Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/2/4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.mft
File:                     4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.mft (raw, json)
Hash identifier:          nIBlvXlaDF/QvCJ7USvUYe7ceH0fcP4Xsao3cej1S+A=
Subject key identifier:   83:DE:2F:A9:36:7D:1E:75:AB:E3:DE:6B:F2:21:F8:B5:20:9E:EB:80
Authority key identifier: 43:00:E1:AC:0E:C0:1E:21:14:D0:71:2B:EB:19:8F:C6:BD:90:6F:8D
Certificate issuer:       /CN=4300E1AC0EC01E2114D0712BEB198FC6BD906F8D
Certificate serial:       77E356D3AA3A3B7D48296E91CF7854106D976F06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/2/4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.mft
Manifest number:          01AA
Signing time:             Thu 08 Feb 2024 19:01:10 +0000
Manifest this update:     Thu 08 Feb 2024 18:56:10 +0000
Manifest next update:     Fri 09 Feb 2024 21:25:10 +0000
Files and hashes:         1: 34352e372e3134382e302f32322d3234203d3e20323636353836.roa (hash: rUIjSfvZDtD2GPwVjAGRZpYGSyue3gKRj5sJk1+iHR0=)
                          2: 4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.crl (hash: wXBZvcclz+gw052DswCoDqAQKQP7COUBMKWV75bgsrg=)
                          3: 323830343a336534633a3a2f33322d3438203d3e20323636353836.roa (hash: pFCZRnz5bKGCIhHPtyG2gr+KIlbyAK8/fLSKj8vSL2E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e3:56:d3:aa:3a:3b:7d:48:29:6e:91:cf:78:54:10:6d:97:6f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4300E1AC0EC01E2114D0712BEB198FC6BD906F8D
        Validity
            Not Before: Feb  8 18:56:10 2024 GMT
            Not After : Feb  9 21:25:10 2024 GMT
        Subject: CN=83DE2FA9367D1E75ABE3DE6BF221F8B5209EEB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:ee:33:1f:92:ee:70:97:30:e9:66:7a:15:
                    ff:22:b8:f3:6f:2a:f8:c8:dc:91:6b:2e:86:fb:e5:
                    e8:bc:f0:06:82:f2:24:0a:6c:e5:83:34:13:45:36:
                    25:cd:7a:dd:cb:5b:4e:f6:20:2d:20:5c:f9:cf:d5:
                    d9:aa:7e:00:8b:d1:36:c6:ad:f6:35:9b:d7:52:54:
                    ee:41:cb:61:41:ba:55:72:d3:43:87:91:d6:8c:c1:
                    b8:53:c1:17:35:d3:66:9e:fc:b7:3e:28:29:29:cd:
                    1c:24:b5:e7:d1:99:98:21:5c:b3:43:1f:75:3b:fc:
                    ea:12:6f:b2:1a:ca:fa:81:8a:68:e8:4b:ec:b0:68:
                    d2:0b:78:f0:b0:38:1b:01:6e:2d:f3:d7:2c:fe:6e:
                    ad:30:32:fe:74:25:47:30:c0:8a:cf:c1:20:26:cb:
                    5a:73:c6:ea:b6:25:dd:44:6a:c7:b1:cc:0f:73:13:
                    bf:92:68:ad:cd:fa:3d:11:06:4c:f6:3e:80:ab:3e:
                    a9:56:c1:12:3b:73:b7:c9:1c:dd:e9:04:52:c8:30:
                    da:16:33:69:40:44:55:a8:37:fa:83:ae:81:6b:0b:
                    1b:fa:b3:2b:4d:34:1e:f4:e2:fc:78:3f:6e:6b:6f:
                    40:94:a4:ce:4f:4f:8a:62:b5:82:44:3f:bc:a3:72:
                    39:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DE:2F:A9:36:7D:1E:75:AB:E3:DE:6B:F2:21:F8:B5:20:9E:EB:80
            X509v3 Authority Key Identifier:
                keyid:43:00:E1:AC:0E:C0:1E:21:14:D0:71:2B:EB:19:8F:C6:BD:90:6F:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/2/4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/2/4300E1AC0EC01E2114D0712BEB198FC6BD906F8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:65:ca:4c:bc:46:9a:f1:01:9b:f1:2d:e5:29:d0:73:ec:f3:
         89:b0:73:28:62:ae:27:11:fc:9b:d0:36:bb:9e:b9:76:fd:d8:
         17:68:f2:73:5e:17:48:a1:2e:e8:c2:71:3f:4d:26:cb:70:e1:
         1d:c1:34:e1:d3:69:a2:41:c4:3f:4e:0e:ce:a8:02:1d:b2:95:
         c6:dd:0f:57:a3:7c:1c:27:66:b4:0e:47:eb:4b:ad:e9:43:cf:
         71:e6:6c:af:fc:5d:5b:10:2d:a6:a5:2a:5c:d9:ce:e1:07:ea:
         8e:d6:a6:42:4b:20:18:f4:93:d9:da:11:46:88:3f:f8:6f:c5:
         2f:d2:16:4a:81:23:e2:de:e9:34:6f:00:8f:3d:43:f2:cb:1d:
         d6:40:8b:98:29:04:9f:0f:92:59:a0:fd:e4:13:77:6b:81:86:
         0b:fc:03:16:aa:a5:ff:24:f6:21:68:40:ca:b9:d2:7c:26:63:
         75:43:86:08:9f:8c:c6:bc:71:8f:ed:c2:b3:62:5a:b3:3d:a7:
         1d:69:3a:e7:f9:07:c7:e7:f9:8f:d6:e6:eb:28:f1:a0:d9:d2:
         25:fd:e5:57:1d:a2:a6:1c:b1:cd:45:5b:cb:f9:8a:08:94:a5:
         31:be:14:4b:3b:bd:08:66:37:8b:de:84:39:47:02:fc:b8:03:
         bc:66:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:22:03 2025 by rpki-client