Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
File:                     2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft (raw, json)
Hash identifier:          rOBP43k+7xsAL1LtMFOSbybMu9euhLKdD91mHq0y8x4=
Subject key identifier:   36:B3:D8:FB:AA:36:1B:5C:91:D0:2F:3F:DC:C2:21:98:32:11:18:8A
Authority key identifier: 24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
Certificate issuer:       /CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Certificate serial:       5D67D4D00AF23873C82F87118EDD7A8293ED377A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
Manifest number:          01E0
Signing time:             Sat 29 Mar 2025 07:58:54 +0000
Manifest this update:     Sat 29 Mar 2025 07:53:54 +0000
Manifest next update:     Sun 30 Mar 2025 10:09:54 +0000
Files and hashes:         1: 2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl (hash: WRIxOXF+5YlIvZCfTpSus5+8rj0zCXU8xRRbytiZOdo=)
                          2: 323830343a356661633a3a2f33322d3332203d3e20323639313136.roa (hash: o5hZkt5FndFSWjPK/jGcL17HOQcrS8LF9bjCI24szLs=)
                          3: 34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa (hash: sWQ9X+QkollNxKo6GGv+Od7KkQw/OhQs5ELFi/V1kxs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:67:d4:d0:0a:f2:38:73:c8:2f:87:11:8e:dd:7a:82:93:ed:37:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
        Validity
            Not Before: Mar 29 07:53:54 2025 GMT
            Not After : Mar 30 10:09:54 2025 GMT
        Subject: CN=36B3D8FBAA361B5C91D02F3FDCC221983211188A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:c3:a8:6a:bd:fe:c5:f0:24:fc:17:fd:b6:
                    d2:34:5d:01:b0:65:fb:25:a1:51:25:8f:08:57:9e:
                    70:f6:46:25:ee:40:56:89:e5:50:32:58:d3:64:2b:
                    5a:f6:2d:12:b6:6d:80:1a:d7:bd:81:58:8e:c4:2c:
                    06:0f:6d:3a:8c:ac:47:71:66:86:ce:5f:f4:ea:c3:
                    4d:64:04:21:62:f8:46:27:33:84:e3:56:35:f3:55:
                    40:0f:c8:cd:fa:7e:8a:13:cf:ab:03:ce:2d:2f:53:
                    8e:a1:14:d9:fe:40:f9:80:05:29:38:ef:39:fe:2c:
                    c3:35:b3:e6:f7:1c:f5:d9:8f:72:1e:6d:49:a7:79:
                    88:86:cc:e8:1d:31:2c:51:dd:a0:08:72:b6:9a:45:
                    07:58:87:31:ef:97:b4:31:81:08:5f:9f:29:27:ad:
                    2b:5a:7c:9f:b5:91:00:6c:b3:e9:41:ac:9c:73:43:
                    c8:da:1c:9b:04:68:c5:e5:15:4b:b5:0e:0b:5a:9f:
                    e8:6d:9a:97:88:34:0d:44:9d:48:41:6f:5e:b1:d0:
                    ab:d5:1a:bf:49:34:c6:a1:eb:35:68:77:63:ee:22:
                    d6:52:c9:48:56:bd:6d:7c:2a:a2:da:6d:1b:7e:7c:
                    0c:72:39:3c:fb:6a:49:6e:55:48:19:43:73:13:0d:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:D8:FB:AA:36:1B:5C:91:D0:2F:3F:DC:C2:21:98:32:11:18:8A
            X509v3 Authority Key Identifier:
                keyid:24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:7f:fa:d1:33:3e:45:ca:fa:80:51:c9:18:45:a4:5d:13:
         46:0c:ea:b9:2e:78:68:65:d6:58:00:09:e3:a5:70:78:76:a0:
         55:de:52:32:71:ca:9e:a6:a1:1b:61:06:28:3b:6e:93:8a:82:
         21:3c:b8:5b:32:1b:12:e1:3d:cc:d7:7c:c8:0d:b8:c4:08:11:
         38:c0:84:80:6d:43:01:a4:2a:02:71:47:a3:18:f2:2d:1b:5b:
         bf:8c:20:44:9a:06:b7:21:63:f0:9d:2f:3e:c1:bd:16:b7:58:
         80:26:5a:6d:ae:e8:7c:3b:49:ce:68:cd:a3:de:2c:f3:26:9f:
         e5:a2:4f:08:8d:98:84:7d:03:d1:9d:4c:88:79:ba:20:d2:de:
         d4:53:b8:20:77:89:e7:ae:5c:04:14:ca:ea:d3:8b:30:24:e7:
         bf:1a:b7:d2:8b:90:b3:22:80:c1:3f:a3:3d:40:6c:86:4d:c6:
         e7:40:59:fd:72:44:c6:b8:b0:76:80:e9:64:f3:99:e8:75:f6:
         59:eb:bf:d9:9e:89:d3:63:8b:be:65:e5:16:c5:6d:af:14:5a:
         e3:db:83:20:88:f5:88:c1:cf:be:e7:e1:40:29:a2:aa:ff:0b:
         98:ad:0b:3b:7d:e4:e3:8b:d5:9c:14:de:3c:1d:de:82:32:f9:
         e0:14:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:29:34 2025 by rpki-client