Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.mft
File:                     1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.mft (raw, json)
Hash identifier:          3orRCC9XnILX9AaCETXUWcA8cOYD7WKa9L9AOHr9V5Y=
Subject key identifier:   F3:87:28:2E:DE:03:12:07:31:0D:33:4A:EC:89:A7:48:1C:07:C2:8A
Authority key identifier: 1E:32:2C:52:FA:6B:F3:3C:FB:31:EF:93:44:56:AE:EA:27:F2:D5:A5
Certificate issuer:       /CN=1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5
Certificate serial:       2DDC36A9441B93D8405A01D883E9B7274BCD4898
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.mft
Manifest number:          FF
Signing time:             Sat 01 Feb 2025 23:32:36 +0000
Manifest this update:     Sat 01 Feb 2025 23:27:36 +0000
Manifest next update:     Mon 03 Feb 2025 00:36:36 +0000
Files and hashes:         1: 323830343a3739303a3a2f33322d3438203d3e203238363533.roa (hash: 0SLVThSQ99K4I/uzwgWTdpzuubGZJUB1Bm7PVxKPcSE=)
                          2: 3230312e37362e3230382e302f32302d3234203d3e203238363533.roa (hash: c46ha4NLrNCL1Cuo55PS+TU3W1I+tnD7RM3kixyjZS4=)
                          3: 1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.crl (hash: CNt/sEKjwlPxu74qmPAUdMlj9vG0n6g9NjGECvfi/mc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:dc:36:a9:44:1b:93:d8:40:5a:01:d8:83:e9:b7:27:4b:cd:48:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5
        Validity
            Not Before: Feb  1 23:27:36 2025 GMT
            Not After : Feb  3 00:36:36 2025 GMT
        Subject: CN=F387282EDE031207310D334AEC89A7481C07C28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:92:93:9d:7e:64:21:a1:78:70:90:b9:ab:
                    a9:91:29:8b:43:4d:d5:a8:c6:36:4f:e0:3b:8b:fc:
                    0a:6f:b6:3e:f3:2d:b1:f6:0b:09:50:4a:04:58:45:
                    21:df:8b:4a:89:7d:15:19:e1:7b:2c:63:9f:8f:59:
                    67:6c:40:ae:12:39:0c:3c:82:6b:90:24:f5:7c:69:
                    2d:08:f2:78:20:c0:09:0a:4e:a8:a6:f9:61:cb:2f:
                    9b:f1:7d:a5:cf:d9:de:d6:49:ad:66:e4:46:16:a4:
                    75:72:90:62:68:f0:5b:71:c7:7c:5f:ca:3a:96:62:
                    76:8b:ab:62:d5:a6:4f:06:a2:63:77:c3:69:26:a1:
                    eb:a6:4d:6b:79:68:aa:a3:43:ec:35:40:ae:d6:d7:
                    6b:6e:07:c1:bd:4b:d0:28:8a:6b:ee:f6:d1:68:38:
                    f0:c6:32:f4:b0:c7:91:29:2c:97:fb:6d:bf:ef:92:
                    99:70:8e:b4:e2:33:0b:cb:34:75:4d:88:62:ff:8c:
                    3f:7e:aa:34:d8:90:32:a0:76:17:20:ef:41:27:d3:
                    7b:7d:aa:01:1b:4f:78:02:61:7c:c9:0c:f3:60:09:
                    ba:aa:bc:86:54:4f:cb:8e:79:03:65:a8:23:a6:62:
                    f9:04:6c:f2:1b:08:e2:46:0c:11:bf:c4:75:11:c1:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:28:2E:DE:03:12:07:31:0D:33:4A:EC:89:A7:48:1C:07:C2:8A
            X509v3 Authority Key Identifier:
                keyid:1E:32:2C:52:FA:6B:F3:3C:FB:31:EF:93:44:56:AE:EA:27:F2:D5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/1E322C52FA6BF33CFB31EF934456AEEA27F2D5A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:87:ec:a0:fc:11:e5:db:12:01:9c:23:42:35:3e:b6:4f:
         10:44:02:fc:07:86:8a:20:e3:1e:7d:6f:81:f5:e9:23:d5:9f:
         1b:24:3b:89:5f:26:7e:21:e8:ed:a9:a5:77:fd:e2:93:8e:3a:
         0a:80:68:9f:58:de:c6:4d:f4:35:22:10:16:d1:ba:e8:45:71:
         69:92:85:9e:98:57:bf:1a:83:20:7a:7d:ed:d3:d7:77:59:86:
         ea:f9:12:b6:ab:c6:2f:57:eb:e0:c0:c5:7a:ef:82:43:99:35:
         e9:47:39:83:ec:14:a1:58:7b:d5:87:b9:d3:1f:01:36:ed:de:
         9a:bf:4a:c2:0d:ed:96:d6:4d:90:52:45:bb:c9:37:52:ea:44:
         40:9e:b6:7d:68:85:b1:f0:65:90:0b:62:85:52:2e:53:77:3e:
         48:87:7f:c7:68:5b:d6:9c:a7:ec:b3:e6:29:7f:ca:7a:7f:03:
         55:65:49:5a:99:f8:31:1e:8f:97:c9:f6:b8:18:db:0d:17:bc:
         54:0f:63:61:f8:9c:c4:41:9f:62:91:a2:69:ff:d0:c3:a5:a7:
         35:92:2f:8a:2a:6f:67:a3:db:42:b6:62:fe:ac:dd:0c:1a:e8:
         a3:ea:9b:c0:fa:a1:5c:41:f5:84:16:6f:9f:98:64:59:da:67:
         47:62:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:56:42 2025 by rpki-client