Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft
File:                     1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft (raw, json)
Hash identifier:          sm47hISW9uOKH8bdu+ZNFilUyHJzO2vEZbeGbrZ3JB8=
Subject key identifier:   4B:0A:2C:06:8D:F4:82:D0:A0:FC:63:46:2A:CD:45:00:D3:7F:28:25
Authority key identifier: 10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
Certificate issuer:       /CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
Certificate serial:       7BFA1C2D0C83650421D90C2C638AA04BC1B1B6E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft
Manifest number:          15
Signing time:             Fri 10 Jan 2025 08:49:21 +0000
Manifest this update:     Fri 10 Jan 2025 08:44:21 +0000
Manifest next update:     Sat 11 Jan 2025 10:59:21 +0000
Files and hashes:         1: 1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl (hash: QWIopNLK20jkCcqWTujeZywttLl5MxPsw73mxWc7zp0=)
                          2: 323830343a386532633a3a2f33322d3332203d3e20323632333433.roa (hash: RszVe3EkU3zkYePH3CtR4SG3a27/BRmju8ujVD3calc=)
                          3: 323830343a386532633a3a2f33322d3332203d3e203230343733.roa (hash: hOzIcJdNd/RxgEaXvXyg9e9Qetc0Ol9pDgV2OH3wozI=)
                          4: 323830343a386532633a3a2f33322d3332203d3e20323733343038.roa (hash: TjL3QIhlmwMUKANzVUvY5FMIsc8Y38WpOg1RmfVYWm0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fa:1c:2d:0c:83:65:04:21:d9:0c:2c:63:8a:a0:4b:c1:b1:b6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
        Validity
            Not Before: Jan 10 08:44:21 2025 GMT
            Not After : Jan 11 10:59:21 2025 GMT
        Subject: CN=4B0A2C068DF482D0A0FC63462ACD4500D37F2825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:3c:c0:22:23:4e:87:ba:5b:a1:17:46:e9:
                    2b:fc:b2:f1:c5:ca:c1:1f:a7:78:29:33:1d:47:cb:
                    49:b2:4b:7e:0b:7b:a4:4f:97:99:67:7d:f9:fd:c2:
                    0e:94:92:a5:dc:59:8f:ef:f4:ed:68:72:e1:c0:43:
                    94:51:4e:6f:5f:a8:39:d3:ec:7a:7a:4c:0e:35:eb:
                    b3:76:f8:55:e4:53:46:00:bc:2c:ba:05:37:02:34:
                    ce:75:1e:50:7c:59:fc:1b:c6:37:61:9f:d4:90:56:
                    76:5f:fb:4a:9c:4f:e6:6e:91:63:19:c1:a3:f7:5c:
                    5a:be:39:83:18:c5:9a:09:5e:f4:85:bc:64:f0:90:
                    ee:30:4f:f3:c1:ab:0d:a7:cb:1b:ce:84:91:e2:d7:
                    2c:12:f7:16:44:6a:c3:45:0b:19:5e:94:fe:4a:4b:
                    db:7c:2f:a5:84:97:80:4f:14:8a:f0:74:eb:69:34:
                    a9:de:5e:2b:89:37:1b:fb:e2:b9:5a:ac:f2:d5:bc:
                    50:03:2f:a7:c4:86:30:74:06:05:b9:b4:53:f7:8c:
                    4f:2d:c4:59:f6:d3:31:0c:c4:9a:4d:da:1c:31:26:
                    c8:53:56:ef:82:ff:24:6a:b3:fa:60:47:a3:e2:ab:
                    38:43:a8:43:b6:09:a5:b8:71:c8:3e:d3:f1:ec:60:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0A:2C:06:8D:F4:82:D0:A0:FC:63:46:2A:CD:45:00:D3:7F:28:25
            X509v3 Authority Key Identifier:
                keyid:10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:96:b6:3e:d3:d9:16:eb:66:cd:14:37:68:d5:1a:63:97:fa:
         0e:a3:71:54:c6:e7:d9:2a:85:8e:37:00:03:a8:d8:33:6b:d6:
         7c:47:a6:95:d0:da:9a:52:f3:49:25:07:e8:fc:74:35:c1:37:
         c5:cb:76:26:6e:1a:75:01:cc:1f:d0:fb:59:8c:8b:c1:75:3f:
         38:4f:4b:96:d0:f9:8f:5a:68:ee:12:d1:a6:44:bd:5a:ac:c5:
         25:ea:62:25:4a:23:f8:de:7e:27:bb:b3:42:8e:47:08:b0:72:
         83:93:ea:d6:0e:27:51:2c:36:c7:ac:23:9f:d1:f2:61:0c:58:
         4d:ab:fb:37:85:d1:62:65:1b:db:6f:b2:3f:b3:48:b9:0c:63:
         90:ab:27:dc:7b:4a:e1:4a:0b:ad:03:dc:7a:fe:57:15:3d:1e:
         75:eb:d6:8f:55:39:3f:91:d1:3e:39:17:5e:80:81:81:00:cc:
         c7:a0:43:7e:0d:89:af:35:d6:eb:eb:ba:dc:d3:0c:71:16:6d:
         a2:1e:28:59:62:99:58:c2:83:26:1b:23:8e:79:60:0a:bb:f6:
         b7:05:c3:9d:e7:ca:36:e6:e5:49:70:4f:33:61:fe:f7:01:2f:
         c3:e4:5b:02:38:15:90:fa:2c:35:87:90:b2:eb:0d:20:ad:df:
         10:f0:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:21 2025 by rpki-client