Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
File:                     368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft (raw, json)
Hash identifier:          GvI/Ssa/fNAeN+aBs5hLh9KTEkQJ8ZY6+0f2kgm/6IE=
Subject key identifier:   C9:D2:57:DE:B9:05:74:29:FF:70:43:F9:43:02:E7:C6:AF:8F:C9:0D
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       08B123B04B717918E48F64A1CDAB6CE14DB31DAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
Manifest number:          021C
Signing time:             Sat 29 Mar 2025 02:40:00 +0000
Manifest this update:     Sat 29 Mar 2025 02:35:00 +0000
Manifest next update:     Sun 30 Mar 2025 02:40:00 +0000
Files and hashes:         1: 368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl (hash: ysgiQX+SmoH7nWtqh8JmsJXK+gS3e+EGarTxLbqwpMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b1:23:b0:4b:71:79:18:e4:8f:64:a1:cd:ab:6c:e1:4d:b3:1d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Mar 29 02:35:00 2025 GMT
            Not After : Apr  5 02:40:00 2025 GMT
        Subject: CN=3082010A0282010100B7497863601688BD17D3337F9B32578730C73E8F08F6395AC046B44D09BBD0940D347CFD14FAA827B3EC071E74477941FB2F8BE7753C7B8DFCF6AA48DA6AD0C46D85F246BF188DA6F323608CB9632A229E928C33190863A13C8796F4F70DA27778D3EC7877A2904DA509CFEEE7FAE574C6106FC56BEA0BD2A3D8DD8738D517690222D15DAE88522E9A47A98BCC0D0AF0FC9E24E7177ED14F26C8C0CB0D92692EF706361B61C6448CE9040A58A645F9DF7CDECDAAEB06134A5D1D83F956DE2973A09A22170F14C945692D727439AF7F6CC8892C82E2C69B88F86F3A2C55A139A12F5FBD071FDB15FA836B887FEC6A12A4696F7486ACA238DFCD3EF1BF796BF55B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:78:63:60:16:88:bd:17:d3:33:7f:9b:32:
                    57:87:30:c7:3e:8f:08:f6:39:5a:c0:46:b4:4d:09:
                    bb:d0:94:0d:34:7c:fd:14:fa:a8:27:b3:ec:07:1e:
                    74:47:79:41:fb:2f:8b:e7:75:3c:7b:8d:fc:f6:aa:
                    48:da:6a:d0:c4:6d:85:f2:46:bf:18:8d:a6:f3:23:
                    60:8c:b9:63:2a:22:9e:92:8c:33:19:08:63:a1:3c:
                    87:96:f4:f7:0d:a2:77:78:d3:ec:78:77:a2:90:4d:
                    a5:09:cf:ee:e7:fa:e5:74:c6:10:6f:c5:6b:ea:0b:
                    d2:a3:d8:dd:87:38:d5:17:69:02:22:d1:5d:ae:88:
                    52:2e:9a:47:a9:8b:cc:0d:0a:f0:fc:9e:24:e7:17:
                    7e:d1:4f:26:c8:c0:cb:0d:92:69:2e:f7:06:36:1b:
                    61:c6:44:8c:e9:04:0a:58:a6:45:f9:df:7c:de:cd:
                    aa:eb:06:13:4a:5d:1d:83:f9:56:de:29:73:a0:9a:
                    22:17:0f:14:c9:45:69:2d:72:74:39:af:7f:6c:c8:
                    89:2c:82:e2:c6:9b:88:f8:6f:3a:2c:55:a1:39:a1:
                    2f:5f:bd:07:1f:db:15:fa:83:6b:88:7f:ec:6a:12:
                    a4:69:6f:74:86:ac:a2:38:df:cd:3e:f1:bf:79:6b:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D2:57:DE:B9:05:74:29:FF:70:43:F9:43:02:E7:C6:AF:8F:C9:0D
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:d1:98:f5:f7:bb:40:42:81:5d:37:00:c1:3f:18:2a:5a:
         04:b0:6d:1e:89:44:a0:3a:14:3f:90:fa:81:0b:0a:e0:21:2b:
         17:ea:0e:a3:bb:f0:fc:03:d0:9e:66:ae:2f:2b:ef:96:7c:57:
         39:b5:34:fd:97:f8:2c:b9:2f:ce:3f:5f:4a:72:c5:6b:f3:5e:
         8a:68:32:ad:09:56:ee:47:c9:11:97:e4:03:86:5b:fd:70:4f:
         a8:c1:48:34:77:a1:a7:30:61:f9:3a:09:17:72:92:28:97:d2:
         16:ab:42:ea:29:3f:a0:7e:68:a4:9c:8e:f0:07:f0:c0:d0:92:
         91:cc:0b:14:99:ba:e9:a2:78:3b:86:b2:1d:3d:e1:3a:52:f4:
         a7:aa:5b:1c:f4:25:08:5f:fb:f9:9a:77:10:92:d8:13:eb:c6:
         40:cf:14:40:cd:30:cb:ad:38:48:32:52:1d:a3:d1:8b:b6:0b:
         fb:fb:ab:3b:d9:1a:bf:cf:5c:18:96:8f:1f:4d:02:18:14:92:
         ed:69:31:58:fa:7b:85:79:0e:50:71:05:91:1f:55:de:48:be:
         4c:1f:24:d1:95:f9:1c:ab:7e:0a:b6:ed:34:54:dd:00:eb:3d:
         38:c4:88:53:b6:26:88:47:ce:99:e0:2f:00:25:15:af:19:e7:
         2b:83:18:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:34:19 2025 by rpki-client