Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/2D57DC568E3C8E17BB6B774884F023141D642273.mft
File:                     2D57DC568E3C8E17BB6B774884F023141D642273.mft (raw, json)
Hash identifier:          mAk+7rGDNYrOJ5f4Tjq4YIPxYl1gfVyQdBArdUAPvvE=
Subject key identifier:   94:34:4A:CF:D0:E4:67:8D:B3:80:7C:88:CC:E8:15:B7:F3:29:2A:77
Authority key identifier: 2D:57:DC:56:8E:3C:8E:17:BB:6B:77:48:84:F0:23:14:1D:64:22:73
Certificate issuer:       /CN=2D57DC568E3C8E17BB6B774884F023141D642273
Certificate serial:       4CB0D69E11137085D744A892870C5A19202EA0B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D57DC568E3C8E17BB6B774884F023141D642273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/2D57DC568E3C8E17BB6B774884F023141D642273.mft
Manifest number:          03
Signing time:             Mon 23 Dec 2024 16:12:19 +0000
Manifest this update:     Mon 23 Dec 2024 16:07:19 +0000
Manifest next update:     Tue 24 Dec 2024 19:34:19 +0000
Files and hashes:         1: 2D57DC568E3C8E17BB6B774884F023141D642273.crl (hash: qAD1rwe/okukSIRjzs4eAsvYTDm6BrQ+djTZGNIolAE=)
                          2: 3137372e33362e37362e302f32322d3332203d3e20323731323136.roa (hash: X++XoesRR6kaJYnDRQWeMJAF/lCE7MEaaBshVA1ZhXg=)
                          3: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: ukZqXKoQcclAXuZlDpIwcL/rCgFva0XgJzESVseZ5U0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b0:d6:9e:11:13:70:85:d7:44:a8:92:87:0c:5a:19:20:2e:a0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D57DC568E3C8E17BB6B774884F023141D642273
        Validity
            Not Before: Dec 23 16:07:19 2024 GMT
            Not After : Dec 24 19:34:19 2024 GMT
        Subject: CN=94344ACFD0E4678DB3807C88CCE815B7F3292A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:71:b8:df:6b:ee:c5:38:68:4e:61:8b:31:
                    1d:7b:26:be:97:cd:8d:16:7e:9f:31:6d:2f:15:17:
                    8b:55:cd:eb:3e:19:26:fc:7e:fc:73:9e:86:8f:81:
                    09:45:96:ba:b3:44:18:78:73:3f:c7:44:b8:bd:41:
                    2d:93:7f:ef:9e:db:3f:f4:9c:1d:63:7c:f6:84:9a:
                    98:94:67:87:d2:a1:22:63:f9:0c:02:3a:bd:8b:8d:
                    6e:a2:24:d6:9c:3d:d4:e4:62:fb:b9:d9:68:86:11:
                    19:1b:45:c1:f9:ac:9a:6f:58:8d:60:2a:5d:08:3c:
                    74:7a:d6:26:2f:a2:49:cc:b0:46:9c:29:10:a3:90:
                    85:5b:87:4b:4f:ae:cc:aa:32:1d:7b:d0:41:4d:86:
                    07:35:15:a1:04:1e:51:f8:ca:90:ee:01:00:cd:4e:
                    08:54:84:c4:c8:61:fd:47:96:d7:7c:41:94:de:99:
                    cd:24:ae:4e:f9:e1:d7:a5:82:5d:7c:f5:ea:f2:a4:
                    df:8d:0a:f1:4a:3c:e4:80:3c:10:53:80:7f:b0:a7:
                    48:87:ae:73:20:fe:82:87:33:b9:84:b9:b0:61:ca:
                    18:97:c7:53:c5:2d:11:41:db:9a:ea:27:4e:ff:13:
                    53:42:ed:53:2b:63:3e:e5:33:71:ae:62:4a:5c:e4:
                    3e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:34:4A:CF:D0:E4:67:8D:B3:80:7C:88:CC:E8:15:B7:F3:29:2A:77
            X509v3 Authority Key Identifier:
                keyid:2D:57:DC:56:8E:3C:8E:17:BB:6B:77:48:84:F0:23:14:1D:64:22:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/2D57DC568E3C8E17BB6B774884F023141D642273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D57DC568E3C8E17BB6B774884F023141D642273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/2D57DC568E3C8E17BB6B774884F023141D642273.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:16:27:7d:90:4c:ac:55:ef:d0:a2:82:26:c2:f1:e9:aa:da:
         b9:b5:2d:5e:35:36:05:b7:f9:56:df:3d:9b:8f:be:27:02:91:
         66:41:da:92:d4:33:b9:26:07:24:18:92:ef:13:fb:14:dc:c1:
         e3:96:38:dc:db:47:b8:3a:be:59:f7:cd:ab:c0:33:63:86:e3:
         f4:1e:bc:c6:04:68:2c:45:54:45:f0:61:bd:27:17:ba:aa:bf:
         06:ea:bb:cb:c5:0b:63:f1:99:71:64:6b:b0:56:6e:69:4f:fa:
         78:13:90:b9:50:c7:92:bc:89:b5:e0:c3:56:71:85:87:f1:41:
         f3:a9:b9:71:9c:3d:97:bf:af:ac:d4:d1:54:fd:0b:a5:99:74:
         2f:60:40:ef:0b:f5:09:01:46:07:37:6b:cb:c2:03:26:96:2a:
         a0:f2:62:99:eb:58:71:44:f4:71:1f:98:fe:73:cc:12:ab:05:
         05:55:a6:21:1f:a1:8f:36:59:c4:ba:f1:f5:87:03:07:bf:22:
         48:ef:e4:88:79:83:8c:72:ae:14:70:25:3f:1c:79:25:4f:ca:
         e1:8b:13:c9:a0:3a:3f:f0:30:f6:2b:a4:99:57:0d:6e:e3:fb:
         9f:eb:68:45:45:a9:05:15:cf:0d:00:3f:a4:73:0f:5d:60:ff:
         cb:ac:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:29 2025 by rpki-client