Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft
File:                     6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft (raw, json)
Hash identifier:          WBgA6IACmVO9aeIj1IxzQ7L+eAZUPGfDaapHC83ARok=
Subject key identifier:   E3:92:DB:80:A5:97:AE:F2:D4:6F:7F:0E:33:42:F1:D0:6C:68:84:49
Authority key identifier: 64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A
Certificate issuer:       /CN=6468A873ACEBE81402DD4AFEF8F2098C75E0383A
Certificate serial:       5C8E3A777F45843CB34406663AC3519BCDDAF704
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft
Manifest number:          0625
Signing time:             Fri 16 Feb 2024 23:20:17 +0000
Manifest this update:     Fri 16 Feb 2024 23:15:17 +0000
Manifest next update:     Sun 18 Feb 2024 03:18:17 +0000
Files and hashes:         1: 34352e3137382e3131362e302f32322d3234203d3e20323639303138.roa (hash: De0x1EGO2euXgqNaO+pqWAu8Nyfdo2WAP1Q9Q0Uup60=)
                          2: 6468A873ACEBE81402DD4AFEF8F2098C75E0383A.crl (hash: g9vZAqZEM5Xp5ft5NjkdBQV3qlxjaL4PwCOoKvfPCX8=)
                          3: 323830343a356533343a3a2f33322d3334203d3e20323639303138.roa (hash: 8PZg1hOUnfCwkXcmc2PnXkmEoLxjyXrMbmmGOX5jiBc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8e:3a:77:7f:45:84:3c:b3:44:06:66:3a:c3:51:9b:cd:da:f7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6468A873ACEBE81402DD4AFEF8F2098C75E0383A
        Validity
            Not Before: Feb 16 23:15:17 2024 GMT
            Not After : Feb 18 03:18:17 2024 GMT
        Subject: CN=E392DB80A597AEF2D46F7F0E3342F1D06C688449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:24:0f:68:3d:4d:36:4c:a7:1f:9c:3a:20:
                    20:81:c7:b4:10:c9:d6:f1:c8:30:ff:eb:fc:16:9e:
                    43:53:6d:98:ea:2c:58:43:f7:64:c6:f8:a1:80:64:
                    0c:be:06:f6:03:f3:c4:ed:de:49:bd:84:b8:6b:f0:
                    97:95:b7:05:b9:40:79:e7:53:98:cf:61:24:6f:87:
                    80:95:c9:e2:3f:79:7b:c6:ce:97:dc:1e:65:93:f3:
                    e9:54:91:86:a0:04:67:2b:ce:1e:f0:18:4f:f0:f0:
                    56:5a:d5:e5:1e:a9:ce:a2:04:6f:a5:f3:be:3e:29:
                    1f:a4:89:5c:c8:36:9b:36:1d:e6:2e:17:ef:d8:13:
                    05:fb:72:86:8d:7e:b0:cf:e2:81:5e:9f:eb:bd:f9:
                    ac:9f:5d:7a:15:fe:58:29:4c:2b:93:cd:73:b0:da:
                    ec:26:bf:51:8b:bd:64:6c:3f:a0:96:6e:d1:65:0a:
                    e0:bb:d2:0c:84:c8:0d:a2:9d:98:ce:9e:f0:f5:88:
                    84:e9:1f:09:a4:6b:00:f0:c3:46:05:a7:a8:fb:09:
                    06:b2:76:5f:30:94:f4:82:94:51:7a:ab:c5:41:fa:
                    7e:e6:f4:52:6c:e6:31:a3:18:c8:b2:65:c2:a3:2e:
                    75:b0:c7:51:34:66:31:cf:cd:46:3a:07:f6:75:e6:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:92:DB:80:A5:97:AE:F2:D4:6F:7F:0E:33:42:F1:D0:6C:68:84:49
            X509v3 Authority Key Identifier:
                keyid:64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:de:75:55:86:f5:19:46:f4:3a:75:1a:2a:0c:f1:06:64:
         1d:8e:0a:b3:d0:a8:74:11:e8:95:19:5d:fa:67:2d:c5:06:6b:
         78:5d:d2:38:27:16:36:4e:4d:44:c4:67:41:1a:86:28:0b:ee:
         cf:44:73:88:06:f0:8b:07:5b:52:d0:a9:27:7f:52:9e:35:fe:
         0a:80:7e:b3:3a:26:97:c3:8d:7f:17:52:7e:0c:00:67:55:8d:
         ec:55:31:f4:d5:76:3f:f9:c0:47:01:4b:35:72:e4:e4:d6:78:
         24:b8:71:2e:11:ad:86:14:5a:be:9f:60:3e:04:a1:d2:b5:03:
         bf:14:b9:17:4d:09:aa:f4:c3:b0:f7:5d:c1:03:89:6c:fe:5f:
         73:dc:e7:e7:1d:bf:86:ed:00:6c:ba:7b:e0:b6:60:3b:8a:10:
         b8:b9:68:cd:2a:c7:47:ee:b3:fa:f5:4b:6b:d0:f7:60:68:5b:
         03:80:31:fd:5b:32:fa:4b:de:72:5d:08:8c:5f:c5:d7:0f:94:
         d7:52:6e:75:b8:64:ea:32:14:92:25:ef:ad:02:44:02:64:89:
         12:71:70:a5:03:df:c6:94:15:c6:ff:44:96:ae:f2:1e:6f:cc:
         32:1b:5f:5b:70:99:13:22:53:2c:a8:db:37:b4:48:71:9e:25:
         3c:e3:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:24 2025 by rpki-client