Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.mft
File:                     20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.mft (raw, json)
Hash identifier:          hopnIQESN/QmeMmS/KCyEZLVB6UK/tSMsrAeysPzbXc=
Subject key identifier:   7B:E5:A7:6A:5B:86:AA:71:D8:06:77:92:15:6A:9D:15:5A:2F:B3:E3
Authority key identifier: 20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C
Certificate issuer:       /CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
Certificate serial:       10434977CEB63E988E555F4C3C98A4E5C71E257A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.mft
Manifest number:          010D
Signing time:             Thu 20 Apr 2023 06:22:07 +0000
Manifest this update:     Thu 20 Apr 2023 06:17:07 +0000
Manifest next update:     Fri 21 Apr 2023 07:32:07 +0000
Files and hashes:         1: 3138372e3131312e32342e302f32312d3231203d3e203533313230.roa (hash: AVOVUXZx73Yx7yG/ny07olOWsg7+y9H+AdMnSs3zikk=)
                          2: 20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.crl (hash: kgoSqty6jKRtaabaO9SIXsQGQNjlayv26tgdTuu0wi0=)
                          3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: W+fHaQQvm/3pcyiC3WJbI9JUG2Sx2Bi0saHx7csXoQ4=)
                          4: 323830343a316465383a3a2f33322d3332203d3e203533313230.roa (hash: 0BVhmWJMp4GkTYiITXdhA6lRNR2juBH1y+voqeY0qNE=)
                          5: 3138372e3131312e31362e302f32302d3230203d3e203533313230.roa (hash: gsgFIoTnLYo9GETiF0JxNJUjZsL3lP//+cdEfPfzsJg=)
                          6: 3138372e3131312e31362e302f32312d3231203d3e203533313230.roa (hash: 601zWVZg76qnhEI0oFZFPfFxNoayOtxqMtkiDHCT/nU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:43:49:77:ce:b6:3e:98:8e:55:5f:4c:3c:98:a4:e5:c7:1e:25:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
        Validity
            Not Before: Apr 20 06:17:07 2023 GMT
            Not After : Apr 21 07:32:07 2023 GMT
        Subject: CN=7BE5A76A5B86AA71D8067792156A9D155A2FB3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:a6:d0:54:34:62:96:47:3b:9a:21:b7:4f:
                    23:18:3f:9f:69:68:fb:91:6e:a5:d4:f7:9a:79:9a:
                    f1:b6:89:c7:e8:8f:8a:bb:d2:ae:31:cd:03:16:e7:
                    82:f1:2f:94:e6:64:04:50:64:bc:a3:24:81:4c:21:
                    59:7f:11:a2:44:94:5e:9c:1d:6c:79:ea:d6:b8:06:
                    33:ba:52:7d:2a:60:5d:5e:30:a3:7c:71:4a:a2:43:
                    ce:99:40:1e:62:1d:f1:19:15:2f:f7:92:d5:41:6e:
                    22:20:34:2b:58:56:ef:22:eb:c0:0c:c8:90:3e:bc:
                    f0:bb:ae:51:99:b8:58:b9:c7:bd:13:6c:3c:22:bc:
                    58:42:b2:05:e3:e2:97:71:d1:be:cd:e8:28:eb:6c:
                    fc:d6:69:9f:4f:71:18:ff:ae:d4:a8:e6:e1:b1:d4:
                    ae:1d:f3:cd:f6:b8:ac:00:7f:60:03:a3:ab:ed:d9:
                    48:f7:ac:48:50:22:2c:cd:b7:5e:c6:5e:42:4c:72:
                    66:47:62:4e:ce:fc:ee:03:54:84:bf:8d:18:70:2f:
                    8b:6b:03:ed:b0:17:80:0f:15:80:3f:b7:30:7a:dc:
                    5e:86:d0:0e:db:e0:14:e2:36:c9:bd:f3:a5:28:2d:
                    5b:ca:a9:fe:5a:8a:bb:93:f8:1e:4c:2f:0d:28:fb:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:A7:6A:5B:86:AA:71:D8:06:77:92:15:6A:9D:15:5A:2F:B3:E3
            X509v3 Authority Key Identifier:
                keyid:20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:ff:f7:70:d2:fc:66:fa:30:56:6c:50:37:27:1c:14:da:
         32:35:5e:f0:92:04:58:73:c6:82:38:24:28:b0:64:51:75:2b:
         93:6b:ce:d1:d8:46:8e:1a:0d:fe:5b:55:43:93:e5:73:18:1a:
         13:bd:d2:4b:c2:88:c5:61:b8:66:68:c4:46:2f:cf:1e:fe:f7:
         b4:6f:e0:60:b2:90:61:ce:c5:5c:89:2a:4c:98:7b:aa:c3:21:
         49:31:4f:fa:99:2b:a6:96:bf:f6:4a:46:c1:76:2a:d2:74:d4:
         cd:72:cd:e5:be:0d:cc:0b:0b:f6:5f:62:5c:2f:03:82:16:26:
         cd:bc:18:9d:f8:ec:c1:11:7d:be:36:68:ed:16:f3:08:7f:1d:
         c9:18:98:d7:2a:e7:e7:21:92:db:70:90:2f:02:be:64:09:fe:
         9c:5d:78:b5:af:81:c1:92:79:2a:4a:fc:52:c7:96:5e:42:04:
         81:27:bc:e9:94:f9:88:1c:5e:fa:0d:2e:59:2d:4d:b2:54:22:
         0c:03:01:af:97:0f:24:3f:54:11:10:4a:2d:a2:00:87:05:5b:
         e0:83:a5:16:e4:35:e5:fb:fd:87:a3:9a:5c:dc:37:a8:45:e1:
         dd:f7:2c:39:71:0f:19:6e:d3:e2:9a:94:67:2f:5d:50:21:98:
         5d:97:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:47 2025 by rpki-client