Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.mft
File:                     28274B18A146B4236FC8543D9D65B0C9F6C657E5.mft (raw, json)
Hash identifier:          y4dSnyT8WPGGdrNzD5vrkrJwkdYx6+PyHCYW3WznNks=
Subject key identifier:   51:7B:4C:DD:04:55:2D:BB:48:31:AE:0A:CC:D9:26:06:0D:84:E0:5E
Authority key identifier: 28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5
Certificate issuer:       /CN=28274B18A146B4236FC8543D9D65B0C9F6C657E5
Certificate serial:       056012F08388E86823B1FE1C47ACA3CA1ADF07D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.mft
Manifest number:          13
Signing time:             Sun 02 Feb 2025 02:47:53 +0000
Manifest this update:     Sun 02 Feb 2025 02:42:53 +0000
Manifest next update:     Mon 03 Feb 2025 06:27:53 +0000
Files and hashes:         1: 28274B18A146B4236FC8543D9D65B0C9F6C657E5.crl (hash: VfzumPEVPCmiZyutcmXdkg2c4HaslJCrnxl51gfndxw=)
                          2: 34352e362e3138302e302f32322d3332203d3e20323636323332.roa (hash: FgtZhk3lLL06wSEPCCndG11UK/VFSJQpbDsYLZGqrU4=)
                          3: 323830343a336363303a3a2f33322d313238203d3e20323636323332.roa (hash: +OHGvWUVS0SC1MV4NZOm5eCcm25q9n9u5ywHdGlm8/E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:60:12:f0:83:88:e8:68:23:b1:fe:1c:47:ac:a3:ca:1a:df:07:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28274B18A146B4236FC8543D9D65B0C9F6C657E5
        Validity
            Not Before: Feb  2 02:42:53 2025 GMT
            Not After : Feb  3 06:27:53 2025 GMT
        Subject: CN=517B4CDD04552DBB4831AE0ACCD926060D84E05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:76:52:05:e7:6e:5d:d5:38:38:9a:a6:31:
                    5c:32:79:0f:d0:64:f1:72:ea:7a:0a:4c:39:e0:40:
                    53:f1:23:54:a3:b6:0e:c3:06:d7:04:99:2c:88:8c:
                    df:e1:21:a2:e2:7c:3a:60:9e:ac:2a:35:af:7c:61:
                    e9:0a:4a:6b:ac:26:37:8b:f9:5b:39:36:e4:a2:96:
                    51:bb:31:19:b5:75:bb:16:40:cb:ab:ab:7a:b8:44:
                    d9:81:9b:ef:c9:cf:04:8b:7f:6e:69:ff:60:cf:2c:
                    74:e0:fd:95:69:4c:9b:bb:e5:85:04:38:3a:6f:4b:
                    e5:69:34:c8:ed:ed:be:da:f7:23:78:f9:e0:36:5c:
                    60:5e:f6:ef:91:a0:19:e6:8d:ca:10:73:db:51:24:
                    60:52:59:62:8d:ef:54:11:96:b5:23:72:e0:48:bd:
                    76:0b:e4:d8:30:e7:4c:bb:1b:df:64:3a:79:57:46:
                    b5:83:8b:1f:ff:d0:74:24:53:7d:b8:1f:04:97:fe:
                    b0:04:fb:6e:63:da:64:0a:9d:3c:a9:b5:63:b4:1a:
                    4d:08:8a:dc:06:ae:de:7a:16:22:2b:be:b6:ff:44:
                    5d:e6:47:eb:84:e5:0f:40:93:89:52:ac:4f:51:c8:
                    e4:f9:cd:48:13:4f:77:4d:72:f6:a0:d2:01:a4:5e:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7B:4C:DD:04:55:2D:BB:48:31:AE:0A:CC:D9:26:06:0D:84:E0:5E
            X509v3 Authority Key Identifier:
                keyid:28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cd:4d:42:0b:7c:68:c3:b6:3d:64:85:09:eb:ad:af:26:72:
         df:6b:d6:fd:30:68:28:49:54:ea:36:9c:8b:72:06:20:a0:fe:
         80:f1:69:d3:63:eb:0f:c6:17:15:3c:49:ad:97:d8:50:3d:4a:
         95:da:c1:80:ba:35:bf:2d:38:43:b1:8b:2f:c0:e9:40:32:b8:
         39:08:1e:34:4d:5f:29:e4:b7:65:b7:61:ef:f3:96:39:b5:4f:
         d8:69:67:fa:b7:68:5a:b3:ce:c0:d9:70:41:bb:93:0f:73:59:
         fb:a9:93:82:56:33:fa:bc:d2:03:bd:50:01:99:e5:00:df:6f:
         ed:d7:41:73:02:8c:88:1b:37:bc:de:af:a3:ad:fe:07:c5:79:
         6b:67:53:fe:f1:47:ba:cf:19:77:c6:8b:1e:6f:87:5d:be:dc:
         cf:e4:78:c6:9f:15:ce:95:7b:65:8d:4a:df:e3:a4:8d:d3:b3:
         e7:3f:1b:18:68:a9:e9:2d:e6:7f:fc:0e:c5:a9:f4:7b:d8:d3:
         9f:7e:45:b4:fa:14:0d:7f:86:2e:48:0b:ae:a0:17:83:57:72:
         de:6d:fe:d7:bb:2b:b1:d3:7e:0f:0f:70:05:6d:39:4c:65:8f:
         f1:ac:29:fd:4f:e6:44:1a:94:ab:38:f1:02:a0:6c:68:a9:c7:
         ab:3e:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:56 2025 by rpki-client