Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.mft
File:                     EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.mft (raw, json)
Hash identifier:          mcYFr/nG70d17pKKW9dSh2Tv60lHIaoS+/A/AQEmbtM=
Subject key identifier:   50:55:D6:29:69:24:11:44:D9:F4:FB:51:21:58:C3:2E:6F:70:E4:0A
Authority key identifier: ED:F1:F9:A3:60:6D:A8:AC:AB:54:16:A6:A1:4D:9D:B4:86:BB:33:85
Certificate issuer:       /CN=EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385
Certificate serial:       16B671AA48E5F83F7992280B26F00FB23A43BDBD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.mft
Manifest number:          3A
Signing time:             Sat 23 Dec 2023 22:18:08 +0000
Manifest this update:     Sat 23 Dec 2023 22:13:08 +0000
Manifest next update:     Mon 25 Dec 2023 00:25:08 +0000
Files and hashes:         1: 323830343a353236633a3a2f33322d3438203d3e20323638353137.roa (hash: 3zWKfxEvhPlBamZ9ZIxAeN4JYuLcKdLa+cEQzPcZMdQ=)
                          2: EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.crl (hash: eNAVPiqXAQmZk9/6CX2FRp6VXQTA5MBLeCLEA7kVzZs=)
                          3: 34352e3136322e39322e302f32322d3234203d3e20323638353137.roa (hash: dhEmh0Gk8ZsALN3D1mjQtAtW1OkIpHxuCBqG73jW+s0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b6:71:aa:48:e5:f8:3f:79:92:28:0b:26:f0:0f:b2:3a:43:bd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385
        Validity
            Not Before: Dec 23 22:13:08 2023 GMT
            Not After : Dec 25 00:25:08 2023 GMT
        Subject: CN=5055D62969241144D9F4FB512158C32E6F70E40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:26:85:cd:3f:28:6c:e5:76:ce:95:f2:b2:
                    94:a2:d9:ca:57:47:5c:6f:0b:83:32:e1:4f:b2:5f:
                    4f:74:92:ae:2a:88:74:db:33:46:ea:3d:46:26:64:
                    9e:6e:85:1f:49:68:0f:ea:61:b9:0e:51:c0:b8:e9:
                    fb:5c:24:49:d2:31:86:00:66:35:e2:87:2b:32:81:
                    64:0a:bb:ab:d3:37:61:16:df:02:f6:1e:7a:77:eb:
                    4a:c3:75:d5:64:d7:cc:88:70:99:29:8a:07:86:2c:
                    f3:c1:9e:c6:62:d8:a1:85:c7:4e:35:69:bf:f2:2a:
                    8a:0e:9d:9b:68:bd:2f:76:32:7c:8c:14:92:67:97:
                    e3:bf:9d:06:f6:6e:29:09:e3:23:80:8f:56:5a:8d:
                    ae:83:72:39:05:7f:b9:67:aa:c1:37:a3:bd:f5:bc:
                    1c:56:b6:0e:48:d6:d7:f6:a6:9b:d1:37:40:22:84:
                    57:fd:05:0b:98:38:49:3b:06:58:73:15:5d:6d:be:
                    51:11:4e:7b:ac:ea:43:be:63:96:be:fb:6f:71:3e:
                    56:ea:45:07:62:7f:e3:27:e9:5b:a6:14:5b:d2:20:
                    80:be:0e:f6:2a:62:a5:71:c4:ae:f4:43:4a:5b:2c:
                    43:0d:03:b0:f7:81:5d:98:92:b2:37:b0:1f:d0:c2:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:55:D6:29:69:24:11:44:D9:F4:FB:51:21:58:C3:2E:6F:70:E4:0A
            X509v3 Authority Key Identifier:
                keyid:ED:F1:F9:A3:60:6D:A8:AC:AB:54:16:A6:A1:4D:9D:B4:86:BB:33:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/EDF1F9A3606DA8ACAB5416A6A14D9DB486BB3385.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:21:69:56:ab:47:a5:56:12:a7:96:49:63:76:3a:75:14:a3:
         8f:15:b3:2f:c5:d4:e2:ae:b7:65:4c:7d:da:63:92:56:df:6c:
         f2:03:b6:99:dc:04:cc:df:a2:19:8d:4f:a0:46:55:65:de:5d:
         19:de:11:b8:4e:4d:1a:62:eb:20:44:fa:3a:58:da:4c:9d:40:
         18:33:0b:3c:23:87:1f:ea:60:00:f4:f0:c0:2e:81:0b:2f:1a:
         cc:86:12:69:69:8b:31:e4:08:e8:2e:71:f5:38:5c:93:54:63:
         e6:6e:c6:45:d7:22:80:87:76:fb:ec:42:eb:fc:5f:78:f7:8e:
         0e:47:1b:0f:c9:75:86:14:be:5f:61:7b:34:f4:d8:62:69:75:
         a9:1a:46:83:65:e9:41:2b:e7:6a:4e:79:a7:5c:1c:6f:30:07:
         8e:be:35:37:b4:75:98:7b:a6:1e:de:7f:51:d8:20:76:23:25:
         0c:b4:d8:83:b3:04:5c:f3:56:11:33:c5:58:a1:b7:19:d1:b6:
         35:55:06:c9:66:2e:48:6e:01:5d:7f:00:d1:20:64:94:a4:cd:
         51:8a:af:22:da:1e:fb:be:7c:fa:8a:f5:33:29:8f:9c:64:a4:
         21:09:45:ba:c7:ec:36:75:70:1b:b6:d3:47:73:93:25:83:3f:
         14:50:b3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:09 2025 by rpki-client