Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft
File:                     02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft (raw, json)
Hash identifier:          Jr2WgkIS07UnuWBYnDVeE5OT458Bg0/jD8URBQsXtaA=
Subject key identifier:   7A:8F:A7:D5:62:9C:C1:99:DF:5E:F8:0B:25:3C:DF:36:1C:47:86:78
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Certificate issuer:       /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial:       5AE19C624BBD2B101F2E8F46248C258302D7ECB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft
Manifest number:          27
Signing time:             Mon 17 Feb 2025 19:59:38 +0000
Manifest this update:     Mon 17 Feb 2025 19:54:38 +0000
Manifest next update:     Tue 18 Feb 2025 23:21:38 +0000
Files and hashes:         1: 323830343a316564633a3a2f33322d313238203d3e20323634343530.roa (hash: qmZ8k+YsAPbLlBbEC1YfgyNwDKBhpqWSHLFQ3iu+V98=)
                          2: 02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl (hash: igvXGjMNI07LIu8vbKBlxwUwV0mmy3QMIzOAVPd6Wic=)
                          3: 3133312e3235352e33362e302f32322d3332203d3e20323634343530.roa (hash: jEhYBJOWIAdnaCsDVdSqqB4Lzzi5Z9RP6lJ7+vO8PQQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e1:9c:62:4b:bd:2b:10:1f:2e:8f:46:24:8c:25:83:02:d7:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
        Validity
            Not Before: Feb 17 19:54:38 2025 GMT
            Not After : Feb 18 23:21:38 2025 GMT
        Subject: CN=7A8FA7D5629CC199DF5EF80B253CDF361C478678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:08:5b:ae:7f:c3:14:69:b1:8c:17:10:21:
                    63:6d:ad:05:df:6b:ef:df:bf:93:65:93:9e:23:87:
                    e4:7d:6c:32:c6:de:33:d2:ec:e6:07:6d:42:49:c1:
                    75:54:f8:8b:ff:41:bb:53:ff:69:5b:ca:fa:e2:c7:
                    2b:a2:89:e3:d7:aa:f5:b9:33:44:1b:41:f3:f0:3d:
                    14:48:28:c6:d2:5e:26:15:d2:c8:26:79:56:75:f3:
                    cf:e9:f6:2c:30:ac:e3:8a:a9:60:76:75:3d:1e:de:
                    e9:87:4c:c9:b2:14:13:21:00:2a:9e:c4:87:ce:86:
                    ac:bb:cf:a6:a9:7f:f4:d5:c6:97:97:5d:c9:88:97:
                    ca:9b:52:e2:f4:b4:cc:dd:22:ae:a8:4b:ac:24:aa:
                    4b:ac:60:60:32:46:b5:d0:20:c9:cf:72:c6:4e:e5:
                    21:47:dc:d3:62:ac:9c:71:52:7d:1e:a3:21:d9:58:
                    34:f5:f9:aa:15:66:7f:68:45:6e:4b:4b:d7:d9:61:
                    45:27:d4:46:77:a9:0f:4e:4e:93:83:30:3f:ce:37:
                    be:f2:eb:5d:1f:e6:ea:0c:94:48:dd:f7:86:da:28:
                    0a:5e:92:c4:be:cb:fd:3e:9f:fe:22:78:1a:4b:b0:
                    68:bd:52:80:40:4c:d3:47:0c:88:6a:46:1b:f3:72:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:A7:D5:62:9C:C1:99:DF:5E:F8:0B:25:3C:DF:36:1C:47:86:78
            X509v3 Authority Key Identifier:
                keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b9:38:04:99:d6:91:0c:0a:cc:8a:44:d1:40:47:74:ad:a2:
         a5:02:c9:78:5e:ef:f5:6f:4c:6e:d1:b0:86:24:e5:67:7c:16:
         16:3a:e8:88:73:93:e6:05:3a:b2:57:0c:80:ed:46:5a:ce:b1:
         50:2b:f8:84:68:16:29:05:e1:0c:47:96:cb:13:92:3b:bd:92:
         ef:00:38:33:9c:f1:d3:9f:28:16:ab:5c:77:a1:18:77:96:41:
         60:07:54:70:3e:70:31:6c:05:12:77:94:04:59:0a:00:87:17:
         5a:ba:ef:c1:48:9c:bd:fe:26:49:e8:9b:cc:be:46:e9:a6:09:
         33:e9:a4:18:2d:1f:e0:5c:c8:e4:51:23:93:24:60:f5:26:19:
         97:d2:70:29:9b:3e:0b:02:3d:62:79:06:83:cb:68:1d:96:fd:
         cd:5f:1d:8d:5d:e7:78:cb:f8:f4:53:d7:05:9e:7f:b8:25:13:
         f0:69:3a:d3:9c:22:7d:6e:1e:04:74:ca:a2:f1:39:bf:5d:1c:
         84:c8:49:99:b1:5c:10:72:47:75:e0:14:f1:04:89:74:65:41:
         86:24:28:2d:39:5e:8c:dc:50:ad:0b:18:84:49:1d:93:34:02:
         96:90:38:17:db:43:ad:06:be:3f:90:68:15:63:71:66:02:83:
         cb:3a:e4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:41 2025 by rpki-client