Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.mft
File:                     97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.mft (raw, json)
Hash identifier:          0D3cvcS0LNSUOhS3FtxXvtYmv3uUYFqWv2GxJjcKuR8=
Subject key identifier:   35:C5:62:27:09:69:DA:F2:BA:EE:F5:62:F0:29:24:25:24:6E:96:E2
Authority key identifier: 97:ED:FD:28:49:44:C7:5E:A2:B0:AC:73:84:6F:9D:C1:E5:A7:1D:A4
Certificate issuer:       /CN=97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4
Certificate serial:       686553C3875BDABC48F079DA70DC0A6AA28A5D84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.mft
Manifest number:          0C
Signing time:             Tue 03 Dec 2024 09:00:58 +0000
Manifest this update:     Tue 03 Dec 2024 08:55:58 +0000
Manifest next update:     Wed 04 Dec 2024 09:16:58 +0000
Files and hashes:         1: 323830343a386331383a3a2f33322d3438203d3e20323733373739.roa (hash: E5T83i8amkpuQdr3focI7dEHpngpvh7mC7UFs3PWfUs=)
                          2: 3137372e382e36392e302f32342d3234203d3e20323733373739.roa (hash: SPqIctFBablSBy5uT+XVFFj6PVJRWrUowDkOR2vk9gM=)
                          3: 97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.crl (hash: DNv4racWGN7LrlZwaZLh8nN/waBQwz8LJb1ECp0KnXE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:65:53:c3:87:5b:da:bc:48:f0:79:da:70:dc:0a:6a:a2:8a:5d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4
        Validity
            Not Before: Dec  3 08:55:58 2024 GMT
            Not After : Dec  4 09:16:58 2024 GMT
        Subject: CN=35C562270969DAF2BAEEF562F0292425246E96E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:7d:59:27:6d:74:4c:29:de:5c:e0:94:f6:
                    14:77:e5:1e:6e:15:a7:bc:c1:63:6e:01:b4:46:ca:
                    9c:c7:48:38:c5:f2:44:f6:85:64:1d:ff:34:e4:89:
                    60:29:73:ac:43:22:7e:15:2c:18:7d:fd:78:32:fd:
                    ac:a7:76:24:4f:e5:bf:56:8e:c9:7f:51:ba:c0:69:
                    04:10:1f:d7:c3:db:0d:e9:01:ff:98:d7:b6:ef:53:
                    1a:7d:65:97:e3:50:64:b0:10:69:43:80:ce:54:a2:
                    99:a9:ad:45:5b:a2:b5:57:cf:47:ef:8f:6f:e7:77:
                    3c:4b:f3:e9:d7:41:bf:c7:c0:86:6c:58:5a:94:1e:
                    f7:37:9c:8d:22:38:ac:23:62:85:49:7d:7e:29:7a:
                    a5:1e:e1:ca:bd:1c:ee:2a:45:84:1e:0a:e7:91:cd:
                    d3:37:6f:68:2c:88:84:de:89:fc:61:ab:ba:30:11:
                    15:d3:10:96:11:3c:02:c5:d8:1d:f4:28:1c:8c:b3:
                    f7:a9:5d:c2:6d:54:a9:aa:38:36:84:22:ec:0a:2e:
                    c0:8c:db:3f:c0:7c:a0:49:0b:aa:21:33:43:9e:e1:
                    60:0f:cd:ae:00:cb:9e:d1:d3:b2:14:81:50:b9:ca:
                    e3:45:7a:66:e4:53:83:3a:d1:f3:75:ac:77:5c:18:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C5:62:27:09:69:DA:F2:BA:EE:F5:62:F0:29:24:25:24:6E:96:E2
            X509v3 Authority Key Identifier:
                keyid:97:ED:FD:28:49:44:C7:5E:A2:B0:AC:73:84:6F:9D:C1:E5:A7:1D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/97EDFD284944C75EA2B0AC73846F9DC1E5A71DA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:40:4a:d6:5d:7d:7d:1f:1e:d8:af:b1:69:f8:90:7a:fb:85:
         57:0b:9b:ea:59:99:be:71:10:a6:a3:17:23:f5:f1:18:1d:6d:
         10:f6:9f:e0:d7:93:a9:ba:f1:35:e5:8c:15:8e:35:45:22:40:
         54:35:04:e2:27:4e:1d:4a:e0:78:42:55:14:e8:65:2f:cf:50:
         00:f8:2b:52:0f:ae:fa:12:fd:4a:35:e3:f9:e0:4e:27:90:ae:
         4d:96:28:9f:eb:80:3c:7b:bc:32:8f:9b:3e:e6:e1:45:2a:11:
         d9:e1:be:61:8e:1f:23:73:a9:d2:c3:7a:24:ae:cb:47:24:21:
         25:3d:61:05:42:3d:48:90:9b:27:74:4a:46:14:2a:d4:7b:42:
         e3:b3:f2:b1:59:d6:49:65:9f:20:f1:66:3b:e0:46:13:a2:4c:
         4c:e9:19:5d:06:14:06:5f:b7:c7:bf:26:a0:7c:92:05:56:c7:
         1b:08:26:3b:ef:1e:1c:8c:9f:71:de:97:08:4b:7a:10:31:d4:
         7c:5c:30:94:4d:01:81:3f:02:95:2a:95:b6:42:1d:29:b4:c2:
         9e:d2:fd:b2:10:71:9d:6c:0c:ae:88:28:3f:07:9b:bb:95:5d:
         66:2f:8d:cc:4b:8a:1b:db:6b:c1:e0:87:8f:46:4f:fe:a3:17:
         45:5e:63:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:15 2025 by rpki-client