38342e302f32342d3234203d3e20323634333434.roa (hash: ToEh9KuzxAqUv2KMB/iKM8w70+glQJmxSVRIAB2zz8g=)
                          5: 3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa (hash: xmzYkaQSwrjTYj2rmUSky8RB36ZNolrUQTAoR2cuahA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e7:fb:f5:8e:0d:17:9f:18:d0:ca:aa:1d:17:ab:a2:3d:38:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7
        Validity
            Not Before: Mar 17 00:45:07 2023 GMT
            Not After : Mar 18 03:14:07 2023 GMT
        Subject: CN=19C63468BD7A93B4718D5A339267326B1CCB3DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:34:5b:fe:64:74:25:b7:7f:9b:3a:ba:9c:
                    22:a1:dc:42:ae:92:33:f0:26:5d:7a:79:e6:b1:28:
                    86:74:41:c2:99:87:90:f1:13:e9:64:13:89:b5:71:
                    68:cd:c0:8e:30:4c:c1:d3:d3:7b:57:e5:f3:f7:9c:
                    0a:10:f1:3e:43:41:79:21:80:05:ba:fb:68:b7:3d:
                    b8:1b:bf:14:e8:9f:b6:92:80:11:3c:23:9a:32:eb:
                    0c:96:f1:39:92:46:9d:14:3c:b1:6a:f6:1a:7f:96:
                    c7:f3:9c:50:77:26:c4:35:df:61:64:40:38:6c:ae:
                    8a:a0:5b:3e:f5:92:c8:de:65:b2:8d:80:9f:43:22:
                    d1:86:6f:b6:9a:1b:54:24:3f:85:b2:48:24:d5:71:
                    1b:4b:23:b2:36:09:67:41:6e:43:e5:08:cc:4b:ab:
                    45:21:11:4b:92:89:93:47:de:88:2d:97:66:d4:5e:
                    64:f6:50:be:a6:24:ac:2b:b7:f9:77:76:04:b3:1d:
                    e5:5f:76:36:e9:ad:cd:5a:e4:8e:37:e6:91:90:30:
                    1f:b3:d7:1b:a7:d3:3f:ca:c5:61:99:68:38:f8:8e:
                    78:1b:1b:c7:0b:e4:66:46:1a:2c:ce:6b:1e:4e:9f:
                    74:d8:84:d5:bc:58:d5:9f:4c:5d:cd:9a:0c:94:ce:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:34:68:BD:7A:93:B4:71:8D:5A:33:92:67:32:6B:1C:CB:3D:DB
            X509v3 Authority Key Identifier:
                keyid:D2:CB:B6:0B:1E:AB:38:3D:6C:F9:F9:00:9D:9F:61:7D:7D:C1:6F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:33:13:27:8f:6e:ce:89:16:56:90:76:7d:38:b2:7d:c2:
         91:e2:5d:19:63:f8:21:f3:15:67:2c:c2:79:f1:dc:a4:f1:7b:
         d3:f4:25:fe:1e:fa:ca:ac:3d:75:e2:66:6e:59:13:bd:b8:b1:
         22:0c:55:71:67:f0:76:43:07:c0:d0:92:41:4d:29:0a:6b:5c:
         c1:91:25:51:10:f6:cb:bf:e0:a5:93:05:87:ab:0c:10:5b:80:
         12:52:13:8b:f3:5c:b5:63:6f:08:28:71:5c:9f:fc:21:79:2b:
         71:41:5d:c5:d0:58:75:b2:81:e8:d0:5c:b3:d8:30:48:34:ec:
         1f:fa:a9:0f:c2:a3:48:45:2a:aa:66:57:b4:92:0e:ec:1e:4e:
         5d:b7:bd:d2:d5:d8:83:b2:9e:1b:d2:de:3c:41:27:01:04:87:
         7b:61:ca:da:2d:1e:5b:18:7f:34:83:68:a4:d9:23:80:dc:3b:
         4f:be:8f:a0:9e:b2:b8:9f:dc:51:df:88:00:8d:19:a1:01:b3:
         f8:e2:91:13:76:e4:64:a5:3a:a5:5f:70:93:80:1e:80:5f:48:
         24:68:91:5d:47:a8:08:f2:96:dd:30:68:1e:dd:48:9e:28:6c:
         5e:7e:82:2c:07:80:d8:f8:04:5a:75:af:21:30:a1:dc:1b:de:
         b8:78:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:16 2025 by rpki-client