Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.mft
File:                     D0A7B6545E75499D1FEFA32D015932E50FC824C6.mft (raw, json)
Hash identifier:          G2VwAiaf9Wh27W+x7mMXZtjIT/KtxiD8303YFOySMnc=
Subject key identifier:   40:7B:D8:ED:5E:53:A4:2E:CB:56:6B:32:55:7D:F3:D3:B1:F7:BA:E8
Authority key identifier: D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6
Certificate issuer:       /CN=D0A7B6545E75499D1FEFA32D015932E50FC824C6
Certificate serial:       70E0F2A8886EDC28D279ECEE6519B0FDA39C2865
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.mft
Manifest number:          012B
Signing time:             Mon 23 Jan 2023 07:55:52 +0000
Manifest this update:     Mon 23 Jan 2023 07:50:52 +0000
Manifest next update:     Tue 24 Jan 2023 10:46:52 +0000
Files and hashes:         1: 34352e3233312e3233322e302f32322d3234203d3e20323637323430.roa (hash: EgGY1PnLIDHokEkxZGP+7eLbyrI67LYLULtnN+W77yQ=)
                          2: 323830343a346137303a3a2f33322d3334203d3e20323637323430.roa (hash: Wr54tmEYZczLUTHm71GHpRhC3ofja04YxrFMvaqPyng=)
                          3: D0A7B6545E75499D1FEFA32D015932E50FC824C6.crl (hash: csa3lV0zsBzzEOh9JGT4YUwvIb8kHLqnqcZ/1ygKJiI=)
                          4: 34352e3233312e3233322e302f32322d3232203d3e203532383338.roa (hash: Oy7qiwEDRrhimrReqTXA7uvarrQUfSnngkhXGatmUGo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e0:f2:a8:88:6e:dc:28:d2:79:ec:ee:65:19:b0:fd:a3:9c:28:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A7B6545E75499D1FEFA32D015932E50FC824C6
        Validity
            Not Before: Jan 23 07:50:52 2023 GMT
            Not After : Jan 24 10:46:52 2023 GMT
        Subject: CN=407BD8ED5E53A42ECB566B32557DF3D3B1F7BAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:4f:22:17:dc:b4:b9:d3:76:07:4d:86:29:
                    d4:4d:c2:5a:35:ee:8b:6c:08:69:97:08:df:dd:2d:
                    91:54:21:e8:db:63:3d:27:ee:bd:39:51:3d:12:2c:
                    e9:e3:da:90:cb:d1:cf:f6:58:a7:19:f4:2a:08:29:
                    2c:68:64:25:0b:e9:6d:d6:fc:43:87:33:02:d9:07:
                    41:e5:78:0c:10:36:13:e8:fc:d7:d6:b4:6c:9d:7e:
                    37:32:15:f3:a9:82:dd:ce:3a:58:6d:71:ed:ac:1d:
                    67:51:0f:b9:99:7b:7c:f1:4d:9f:b9:ec:57:9c:e2:
                    21:46:7b:6b:b8:71:e5:21:13:35:71:11:f4:b4:cc:
                    43:4a:59:15:6d:2f:c9:3e:52:ad:89:d9:01:00:88:
                    8a:af:ad:ad:99:57:45:76:06:15:e3:62:84:21:6f:
                    cb:b4:9b:65:52:6e:4f:e8:bc:42:65:fe:24:a4:da:
                    f9:50:c8:e7:66:43:4e:6b:52:e5:3e:5b:4c:ae:0a:
                    7b:bd:7c:d5:0a:10:f0:38:ba:b6:b7:73:18:77:21:
                    d9:4d:d0:ef:75:91:6a:88:66:f1:a3:d2:f0:ae:cf:
                    74:5f:b1:a1:46:c9:ce:af:4c:bd:f2:2b:06:eb:d9:
                    c5:3e:17:74:11:da:d4:cc:77:29:6d:9c:e3:46:ea:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7B:D8:ED:5E:53:A4:2E:CB:56:6B:32:55:7D:F3:D3:B1:F7:BA:E8
            X509v3 Authority Key Identifier:
                keyid:D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:72:b6:b7:ba:75:fd:8b:5a:6a:32:fa:a8:9b:c2:56:65:6a:
         8a:78:31:05:a3:71:4c:b7:a6:a8:35:97:73:32:eb:6d:6c:eb:
         e8:0b:7a:b0:87:8c:32:b5:7c:1a:3a:f3:eb:ba:4a:da:18:42:
         6a:7a:f3:33:24:69:ff:38:cf:cf:d3:b8:19:1b:a9:79:87:d0:
         4c:cb:ac:3a:61:95:3f:ca:5b:9a:bb:7c:b0:24:77:d9:eb:ac:
         60:83:f3:ae:d0:fb:cb:da:f2:ab:99:1e:db:39:b7:9c:30:6f:
         0b:e9:41:d1:08:ff:6e:5c:0c:42:4c:23:69:4c:70:d1:68:01:
         ec:b5:f5:17:58:b9:41:d9:e0:80:f0:30:b6:b1:38:4f:87:13:
         eb:86:fb:4e:75:73:e3:da:63:65:4a:98:54:17:ce:ae:ad:70:
         9f:cf:3a:7a:99:49:75:1f:17:d7:8b:51:4e:14:52:ca:03:67:
         bd:37:b1:a1:74:08:ca:72:24:21:f4:8c:40:ad:24:dd:83:b4:
         bb:34:92:a6:a9:b3:fd:b7:57:b0:31:e8:32:c3:0a:4c:a1:55:
         fe:82:f7:db:8a:a3:77:75:22:04:8c:12:67:91:2f:57:77:a1:
         c0:4a:56:ab:b0:41:af:5b:2a:c5:65:4f:81:aa:8c:0c:3b:a7:
         a6:19:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:58 2025 by rpki-client