Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/6C0F4238C0C330FF4B31680146CAB19FC1901FF1.mft
File:                     6C0F4238C0C330FF4B31680146CAB19FC1901FF1.mft (raw, json)
Hash identifier:          YBGmPlBUUHMr1ClwYJHbazr3rofCpfDgE1m4y7/WdWY=
Subject key identifier:   7C:FF:3B:E1:E9:63:B6:70:46:94:83:4B:13:6A:60:B7:BA:84:37:4B
Authority key identifier: 6C:0F:42:38:C0:C3:30:FF:4B:31:68:01:46:CA:B1:9F:C1:90:1F:F1
Certificate issuer:       /CN=6C0F4238C0C330FF4B31680146CAB19FC1901FF1
Certificate serial:       6407CC8E58AE2FC2D9ACC7420FDE6F409A948647
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C0F4238C0C330FF4B31680146CAB19FC1901FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/6C0F4238C0C330FF4B31680146CAB19FC1901FF1.mft
Manifest number:          02
Signing time:             Sat 20 Apr 2024 01:55:02 +0000
Manifest this update:     Sat 20 Apr 2024 01:50:02 +0000
Manifest next update:     Sun 21 Apr 2024 04:54:02 +0000
Files and hashes:         1: 323830343a326534383a3a2f33322d3438203d3e20323635333336.roa (hash: bGlwYe+3wi8HM0cLEpkcd26pyJt10kKsdXolBdjQUNw=)
                          2: 3136382e3138312e39362e302f32322d3234203d3e20323635333336.roa (hash: Stg97GWPhsLB//Pszmq1hCHzdVl1jYVFF1aSDhwzjmI=)
                          3: 6C0F4238C0C330FF4B31680146CAB19FC1901FF1.crl (hash: odAmdQjCj8nxR3DUhzZyLKscCMoZVxvCTVb9i7+Zr6w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:07:cc:8e:58:ae:2f:c2:d9:ac:c7:42:0f:de:6f:40:9a:94:86:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0F4238C0C330FF4B31680146CAB19FC1901FF1
        Validity
            Not Before: Apr 20 01:50:02 2024 GMT
            Not After : Apr 21 04:54:02 2024 GMT
        Subject: CN=7CFF3BE1E963B6704694834B136A60B7BA84374B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:7e:74:f5:47:18:72:f5:90:c6:00:22:ff:
                    37:bb:fd:3b:e5:85:d1:16:36:97:73:34:ee:e5:df:
                    56:82:1e:ee:9b:70:87:ec:b9:d1:27:54:95:31:45:
                    ee:6d:ec:e2:63:69:35:32:a3:ec:d6:e9:c9:18:85:
                    a2:0c:d0:48:9b:fc:e8:81:1e:23:8d:47:52:de:00:
                    42:fe:37:2c:1c:76:f9:37:17:6b:0e:bf:71:ff:a6:
                    5d:c1:99:cf:1b:f2:5e:b2:94:73:da:df:ce:37:2d:
                    da:8b:a1:cf:c7:98:8c:41:18:64:cf:5a:fc:a0:6a:
                    94:8e:a3:dc:46:f1:f2:65:86:79:83:78:6f:9f:28:
                    ca:4e:d3:c2:b4:e4:20:32:d4:b0:99:a9:82:d8:84:
                    ff:cf:ff:9b:c3:d0:98:1f:3d:a5:36:24:42:cd:2b:
                    48:6c:9a:ad:4f:90:bc:e5:71:5c:c8:b5:d8:ea:0b:
                    63:8a:f5:c5:8e:86:b9:e5:73:f2:a7:32:d5:56:09:
                    35:4f:93:50:0f:97:30:24:08:4c:0e:b0:40:f7:62:
                    02:a1:31:02:02:78:38:57:d8:7c:10:b7:58:da:01:
                    fc:21:de:f0:85:4b:54:56:89:20:7a:23:fc:cc:35:
                    64:6a:a4:67:7a:bb:00:27:50:e1:a8:1c:04:f0:e3:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FF:3B:E1:E9:63:B6:70:46:94:83:4B:13:6A:60:B7:BA:84:37:4B
            X509v3 Authority Key Identifier:
                keyid:6C:0F:42:38:C0:C3:30:FF:4B:31:68:01:46:CA:B1:9F:C1:90:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/6C0F4238C0C330FF4B31680146CAB19FC1901FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C0F4238C0C330FF4B31680146CAB19FC1901FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm49kGxNCMffxFq7Kxo87HAhnuVoQfWLXiSUPcVYz7LA/1/6C0F4238C0C330FF4B31680146CAB19FC1901FF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:67:a9:b8:81:3c:85:2f:79:b2:47:79:ff:22:9f:39:f9:
         c4:92:a8:a9:77:27:0b:2d:54:b4:f2:ef:48:78:1d:71:6d:5c:
         f6:73:59:76:f8:72:bf:8e:d3:86:40:2c:88:18:b5:b9:20:c7:
         23:8d:3c:28:c0:45:fb:3e:60:f6:48:7f:94:ae:96:a8:5c:e2:
         98:74:a0:b5:df:06:42:a5:dd:14:54:55:d5:66:3e:77:b2:04:
         30:4c:06:6d:97:c0:cb:eb:72:a9:54:55:9b:6f:69:e3:c4:d1:
         c2:b7:62:f8:88:89:66:f8:fb:f1:1e:6e:e3:9e:f0:79:96:05:
         cf:ba:6b:06:ee:46:0b:a9:ea:d3:e3:9e:17:8e:7f:4b:4b:94:
         83:cf:ef:67:3f:72:44:9a:1a:46:ed:ea:6d:e7:bd:a2:eb:82:
         d7:57:7f:3f:55:38:3f:26:81:90:24:0f:c9:42:cf:13:5a:c2:
         3c:5b:1c:88:c2:58:59:29:41:ef:02:dc:ac:65:54:70:04:af:
         79:bc:b4:d0:b7:31:b4:01:37:7c:e9:29:29:68:6d:79:c0:f4:
         36:80:ca:8d:84:5d:28:36:f7:89:c0:5d:99:8e:9c:eb:43:ed:
         dd:06:6b:84:97:d5:a3:58:60:fb:8f:a2:b6:8d:dc:30:72:e1:
         ce:d7:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:39:37 2025 by rpki-client