Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft
File:                     C977770848F9819D0F9036920A47A3511F957396.mft (raw, json)
Hash identifier:          27sfiBJ4hMvMjoxBuxJWfmg5PfFc3Nc1/FycShcb8eE=
Subject key identifier:   CF:F2:7D:1D:22:00:C7:DC:98:5C:1F:CB:F5:64:6C:6A:68:E5:49:DC
Authority key identifier: C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96
Certificate issuer:       /CN=C977770848F9819D0F9036920A47A3511F957396
Certificate serial:       26AF1A7302A43C1620410793B201DE6D9DE8EE66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft
Manifest number:          C0
Signing time:             Sat 29 Mar 2025 08:24:04 +0000
Manifest this update:     Sat 29 Mar 2025 08:19:04 +0000
Manifest next update:     Sun 30 Mar 2025 11:02:04 +0000
Files and hashes:         1: 3136382e3139342e3231322e302f32322d3332203d3e20323635343039.roa (hash: FKMFhqlRbB2vptNoZ5ISDZt8Ocsa8IXQNUDgS7GJILE=)
                          2: C977770848F9819D0F9036920A47A3511F957396.crl (hash: GWxiq8WvHqz2Q7OVPDhrbGhCGcCcBSEABUgfF1lC0C4=)
                          3: 323830343a333361343a3a2f33322d313238203d3e20323635343039.roa (hash: Z0mxq+KMIM77xH2xaACJw59ncj0acHZYZpEzjIJmOHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:1a:73:02:a4:3c:16:20:41:07:93:b2:01:de:6d:9d:e8:ee:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C977770848F9819D0F9036920A47A3511F957396
        Validity
            Not Before: Mar 29 08:19:04 2025 GMT
            Not After : Mar 30 11:02:04 2025 GMT
        Subject: CN=CFF27D1D2200C7DC985C1FCBF5646C6A68E549DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:6a:cf:1b:ab:18:98:49:21:d0:a0:f4:ea:
                    54:c6:08:9d:b8:9c:2c:71:db:f3:e9:0d:5e:f5:7f:
                    88:17:f3:57:8e:23:2a:41:94:eb:29:69:77:ba:1a:
                    82:4a:f2:f5:1f:39:e5:4e:36:b3:01:01:8d:2c:71:
                    70:83:7d:a0:a2:38:53:81:cc:a0:c5:c2:5b:89:a8:
                    cd:35:ed:79:94:76:35:53:39:70:80:f3:4f:3b:83:
                    38:09:8a:a1:32:24:0d:c3:77:67:41:f8:b6:ea:0f:
                    dc:61:00:ff:f0:bf:87:79:25:ff:80:e1:8c:1a:82:
                    81:bf:7d:89:e5:38:03:5f:83:d5:8a:91:cc:4a:91:
                    73:54:db:69:61:82:57:96:70:44:06:b3:48:59:3f:
                    6a:aa:32:c8:cb:5a:95:76:c1:a9:3c:80:d8:b9:ca:
                    80:7b:e2:27:b0:d5:cc:c4:46:6d:4c:33:fe:3d:b1:
                    43:5c:66:c5:09:0f:b9:95:8c:fc:cd:61:f8:3e:8d:
                    48:2d:dc:2f:6e:d1:dc:7f:a7:0d:b8:70:62:ad:c3:
                    7c:c0:b0:49:30:3e:0c:e4:6d:64:41:b3:00:65:72:
                    85:7c:eb:2b:19:2a:74:14:9e:8a:ca:04:3c:8f:a3:
                    23:f2:87:05:86:11:02:7a:34:50:38:db:70:d8:e3:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F2:7D:1D:22:00:C7:DC:98:5C:1F:CB:F5:64:6C:6A:68:E5:49:DC
            X509v3 Authority Key Identifier:
                keyid:C9:77:77:08:48:F9:81:9D:0F:90:36:92:0A:47:A3:51:1F:95:73:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C977770848F9819D0F9036920A47A3511F957396.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmHXQDxDRjoaseJTdx9LYWJMhnwMpWZbVhH8eibCHfv/0/C977770848F9819D0F9036920A47A3511F957396.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:06:ac:4c:ca:a2:a1:64:18:6f:36:bb:d7:88:2e:c6:c7:aa:
         ef:8a:dd:66:24:2e:04:4a:03:02:b8:46:af:a6:99:7d:36:79:
         46:cc:37:0d:da:a7:21:07:2f:92:4e:19:27:be:1f:d0:d6:e1:
         70:63:ce:ff:2d:70:9c:5e:25:23:18:c8:1c:69:ca:31:cb:73:
         1b:ec:d4:11:42:37:11:09:b8:a1:f6:3a:3e:3b:cd:e5:3f:7f:
         e0:50:64:1d:18:c2:95:99:35:de:86:69:49:a8:60:ac:5e:80:
         5a:ba:c8:80:78:63:0d:5a:f3:a0:a2:92:b7:a5:3f:c8:a4:d5:
         02:7b:72:e0:50:70:8e:75:90:89:b4:36:fe:c9:e4:22:32:f9:
         0e:12:58:0f:64:8d:2d:f0:fc:eb:ab:eb:49:d7:24:f0:31:b6:
         7d:5c:a7:11:90:a0:6e:af:4a:c5:d8:8d:51:25:49:fd:3f:4a:
         9d:55:72:b4:bd:46:45:36:0a:d2:30:65:d3:99:c0:f8:0b:62:
         db:60:dc:dc:6d:b0:d6:d3:12:8c:0b:e8:a1:6a:0a:98:58:b7:
         e2:f7:0b:db:95:36:38:6c:51:71:36:0b:67:19:58:c1:4e:68:
         5c:b3:fc:55:a6:07:da:ad:33:39:db:6d:1a:8f:12:fc:8b:15:
         35:ed:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:53:32 2025 by rpki-client