Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/41CF68E05A15D52FE46095FCDE475217E43334A2.mft
File:                     41CF68E05A15D52FE46095FCDE475217E43334A2.mft (raw, json)
Hash identifier:          GJ/c++lxSQyap/8BjkPMl2Zt4+fhUv40EFREizHZQEc=
Subject key identifier:   F9:25:DF:17:93:69:8A:4C:AA:BD:EF:CC:B6:86:50:F3:64:D9:B1:5F
Authority key identifier: 41:CF:68:E0:5A:15:D5:2F:E4:60:95:FC:DE:47:52:17:E4:33:34:A2
Certificate issuer:       /CN=41CF68E05A15D52FE46095FCDE475217E43334A2
Certificate serial:       64F99688DDD5C7C0BC03D680630ACDCCBA484C08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41CF68E05A15D52FE46095FCDE475217E43334A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/41CF68E05A15D52FE46095FCDE475217E43334A2.mft
Manifest number:          0B
Signing time:             Thu 26 Dec 2024 20:39:46 +0000
Manifest this update:     Thu 26 Dec 2024 20:34:46 +0000
Manifest next update:     Fri 27 Dec 2024 23:40:46 +0000
Files and hashes:         1: 3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (hash: 5P7elOfHf5RX4Ll/i7EumhF7H2kZQ3Y2RxP9+OIVJOg=)
                          2: 323830343a373965383a3a2f33322d3334203d3e20323731333335.roa (hash: 5wZo2m58lUrYG/dLhFVXwFbJ9yvMNlRTPqsyHkiQrcU=)
                          3: 41CF68E05A15D52FE46095FCDE475217E43334A2.crl (hash: AKTZV3fW6G+sKSMk/QnLiuqdM2/vy7xEwt9nZPssBIM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f9:96:88:dd:d5:c7:c0:bc:03:d6:80:63:0a:cd:cc:ba:48:4c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CF68E05A15D52FE46095FCDE475217E43334A2
        Validity
            Not Before: Dec 26 20:34:46 2024 GMT
            Not After : Dec 27 23:40:46 2024 GMT
        Subject: CN=F925DF1793698A4CAABDEFCCB68650F364D9B15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:5e:52:a7:27:19:3e:45:3d:0d:8b:bb:fd:
                    f2:5f:db:ae:af:3d:9b:3b:d6:c0:2e:47:ea:4a:64:
                    1e:a4:0b:0b:af:9d:f3:a0:f1:9a:d3:f3:f0:0b:bd:
                    bb:ec:e9:76:1f:27:7f:2a:88:e9:d5:af:4c:89:54:
                    7a:ad:d0:f5:d7:fb:5a:f4:e9:cb:c8:f4:f8:16:a1:
                    8e:3a:e7:00:c0:c1:bd:51:61:c2:05:8e:56:30:f7:
                    ed:a8:d7:de:19:65:b1:fa:7c:3c:fd:e0:54:6c:21:
                    ee:99:50:56:cc:24:63:d4:62:db:63:3b:30:3f:90:
                    9f:48:56:55:74:e3:e6:c4:e9:72:30:5a:89:e8:02:
                    9e:08:70:ae:6a:90:83:d6:29:cd:d2:95:c8:b8:be:
                    15:63:42:00:99:a2:d4:ce:5a:ea:ee:2e:94:14:c4:
                    8f:46:85:41:5f:0a:cf:87:e4:6c:eb:28:83:20:9e:
                    5a:41:02:dc:7a:82:82:af:23:a9:2f:d2:ee:00:02:
                    e7:ff:16:30:ef:8d:20:64:5f:bf:d2:8c:f3:b3:21:
                    05:66:ef:5d:e2:98:5c:02:87:d9:b7:9d:3c:78:f0:
                    83:35:74:7f:e6:61:40:d0:4d:b2:ea:93:6b:89:54:
                    48:85:6a:67:19:01:80:96:6e:47:36:8a:a3:09:c7:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:25:DF:17:93:69:8A:4C:AA:BD:EF:CC:B6:86:50:F3:64:D9:B1:5F
            X509v3 Authority Key Identifier:
                keyid:41:CF:68:E0:5A:15:D5:2F:E4:60:95:FC:DE:47:52:17:E4:33:34:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/41CF68E05A15D52FE46095FCDE475217E43334A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41CF68E05A15D52FE46095FCDE475217E43334A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/41CF68E05A15D52FE46095FCDE475217E43334A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:ed:16:af:2c:55:5c:1f:96:1c:a9:52:12:93:c0:b2:6f:
         e2:c8:9f:ad:e8:01:5f:1c:f5:8c:39:fc:16:b6:79:c8:1d:43:
         90:95:ce:c7:2c:a9:35:7d:43:d9:20:28:67:9f:58:28:1d:cf:
         0e:24:a0:b5:72:c4:4f:cd:f1:96:58:5c:69:72:68:56:b4:22:
         7b:81:79:7e:8d:74:44:17:79:81:e5:b7:6b:95:14:cb:dd:7d:
         f7:f1:1f:1e:17:01:ee:2e:50:24:16:6d:de:f8:23:f9:a5:f1:
         cd:90:2c:2e:c1:d8:c8:a7:a2:84:a8:5a:f0:d5:4a:88:1a:01:
         1d:be:32:d0:0a:27:dd:50:f6:d4:f7:5c:bf:52:3f:2a:64:7f:
         6b:d4:e2:33:e0:c6:2e:5c:2e:0d:a0:d7:2c:70:3c:a4:41:01:
         ef:2c:c1:31:b5:08:34:83:5a:f8:c6:4b:80:0f:46:50:50:de:
         65:92:b8:5a:dd:2d:5b:dd:70:ed:e4:a7:4a:1c:3d:f7:8c:72:
         ce:83:bc:13:4b:63:0a:b5:89:5c:45:1e:23:b1:f5:69:36:7d:
         c3:eb:b5:bf:37:6b:f3:68:9f:af:c7:0d:86:c1:dd:a2:7c:94:
         6f:6e:03:af:d2:99:16:8f:c7:a3:9a:3c:06:1b:bd:9c:a4:99:
         8d:56:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:59 2025 by rpki-client