Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.mft
File:                     DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.mft (raw, json)
Hash identifier:          M9Ic3AVSZsLWDHh448DtEPUt54C1RsuDEfBVXK2dSAw=
Subject key identifier:   AB:C3:CB:F5:A5:20:9F:B5:83:73:24:46:0E:15:B8:6D:EA:6C:EF:1E
Authority key identifier: DD:28:BE:EF:4B:DE:C7:76:E5:28:7F:69:FE:5C:7F:F6:9B:3C:E1:0D
Certificate issuer:       /CN=DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D
Certificate serial:       2ACA69F388547EAAAB658D81EA10AA02D9777C63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.mft
Manifest number:          A2
Signing time:             Wed 09 Nov 2022 13:30:41 +0000
Manifest this update:     Wed 09 Nov 2022 13:25:41 +0000
Manifest next update:     Thu 10 Nov 2022 14:41:41 +0000
Files and hashes:         1: 323830343a343832633a3a2f33322d3336203d3e20323637313032.roa (hash: KpwolOHhTTmevf4Io4kYHPmt/9VCxsPPmi677P1P2uM=)
                          2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: I+sk83iBVXyZ1Xd0vVyuhRRHQNjGhXoQ+0y1kE1pEko=)
                          3: DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.crl (hash: VTB06buYHeXL9uN2pqSnQPkB3eofPQ4v0F32ZM+XI00=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ca:69:f3:88:54:7e:aa:ab:65:8d:81:ea:10:aa:02:d9:77:7c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D
        Validity
            Not Before: Nov  9 13:25:41 2022 GMT
            Not After : Nov 10 14:41:41 2022 GMT
        Subject: CN=ABC3CBF5A5209FB5837324460E15B86DEA6CEF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:62:39:d9:be:25:fa:fc:09:fe:3d:1e:49:fe:
                    bd:c9:80:5a:44:c7:f9:55:3e:b2:2f:67:24:f0:f7:
                    ef:6f:73:91:ef:b5:42:53:62:2b:ba:81:92:0a:9e:
                    17:2d:5c:ef:18:3a:fe:46:00:83:bb:03:dd:b8:06:
                    1d:eb:9a:0c:3a:e7:21:7f:43:ab:08:b2:ba:c9:04:
                    4e:31:ff:90:12:04:b8:c6:d0:c6:33:ef:46:24:ee:
                    a1:ea:ef:56:bb:d3:58:4c:09:db:89:86:5d:e4:10:
                    29:a5:8c:bc:4d:03:ab:a3:35:5a:d6:4b:05:cf:6b:
                    b4:c0:4a:2b:eb:05:91:db:7a:2f:27:4c:34:f2:5a:
                    f4:41:b3:78:2c:44:17:d1:6a:1b:fc:2b:c2:1f:e1:
                    20:5c:bb:91:11:2d:4b:4b:11:e6:be:b4:50:33:ed:
                    85:12:fb:1f:ed:7d:33:ec:7e:88:b8:0e:fb:7f:08:
                    9f:80:5a:cf:15:12:d1:f3:93:c1:4c:cf:49:67:80:
                    cb:0f:30:81:32:d7:8e:4c:cb:63:a1:4d:23:84:39:
                    de:9a:a1:c4:d6:67:78:ff:b7:b2:54:14:bc:e6:03:
                    bd:dc:c9:a8:84:d4:9e:39:ab:2f:a9:47:58:56:71:
                    9b:c7:62:43:7b:4c:86:22:81:01:ab:55:7f:6e:68:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C3:CB:F5:A5:20:9F:B5:83:73:24:46:0E:15:B8:6D:EA:6C:EF:1E
            X509v3 Authority Key Identifier:
                keyid:DD:28:BE:EF:4B:DE:C7:76:E5:28:7F:69:FE:5C:7F:F6:9B:3C:E1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/0/DD28BEEF4BDEC776E5287F69FE5C7FF69B3CE10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:1f:19:da:a7:c5:ab:dd:06:3e:b1:60:3b:db:4d:98:bc:
         20:aa:c9:7b:e9:0a:25:49:32:55:65:6b:61:0c:3a:43:05:a6:
         43:10:66:a1:02:f3:a5:ac:bd:1d:1e:c3:da:d2:12:17:23:1e:
         75:4d:ec:5e:32:04:9f:20:63:8d:24:9f:e0:6a:73:73:60:31:
         82:87:04:4a:01:be:c6:fc:16:10:15:f7:f8:6c:9e:d6:b5:2d:
         29:b6:6c:3a:5e:e9:5c:2e:db:d5:03:5c:26:03:76:a9:e9:d2:
         42:44:d0:68:5a:8d:01:ee:8c:ef:c7:f7:be:a2:75:ec:84:1e:
         82:6c:8b:46:d9:24:5a:8d:6e:50:4d:85:a2:16:28:39:75:3c:
         de:03:46:ea:7f:73:1c:42:f3:b3:ea:7f:c5:02:8b:7f:f2:99:
         98:64:2b:2d:f0:fe:7e:79:fd:f8:ee:6e:41:c0:ec:c4:99:31:
         a6:ae:98:1b:52:bd:e6:b5:95:4f:2c:04:c1:ad:74:7f:17:70:
         ca:ca:ff:6d:47:1e:bd:94:eb:66:34:28:81:c5:7d:f8:3d:0b:
         d2:8e:86:56:04:1d:7f:68:12:e0:92:99:e6:c8:03:32:bc:84:
         08:4e:e4:60:e5:cb:af:de:23:6a:8b:88:19:3a:15:d9:db:9a:
         9a:dd:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 19:20:09 2025 by rpki-client