Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.mft
File:                     1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.mft (raw, json)
Hash identifier:          l07lVzJGGudctkC6nK4ubUqhcvERUWJ0eIONVNgrtYs=
Subject key identifier:   12:FF:24:15:34:2C:0F:4F:E8:F0:2E:A1:AD:D4:05:10:7C:34:2B:1B
Authority key identifier: 1F:FC:60:49:16:0D:8E:0F:36:BE:A4:D1:4F:8B:68:84:4C:2C:BD:2C
Certificate issuer:       /CN=1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C
Certificate serial:       6C6F155674594463B03A4EB2A52E44D37D5A23AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.mft
Manifest number:          4B
Signing time:             Mon 06 Jan 2025 16:20:58 +0000
Manifest this update:     Mon 06 Jan 2025 16:15:58 +0000
Manifest next update:     Tue 07 Jan 2025 16:44:58 +0000
Files and hashes:         1: 3137302e3135302e3231322e302f32322d3234203d3e20323635303430.roa (hash: sXUhjyVFsxl8im7wtxQsH8odfts80na1DXoKNICB6CY=)
                          2: 1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.crl (hash: kaW+F3lW1iSoMYHAbUUwWMOu759BDe9JDrEPyaA9Ae0=)
                          3: 323830343a333164383a3a2f33322d3438203d3e20323635303430.roa (hash: 2b2O3kZ46hsq3yvl92HVtn+qQY2ypAFQl2ET9iZTZoU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6f:15:56:74:59:44:63:b0:3a:4e:b2:a5:2e:44:d3:7d:5a:23:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C
        Validity
            Not Before: Jan  6 16:15:58 2025 GMT
            Not After : Jan  7 16:44:58 2025 GMT
        Subject: CN=12FF2415342C0F4FE8F02EA1ADD405107C342B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:a3:f1:e6:4d:7e:a6:c3:94:1a:32:f9:02:
                    c9:4f:d7:28:9d:e3:b8:50:10:d9:be:f7:ac:05:96:
                    14:20:8f:b9:49:a8:05:b4:ad:82:9a:32:5e:5a:51:
                    fa:35:63:ce:d1:21:c2:91:2d:79:97:81:1b:87:41:
                    64:bf:07:fe:e4:ca:ba:6c:54:f2:1a:48:a7:dc:a0:
                    39:43:14:8c:0a:fe:be:d0:b6:dc:b8:d7:f3:e8:f1:
                    2e:af:e0:1f:2b:80:7f:ef:3f:95:bb:38:ce:ea:b4:
                    f2:47:06:4f:b0:a3:73:ba:31:fa:f1:cd:90:41:31:
                    6a:92:7a:0a:1d:de:cd:e4:fb:83:d7:b0:31:65:a9:
                    84:58:4c:33:72:bd:ba:bc:13:8f:2a:b8:f0:7c:e0:
                    11:00:f9:1d:2c:60:fd:fb:1c:04:f8:0d:fa:eb:14:
                    2d:44:f6:e1:18:29:55:05:97:1b:aa:d2:65:b0:93:
                    23:bd:a4:3a:42:59:0e:ca:0f:8c:3d:58:d4:dd:17:
                    5e:ad:bd:d5:a3:1b:93:d9:48:10:e5:d1:8c:4f:06:
                    94:55:e6:53:a5:02:f4:46:73:b9:85:1b:78:71:26:
                    72:28:fc:06:c4:15:c5:13:30:f3:32:dd:71:9d:78:
                    6e:8c:59:95:76:f4:f9:1d:3b:af:45:cb:20:4d:21:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FF:24:15:34:2C:0F:4F:E8:F0:2E:A1:AD:D4:05:10:7C:34:2B:1B
            X509v3 Authority Key Identifier:
                keyid:1F:FC:60:49:16:0D:8E:0F:36:BE:A4:D1:4F:8B:68:84:4C:2C:BD:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4mQikTpuZK9jAnSmSwszC5oESHbfHULSHccZX1xfsL4/0/1FFC6049160D8E0F36BEA4D14F8B68844C2CBD2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:54:52:62:93:45:f1:80:0d:93:3b:ca:6b:c3:e3:9e:93:1a:
         ac:e9:03:54:3a:03:c7:74:35:c2:88:69:08:38:a7:f0:df:88:
         66:ee:bb:94:cf:2c:85:2d:89:da:57:29:1b:ec:e3:90:51:b9:
         f9:a4:44:95:60:ea:4c:0c:68:98:20:49:46:75:04:55:5d:95:
         ff:8f:a4:3e:1a:da:bd:6b:12:4a:c9:2d:be:13:91:bb:90:1b:
         08:ff:41:84:7c:85:4e:53:b8:f5:26:b5:f0:37:7e:56:39:fd:
         ff:50:30:fb:33:95:6a:7d:38:6a:b2:9c:eb:7b:45:48:a2:a9:
         9f:0e:c7:e0:53:de:e7:b9:52:ce:df:2b:ca:e1:71:4c:47:84:
         ff:f9:17:ec:e6:20:73:53:3f:f2:48:d5:fa:36:98:05:22:17:
         f9:a4:c9:82:e9:58:c9:fb:a3:37:dc:2e:0a:4b:25:39:d9:3d:
         ae:1f:fd:04:3d:56:40:1d:81:96:62:8f:11:da:2f:c9:23:c1:
         3e:5c:b0:4a:d3:4c:96:2b:95:af:9d:8e:03:ff:44:e1:95:53:
         f5:b9:e8:c1:d7:37:ae:2c:5d:0b:9f:54:b7:ee:6d:86:d8:65:
         19:17:3b:43:61:fa:7e:7d:43:8d:25:a1:94:ac:f0:05:ed:91:
         9f:8b:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:20:21 2025 by rpki-client