Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.mft
File:                     8DFB5AD75C622A76A4704A51C79EC932C3038AFC.mft (raw, json)
Hash identifier:          VZ2oAA2YVSndt5f+zHdYJDir7UFVATQg8g5c3AaosCY=
Subject key identifier:   76:29:89:16:47:FB:80:8A:DC:99:33:BA:45:4C:36:5B:89:8D:AC:2F
Authority key identifier: 8D:FB:5A:D7:5C:62:2A:76:A4:70:4A:51:C7:9E:C9:32:C3:03:8A:FC
Certificate issuer:       /CN=8DFB5AD75C622A76A4704A51C79EC932C3038AFC
Certificate serial:       174645001A51688F7AD001AE0A0E63FDDD22E291
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.mft
Manifest number:          04
Signing time:             Mon 06 Mar 2023 11:50:40 +0000
Manifest this update:     Mon 06 Mar 2023 11:45:40 +0000
Manifest next update:     Tue 07 Mar 2023 14:44:40 +0000
Files and hashes:         1: 8DFB5AD75C622A76A4704A51C79EC932C3038AFC.crl (hash: qfkSmcG2bRlbL/6f1LS1UhREVMfyn3bnKCLJq6w2LGw=)
                          2: 323830343a376535383a3a2f33322d313238203d3e20323731363138.roa (hash: BST9U/as1OZCpv+uedU7DfmHkE4Nc9+zzRUGJWtgvf8=)
                          3: 34352e37302e3230382e302f32322d3332203d3e20323731363138.roa (hash: ty3FjDzW36DESUB734N38d4C/jOOYxXomZQcTeHU2Q4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:46:45:00:1a:51:68:8f:7a:d0:01:ae:0a:0e:63:fd:dd:22:e2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DFB5AD75C622A76A4704A51C79EC932C3038AFC
        Validity
            Not Before: Mar  6 11:45:40 2023 GMT
            Not After : Mar  7 14:44:40 2023 GMT
        Subject: CN=7629891647FB808ADC9933BA454C365B898DAC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:24:0c:f0:2e:ab:5a:5c:86:fe:a6:e2:9e:46:
                    46:d5:1a:d6:d0:23:00:d8:2f:62:0b:36:b0:cf:1b:
                    0a:78:d3:cb:a5:d2:c4:a0:15:c2:78:be:b3:82:73:
                    3d:a0:7e:b8:39:c7:44:83:1c:75:5e:98:1a:c3:4a:
                    f7:a5:7f:29:67:ce:8d:0a:60:3f:4b:7d:58:1a:11:
                    7d:c5:3c:3f:5d:a6:67:b2:0e:a1:fa:7e:7f:71:b1:
                    b9:eb:e2:69:4c:78:4e:11:b1:7f:c3:c9:0d:7f:ef:
                    2c:74:dc:e7:c3:35:13:53:ff:67:80:39:fb:73:bb:
                    fa:3c:5b:71:50:62:3b:c3:9d:bd:86:db:55:4b:2a:
                    87:43:81:02:29:19:6d:e9:26:bd:9c:48:f6:15:19:
                    0d:2b:2a:7e:3a:b5:0a:52:11:27:24:09:87:c1:67:
                    80:3f:1f:8d:ce:eb:27:35:97:ec:08:1f:66:a2:bd:
                    12:c9:ab:c2:56:d8:31:ec:8c:6f:c9:67:9e:db:89:
                    bb:d7:1a:03:b6:63:8c:14:4c:af:16:f9:75:79:79:
                    09:cd:e4:ab:88:bf:4d:4b:f2:86:01:c3:c2:21:f0:
                    42:a8:5f:6d:e5:43:16:65:a2:ea:57:9c:ce:cf:02:
                    32:a2:b7:c4:56:eb:c3:a6:b4:10:9c:6e:d3:89:78:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:29:89:16:47:FB:80:8A:DC:99:33:BA:45:4C:36:5B:89:8D:AC:2F
            X509v3 Authority Key Identifier:
                keyid:8D:FB:5A:D7:5C:62:2A:76:A4:70:4A:51:C7:9E:C9:32:C3:03:8A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm7jCc4AXt3Td1SzVPg689mEWTyHAX6UukBhG1cNM58Q/0/8DFB5AD75C622A76A4704A51C79EC932C3038AFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:a2:5a:9a:0d:77:22:74:b1:4c:bb:d2:37:ac:ba:ea:a7:
         97:97:f6:8d:1a:c5:15:2f:c5:59:65:39:7b:ad:33:fb:83:d3:
         d1:df:78:bc:c8:11:31:80:98:13:80:61:15:91:d3:b2:59:0c:
         fc:a3:fb:af:16:7a:a8:88:98:14:6b:0d:c4:ad:d7:95:6a:c7:
         f7:11:d1:74:48:64:b7:1f:dd:c4:e7:c0:ff:43:7c:9c:16:71:
         86:2e:a4:a8:60:16:19:83:7c:cc:48:84:ce:c3:7f:cb:52:ac:
         9b:1d:1e:c1:7f:c8:b6:65:85:38:f5:d4:0f:7f:b3:03:81:f5:
         23:3d:f8:0d:71:d7:36:0f:c3:b7:1a:13:e7:93:bf:2d:4b:f7:
         9d:4a:87:5e:91:32:e4:bc:61:bb:f1:81:e2:46:9b:33:09:de:
         ca:c2:da:d6:93:8e:a3:63:4b:9f:77:c6:9f:9a:b0:51:93:dc:
         d7:70:3b:26:3a:dd:a6:e8:0d:93:4b:c8:e3:7d:32:26:5f:ed:
         2b:69:96:c4:4b:0c:13:fc:a4:c3:f5:9c:90:f5:c4:87:37:b2:
         46:80:86:30:01:d3:10:74:7c:f5:85:74:2c:ec:80:3b:13:98:
         57:97:7b:2e:6c:19:5b:fe:e3:29:6c:ef:23:9f:f5:82:24:b8:
         1f:74:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:29:05 2025 by rpki-client