Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.mft
File:                     9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.mft (raw, json)
Hash identifier:          j6ZbvHEk6irkHPERN7lRsL5o3qO57MNyY39A/JqA5Pw=
Subject key identifier:   A4:58:73:F3:D4:2A:5D:E4:21:6B:04:F0:7D:B9:18:B8:61:CB:ED:6A
Authority key identifier: 9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9
Certificate issuer:       /CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
Certificate serial:       12C77EC58911C9E00B1CC0F47002BC560A951DEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.mft
Manifest number:          0D
Signing time:             Sat 14 Oct 2023 03:44:34 +0000
Manifest this update:     Sat 14 Oct 2023 03:39:34 +0000
Manifest next update:     Sun 15 Oct 2023 05:49:34 +0000
Files and hashes:         1: 3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa (hash: z91CKfhD7CiOfIiJR6J6AMJmFzXJb+dnAxCOwXXuARQ=)
                          2: 323830343a326166343a3a2f33322d3438203d3e20323635313237.roa (hash: gsUhG3r4cw3YZVdVKCF4B33SjUgVBrlOn+ZnA87LTgM=)
                          3: 9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.crl (hash: 7LJA2hKqsGTmAwZlROD1sFWrQ1DY2UIlsm+9krDaatQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c7:7e:c5:89:11:c9:e0:0b:1c:c0:f4:70:02:bc:56:0a:95:1d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
        Validity
            Not Before: Oct 14 03:39:34 2023 GMT
            Not After : Oct 15 05:49:34 2023 GMT
        Subject: CN=A45873F3D42A5DE4216B04F07DB918B861CBED6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:64:00:5d:4a:03:f9:ee:39:37:99:83:ec:
                    41:5c:b4:d8:67:63:ce:e9:76:4e:fa:04:27:45:f1:
                    04:06:6e:71:13:74:a3:14:e4:97:d3:31:67:d6:f0:
                    52:61:b8:9c:af:24:28:7a:83:e4:2d:ab:53:d7:1f:
                    de:e2:ee:ce:a1:dd:41:16:5b:ea:58:f0:37:8f:5a:
                    3b:fc:c9:ff:84:16:86:74:ec:4c:59:31:ff:b8:32:
                    c1:38:fb:44:c4:4a:f1:f7:97:4e:2d:41:6f:c3:5e:
                    c1:8b:37:c5:98:25:d2:47:23:1e:63:fb:ae:5e:30:
                    c7:1b:e8:49:8b:e3:4b:37:b3:1b:53:d2:eb:b2:ab:
                    8c:56:60:93:bb:db:a7:a6:1a:0f:61:bb:40:e1:7b:
                    af:56:45:80:fe:8d:49:78:64:fc:93:b7:f4:c6:78:
                    86:7f:95:29:1e:31:ca:ca:75:80:95:1b:a4:8e:01:
                    2e:84:c9:79:99:a6:e0:8c:5d:6b:4f:84:a2:1a:b9:
                    ea:56:ca:0d:d3:ce:53:08:a4:38:18:86:10:a4:e5:
                    8e:c3:ec:f8:de:e3:ef:44:e1:9f:13:aa:2b:46:23:
                    22:b4:6d:97:11:d5:eb:d3:8f:de:56:08:1c:f4:56:
                    61:8c:d0:f0:ae:18:54:f5:a8:2d:79:b1:dc:99:90:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:58:73:F3:D4:2A:5D:E4:21:6B:04:F0:7D:B9:18:B8:61:CB:ED:6A
            X509v3 Authority Key Identifier:
                keyid:9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:82:23:64:47:75:80:c8:66:e0:96:8f:88:5b:46:92:98:
         b0:8d:87:ac:8c:24:f2:3f:f4:2b:d6:6c:79:bb:65:7c:e9:8f:
         79:4c:d5:1c:7c:2d:af:ab:2c:f8:2d:f5:1c:8f:2c:b7:e5:21:
         18:2c:71:ba:d1:b3:a5:a1:11:92:27:9e:5a:b2:bf:9e:f9:4b:
         be:a9:73:3f:28:f1:66:f3:5a:33:a2:da:10:a4:7a:47:0d:15:
         a4:a3:3e:8d:16:c7:e8:c3:61:59:ef:85:ba:92:ae:de:4b:e4:
         09:26:c9:3b:eb:6b:ca:2e:a6:3c:9e:d9:94:98:06:20:81:2a:
         61:eb:3c:0d:65:dd:30:6e:0f:d8:36:5e:f8:62:ea:d0:bb:76:
         f5:5a:b3:e5:da:fc:64:57:bb:7c:9c:37:3f:0b:b6:8f:15:27:
         72:a7:12:e5:ce:28:c5:14:91:c4:e0:b2:3a:a9:41:b1:15:3b:
         d6:91:bf:cb:e7:75:57:12:2f:c2:0a:1e:6c:db:30:1f:e3:27:
         b6:bb:b3:e5:9e:f2:e0:5f:5e:24:7b:9b:78:57:25:46:98:bd:
         1f:e4:0b:9d:e2:20:aa:4d:8a:b2:6b:68:54:cc:10:fa:0a:a1:
         be:fc:fb:d3:07:8d:ae:e9:fd:bf:b1:d2:79:91:69:24:26:78:
         34:ce:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:08 2025 by rpki-client