Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft
File:                     C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft (raw, json)
Hash identifier:          GF3830xA8n3BNqotQyaZN1tCm7kgU2UbXviDi1bgepE=
Subject key identifier:   56:2F:60:BD:0D:55:20:84:DF:FB:81:3D:05:63:6A:3E:34:44:AD:70
Authority key identifier: C1:3D:FF:31:26:73:AB:23:09:FB:2F:38:4B:DA:7D:B7:90:57:D3:AD
Certificate issuer:       /CN=C13DFF312673AB2309FB2F384BDA7DB79057D3AD
Certificate serial:       65685C5C02E420BF767ADBF2B0384FEB9F572B1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft
Manifest number:          01FE
Signing time:             Wed 17 Jan 2024 19:05:10 +0000
Manifest this update:     Wed 17 Jan 2024 19:00:10 +0000
Manifest next update:     Thu 18 Jan 2024 22:54:10 +0000
Files and hashes:         1: 3137372e33382e3133362e302f32312d3236203d3e203532393437.roa (hash: /ydsHc1BhqxKFkHDhpFps4lmkQUESApjkyF7ABSi/KY=)
                          2: C13DFF312673AB2309FB2F384BDA7DB79057D3AD.crl (hash: rqNcylMPfKdDwjzRHjNxtvwC9YNDJe3zZA2vGe67p6k=)
                          3: 3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (hash: xFRTdQQ2/1VFxY01wkI2MMFP7IdjBhxmW2EynaVYs6g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:68:5c:5c:02:e4:20:bf:76:7a:db:f2:b0:38:4f:eb:9f:57:2b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13DFF312673AB2309FB2F384BDA7DB79057D3AD
        Validity
            Not Before: Jan 17 19:00:10 2024 GMT
            Not After : Jan 18 22:54:10 2024 GMT
        Subject: CN=562F60BD0D552084DFFB813D05636A3E3444AD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:da:83:a5:cd:62:b8:eb:32:85:3c:54:f7:
                    1e:2a:4a:ff:39:33:e5:b8:a6:80:dc:95:66:82:54:
                    1a:35:fc:6a:17:c2:df:3c:74:bc:14:b6:82:24:03:
                    ce:eb:56:97:0f:36:c7:92:d1:ad:5b:48:45:cb:22:
                    8c:d1:12:a4:4f:8c:db:a6:28:22:7e:e5:b2:93:6c:
                    4e:37:5c:93:17:27:16:a8:92:67:4f:f4:67:db:f7:
                    5a:be:cd:22:1c:8c:db:68:6b:ef:99:6c:ec:17:08:
                    10:97:9c:5f:e2:40:00:15:d6:78:06:ba:f8:f4:da:
                    a6:5f:b9:35:fc:4b:7e:8c:c4:f9:a3:f2:7c:a7:36:
                    c3:e3:51:e1:c9:1a:a0:f4:9d:f5:90:a6:51:f3:26:
                    43:5e:df:3b:31:d1:37:81:7d:34:47:e6:b8:1d:03:
                    f2:97:fb:44:e7:61:61:f0:4e:b9:4f:ab:3a:c9:fa:
                    20:ae:83:53:c6:dd:9b:2c:23:00:46:66:79:75:8f:
                    46:ef:51:fc:8e:f1:ce:f6:a6:e7:53:9e:53:f1:3a:
                    02:9a:c3:15:3c:a5:3c:d3:79:59:78:48:90:1c:b1:
                    24:b0:1f:a5:07:c5:da:73:81:a5:4f:fd:32:bc:3e:
                    9b:b1:69:13:24:bf:84:41:fb:6c:49:aa:b4:f0:fe:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2F:60:BD:0D:55:20:84:DF:FB:81:3D:05:63:6A:3E:34:44:AD:70
            X509v3 Authority Key Identifier:
                keyid:C1:3D:FF:31:26:73:AB:23:09:FB:2F:38:4B:DA:7D:B7:90:57:D3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/C13DFF312673AB2309FB2F384BDA7DB79057D3AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:43:84:db:cf:8d:36:df:e8:32:0f:c1:23:dc:e2:92:37:
         42:a0:70:90:e1:48:35:74:c7:09:8a:8b:03:4c:cd:d9:58:b0:
         26:b7:e3:86:18:27:34:10:10:5b:f9:2e:65:b2:b9:01:f3:61:
         67:93:8b:66:c7:57:f7:a4:e4:a6:55:ca:7c:e1:ce:81:8d:57:
         dc:2b:4e:6e:2d:8e:53:4c:e9:a2:e4:39:d5:00:2e:e7:16:0a:
         82:14:4b:b8:2d:b7:ec:4f:e4:20:72:48:39:86:22:79:33:e1:
         29:d3:12:23:a6:ba:59:11:a0:f6:18:ef:5e:b4:82:ff:ca:32:
         bb:b8:3a:3e:93:07:42:64:e5:7b:f3:5f:6b:68:86:8f:2d:f7:
         0f:d5:80:b5:31:6c:6c:c4:ec:e5:14:b1:1f:f2:68:9e:48:b8:
         2f:01:e2:c4:32:53:12:59:64:84:a9:88:26:5c:87:de:95:05:
         26:e6:ef:da:a3:bb:b2:7b:25:0c:c2:3f:30:f8:c2:65:1e:6f:
         e0:0b:ce:40:2c:ec:0b:c2:25:a2:fc:d4:44:21:a2:05:bf:f7:
         4e:96:9d:c4:fd:c3:8a:c2:fa:a7:c6:10:ee:1c:82:6e:ab:df:
         f3:65:d3:72:00:1f:4d:c1:b3:2e:a8:ba:a7:9b:56:0b:79:5d:
         10:70:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:11 2025 by rpki-client