Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.mft
File:                     427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.mft (raw, json)
Hash identifier:          G0wIMA0iz7zvuGz7r9/lL2DhRhYkIX4J/CBnHwEed5M=
Subject key identifier:   88:3A:31:3D:DC:A2:C5:96:BB:9F:BF:CA:E5:5C:09:94:58:4F:75:C9
Authority key identifier: 42:7D:52:1F:1F:A6:98:0F:53:ED:5C:F5:2B:5F:AF:F3:E4:B5:56:42
Certificate issuer:       /CN=427D521F1FA6980F53ED5CF52B5FAFF3E4B55642
Certificate serial:       0101C74A591B8CD963BA9105E31E9386213135E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.mft
Manifest number:          CA
Signing time:             Tue 07 Jan 2025 06:51:29 +0000
Manifest this update:     Tue 07 Jan 2025 06:46:29 +0000
Manifest next update:     Wed 08 Jan 2025 10:29:29 +0000
Files and hashes:         1: 323830343a346539633a3a2f33322d313238203d3e20323638323732.roa (hash: anay98iDb/dDPESCFilYARNBGR8iPpFsKXJYp+vJINY=)
                          2: 427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.crl (hash: x5sJC1gqnt0Mmg0FgeOwEV5cDzhEwJXOKRyHggioC0Y=)
                          3: 34352e3233372e3132302e302f32322d3332203d3e20323638323732.roa (hash: HubRn/iNolORykhQIvJSAgLcUby76BqCV2b5xxkQXRY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:01:c7:4a:59:1b:8c:d9:63:ba:91:05:e3:1e:93:86:21:31:35:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427D521F1FA6980F53ED5CF52B5FAFF3E4B55642
        Validity
            Not Before: Jan  7 06:46:29 2025 GMT
            Not After : Jan  8 10:29:29 2025 GMT
        Subject: CN=883A313DDCA2C596BB9FBFCAE55C0994584F75C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:f3:cc:e0:6d:3b:07:1a:52:97:5b:46:b0:
                    92:38:41:ab:94:33:4b:f9:b8:e7:e4:2f:50:91:5d:
                    98:03:de:a2:dc:c4:8e:61:ee:82:ca:7a:4c:29:36:
                    63:9c:f4:35:91:6c:00:09:c4:5b:70:57:69:50:c0:
                    6c:29:a5:b3:ae:8e:d6:de:cf:76:9d:2e:52:c1:f0:
                    58:d4:76:eb:de:70:96:ec:1c:1f:68:20:cc:0c:aa:
                    3a:21:c0:3b:80:ee:07:98:2b:36:f0:e2:31:0e:6e:
                    25:75:b2:71:9c:69:1d:45:64:23:38:64:7f:d1:31:
                    68:02:6a:d8:3f:bc:c8:57:59:58:71:96:f9:bc:59:
                    49:12:b8:2b:cc:60:52:a1:44:5b:c7:5f:db:73:cf:
                    23:89:88:3a:2c:34:06:a7:0e:a3:e8:be:ee:1b:45:
                    82:e0:e6:97:f4:85:6b:49:29:04:96:88:47:c7:b7:
                    6b:83:81:fb:8d:5a:44:50:ac:a0:fc:32:b6:fe:31:
                    59:e9:e0:85:15:9f:cc:c3:9a:90:d4:b4:99:4b:90:
                    2b:f2:50:57:e8:2c:21:d3:30:cb:43:a6:99:02:55:
                    42:cf:7e:58:b3:fc:f3:b9:74:b4:81:79:21:80:47:
                    64:1c:54:35:ae:87:c5:be:2b:0c:f7:34:8e:c6:c4:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:31:3D:DC:A2:C5:96:BB:9F:BF:CA:E5:5C:09:94:58:4F:75:C9
            X509v3 Authority Key Identifier:
                keyid:42:7D:52:1F:1F:A6:98:0F:53:ED:5C:F5:2B:5F:AF:F3:E4:B5:56:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxf17mdepYrduT9yaXQzL8HbpUYVGJfSJ3U2udzL2uRJ/0/427D521F1FA6980F53ED5CF52B5FAFF3E4B55642.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:79:50:da:a3:c6:7c:90:98:93:db:cc:da:78:41:8d:6a:
         c9:41:39:f4:d9:5e:ad:64:cb:a7:8b:96:a8:1b:d8:84:49:7c:
         4d:74:a4:c7:01:fa:04:43:04:db:3e:9e:74:88:3a:15:4e:c6:
         5f:bd:29:f8:bd:61:84:8c:87:b1:0b:36:2c:11:d0:81:71:b3:
         12:84:7e:bf:aa:c9:48:b2:1e:de:4d:55:30:0d:10:2d:60:69:
         b4:1e:c1:fc:08:0d:0c:ff:3e:a5:b3:db:43:08:9e:c2:e1:a6:
         0c:3a:6f:16:27:f2:dd:8f:de:28:13:03:0f:60:09:24:06:26:
         ad:30:68:03:e2:5b:ff:0d:b6:c7:cd:98:46:9f:dc:ca:ec:fd:
         b0:f4:b5:9e:08:61:ec:bd:c5:d2:1a:56:06:19:b4:ca:74:31:
         45:66:b9:a9:4b:17:0d:4f:9c:d4:6d:ca:c3:ec:69:85:f6:6e:
         34:ab:77:14:d0:22:1c:b0:bd:79:ea:54:a2:5a:85:68:97:8b:
         da:80:84:15:18:bd:77:b0:e7:0f:66:b5:3e:e9:82:85:04:c5:
         6f:30:3a:91:d1:5f:32:02:9d:b0:92:ad:d1:47:ba:2a:b3:a6:
         b8:a1:7b:71:3d:92:8e:cd:f1:1c:37:9f:82:4c:6d:55:5d:e8:
         89:53:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:21 2025 by rpki-client