Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft
File:                     0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft (raw, json)
Hash identifier:          kLdIviJTQTRgaGNeBe1N0WCyecgswcCbgjzczTCW9gU=
Subject key identifier:   19:6B:8E:E2:CA:84:6B:F3:53:24:E0:D1:9F:86:72:80:D1:E1:09:44
Authority key identifier: 0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A
Certificate issuer:       /CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
Certificate serial:       21590FBE82ED42D21FF37F217EF12F4C3EDE82F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft
Manifest number:          D1
Signing time:             Mon 02 Sep 2024 16:00:47 +0000
Manifest this update:     Mon 02 Sep 2024 15:55:47 +0000
Manifest next update:     Tue 03 Sep 2024 19:22:47 +0000
Files and hashes:         1: 323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (hash: bO8o8ZrrzG8vDvL6az02hYKKqgUNF1nnS53FB0WhzXM=)
                          2: 0FBDD3F993E0EB0555216070730CE01AE2863A6A.crl (hash: OsVmjj7mEqfMoLDmFJfKm3fURG6eu1gvc8KuP0nksE8=)
                          3: 3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa (hash: EYBucmWtx6R+Joh7WBZe+qFjNHAMfid0JkU65ILilB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:0f:be:82:ed:42:d2:1f:f3:7f:21:7e:f1:2f:4c:3e:de:82:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
        Validity
            Not Before: Sep  2 15:55:47 2024 GMT
            Not After : Sep  3 19:22:47 2024 GMT
        Subject: CN=196B8EE2CA846BF35324E0D19F867280D1E10944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:93:bf:15:69:31:ce:94:cd:82:72:bd:e6:
                    21:39:e6:83:a5:4a:d4:82:2d:72:e3:0f:5c:10:d7:
                    90:7e:9a:0f:24:c9:fe:5b:35:fb:c8:c6:99:01:38:
                    cd:10:14:6b:e0:87:81:4c:b7:14:4d:00:97:2b:97:
                    22:24:45:a6:1b:fb:ac:74:a1:42:23:d5:13:f8:4e:
                    3d:b8:a9:cb:78:64:85:dd:8a:06:b7:3f:a5:9c:a5:
                    d4:5c:2d:40:26:ca:2e:82:b2:51:e8:e7:97:17:2f:
                    9f:10:30:a4:47:4a:02:7b:8b:dc:94:bd:4e:91:88:
                    c3:7b:e5:fd:73:92:9b:a3:f6:c4:42:27:47:17:3e:
                    f9:db:59:cf:de:e1:10:56:77:fd:9e:eb:bc:c8:46:
                    2a:b4:40:ed:61:d4:55:f4:9e:15:12:65:2f:fe:c3:
                    da:fd:5f:8b:fb:56:3d:44:71:08:a7:3f:8c:e2:d0:
                    3e:90:3d:51:2e:dc:11:27:0b:cc:59:d2:16:4e:06:
                    aa:7b:13:1b:2e:03:2c:8f:29:56:6b:69:ee:e8:bd:
                    c7:40:54:26:9b:6e:75:b9:7d:bc:1c:d3:90:37:13:
                    ca:d3:b9:06:ff:2a:2e:f9:16:95:ac:ad:6a:47:8c:
                    65:9f:04:b7:64:e1:a2:3f:93:90:22:52:5a:d0:65:
                    f9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6B:8E:E2:CA:84:6B:F3:53:24:E0:D1:9F:86:72:80:D1:E1:09:44
            X509v3 Authority Key Identifier:
                keyid:0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:be:5b:cc:0c:e1:c9:78:82:06:d1:91:13:47:de:5f:36:
         f6:34:d6:c0:bd:be:e0:aa:91:fb:00:2c:be:ce:33:1f:e8:58:
         ad:ca:7e:e8:63:dc:d1:c3:b8:cd:93:0d:6b:95:7c:56:e9:b3:
         2b:d1:95:9f:86:99:f7:6b:b5:8b:1d:ae:61:d6:3c:b3:30:9f:
         21:ed:14:7a:7e:8f:79:52:da:b3:85:f1:cc:fe:58:3f:d0:ff:
         08:cf:c1:e0:35:13:a5:af:94:81:f2:76:4a:0b:b9:bb:10:c7:
         c9:17:a2:29:31:14:ac:14:0b:01:bf:6b:07:91:46:5e:01:14:
         3a:22:77:a4:30:75:1a:b7:d9:34:79:bc:f2:ec:a4:00:6b:13:
         55:7a:34:32:b8:e4:29:ab:b7:b4:22:86:66:ba:fd:f1:1d:50:
         dd:86:48:72:30:54:0f:1a:dd:51:1f:cd:4f:e9:f0:6e:c1:f4:
         4d:71:ba:95:11:29:78:2c:f3:93:ad:b7:78:1f:92:5c:7c:4e:
         9a:0c:63:f9:dc:90:85:47:d8:b6:08:34:7c:29:20:8a:2f:0a:
         15:f7:e6:cf:4a:ed:c5:fb:bd:0c:15:29:7a:58:44:c8:0f:bc:
         90:ff:d8:90:58:c5:4a:74:e2:41:b9:ee:29:e8:8b:fe:0f:72:
         94:8a:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:50:13 2025 by rpki-client