Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/F8A98F1BD024478F78711C4B65585771418C312C.mft
File:                     F8A98F1BD024478F78711C4B65585771418C312C.mft (raw, json)
Hash identifier:          iF150CsEB1jkemN/D1unJ6HpG7xtcC8uidGQINGBwyw=
Subject key identifier:   9B:FD:D3:09:17:16:4E:CB:7A:87:D6:4B:BC:B0:C4:F8:B6:58:C0:1D
Authority key identifier: F8:A9:8F:1B:D0:24:47:8F:78:71:1C:4B:65:58:57:71:41:8C:31:2C
Certificate issuer:       /CN=F8A98F1BD024478F78711C4B65585771418C312C
Certificate serial:       4D1FAA1FC75DABF29F790501659D46DBFA201C42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8A98F1BD024478F78711C4B65585771418C312C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/F8A98F1BD024478F78711C4B65585771418C312C.mft
Manifest number:          0137
Signing time:             Mon 27 Feb 2023 11:30:13 +0000
Manifest this update:     Mon 27 Feb 2023 11:25:13 +0000
Manifest next update:     Tue 28 Feb 2023 14:13:13 +0000
Files and hashes:         1: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: IWo6p4xxsS2d91Y14TdirXjFaMPkb1moYoVBHelwtQk=)
                          2: F8A98F1BD024478F78711C4B65585771418C312C.crl (hash: 04Z167W3hK4B99MkXXR8ETekb7JoFLbL9pJ/55uyfhg=)
                          3: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: q3aAsySbZ5JePaQc+zHS/Jtns4nRLvWlS82dSOP/eqQ=)
                          4: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: CI9xSS/iKDbh/z9zVsHNRE4Kvau3QvdKo930ZpZ+vpg=)
                          5: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: rESHilT9GMrOGTikW7gWDjymypxB0a5Z0fK9r++JlbU=)
                          6: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: 9CVaQAWOgpKGKizN3CcVM8IH9am01SNH+1qwYK1oGpc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1f:aa:1f:c7:5d:ab:f2:9f:79:05:01:65:9d:46:db:fa:20:1c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A98F1BD024478F78711C4B65585771418C312C
        Validity
            Not Before: Feb 27 11:25:13 2023 GMT
            Not After : Feb 28 14:13:13 2023 GMT
        Subject: CN=9BFDD30917164ECB7A87D64BBCB0C4F8B658C01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:37:c0:e8:84:6c:04:13:81:ea:31:90:85:
                    81:79:41:e2:3f:ac:4b:30:bf:49:21:81:8a:a2:3b:
                    22:65:ed:75:71:ea:8b:46:bd:4e:70:34:88:f7:34:
                    a9:00:10:ad:4a:0c:24:77:55:87:5f:5f:13:f5:0f:
                    85:34:11:ca:8c:c5:6a:f7:77:a8:4c:7f:a0:8c:37:
                    ba:59:35:ea:b3:42:ad:76:76:90:ee:40:35:bc:30:
                    84:6f:f3:54:c6:77:69:cf:ec:1f:45:c2:86:4e:ca:
                    36:47:49:0d:f8:c3:7f:74:7b:35:1b:62:48:db:33:
                    16:9a:d0:3a:3e:50:41:cf:47:b3:9d:45:b3:df:fb:
                    4a:e6:8f:e0:18:0f:5d:bd:7f:83:14:b3:b3:e8:62:
                    c4:6d:0b:a1:32:72:37:04:57:65:c3:8a:fc:89:7a:
                    6e:7f:c5:c9:ba:b8:65:ae:42:c1:8f:98:8b:99:11:
                    55:98:2a:d7:e8:c0:f4:46:4c:c4:8b:2f:30:ee:c6:
                    f4:36:7f:28:5f:7a:06:b1:98:91:cd:59:8e:76:5a:
                    ae:6f:19:65:83:09:68:00:d4:45:69:3a:58:37:0c:
                    c3:a0:6f:a8:63:be:e6:6d:87:65:7b:79:42:8f:f4:
                    e7:79:81:60:d3:1f:74:2a:db:43:d6:ed:5f:82:8b:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FD:D3:09:17:16:4E:CB:7A:87:D6:4B:BC:B0:C4:F8:B6:58:C0:1D
            X509v3 Authority Key Identifier:
                keyid:F8:A9:8F:1B:D0:24:47:8F:78:71:1C:4B:65:58:57:71:41:8C:31:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/F8A98F1BD024478F78711C4B65585771418C312C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8A98F1BD024478F78711C4B65585771418C312C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/F8A98F1BD024478F78711C4B65585771418C312C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c1:46:a4:c0:c9:ec:89:c4:d4:83:19:5f:c3:34:aa:90:ca:
         60:98:8e:69:f5:7f:dc:ba:e4:a3:7b:d8:aa:84:21:ce:21:18:
         fa:7e:d8:fa:eb:cc:2a:75:de:8a:92:57:c0:9e:49:f0:f6:c1:
         45:58:54:05:95:67:fa:37:c0:5c:b5:2e:7a:32:6f:c7:20:83:
         3c:db:0b:ab:3a:02:39:74:c1:34:00:b8:f8:b5:db:4d:0a:0a:
         91:99:20:99:cf:49:0a:1c:bf:96:b9:89:a3:a5:62:97:3a:7c:
         ec:bf:72:d2:32:b2:14:c0:f3:53:75:d0:d8:34:65:b6:d3:23:
         b3:42:56:4b:76:fc:8f:ea:d9:78:30:14:98:12:ad:31:e4:01:
         73:84:6d:25:06:e1:69:51:da:49:52:9f:3d:9a:74:ef:e7:7f:
         b0:a5:f1:5d:23:6c:bf:bf:4e:5e:5c:7b:63:ac:4a:98:80:30:
         54:8f:d5:84:f5:1a:22:bf:14:a4:9c:d5:18:c3:41:01:f6:0e:
         8e:e7:d4:23:b2:7d:f8:9c:42:14:42:cd:9a:22:8d:63:27:0e:
         a6:cb:ff:fd:1d:01:50:bc:38:0e:1b:e5:f4:2c:6a:83:b9:da:
         6d:0f:0d:80:c5:74:cc:f2:86:d1:0e:16:eb:70:73:5d:86:cf:
         8e:7b:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:00 2025 by rpki-client