Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.mft
File:                     2A34C378F02C28B719B1B0E4FD02A736FA4426B1.mft (raw, json)
Hash identifier:          wlloAC8wIYLVZ+KTwTDnACrdGvG0cUgFp8Lg/Jb1rNc=
Subject key identifier:   9D:F6:D6:55:67:1E:66:1B:C7:50:DD:59:DA:03:C1:AB:40:D9:46:A3
Authority key identifier: 2A:34:C3:78:F0:2C:28:B7:19:B1:B0:E4:FD:02:A7:36:FA:44:26:B1
Certificate issuer:       /CN=2A34C378F02C28B719B1B0E4FD02A736FA4426B1
Certificate serial:       61EE88E19BFFB5854EF6CC5986009B8B93A72B48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.mft
Manifest number:          1D
Signing time:             Sun 29 Dec 2024 12:02:31 +0000
Manifest this update:     Sun 29 Dec 2024 11:57:24 +0000
Manifest next update:     Mon 30 Dec 2024 15:56:24 +0000
Files and hashes:         1: 2A34C378F02C28B719B1B0E4FD02A736FA4426B1.crl (hash: eTCQUemLqaJwLAvJ8+gTANwFHmCz+7Jf26G1wnj0qi0=)
                          2: 323830343a326261343a3a2f33322d3332203d3e20323635313636.roa (hash: rIqgpwJm8yOIR0nKm0PUkswFMgu3AO47PR7m/gukAHA=)
                          3: 3136372e3234392e32342e302f32322d3232203d3e20323635313636.roa (hash: 8einsxfd1DrZDdfWbjP8NmZmvgd3k4XNBR7sAhoTpJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ee:88:e1:9b:ff:b5:85:4e:f6:cc:59:86:00:9b:8b:93:a7:2b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A34C378F02C28B719B1B0E4FD02A736FA4426B1
        Validity
            Not Before: Dec 29 11:57:24 2024 GMT
            Not After : Dec 30 15:56:24 2024 GMT
        Subject: CN=9DF6D655671E661BC750DD59DA03C1AB40D946A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:8c:cc:7f:3e:dd:ef:ba:bd:44:8f:b8:7d:
                    69:23:c7:a5:78:de:9d:bc:c1:41:18:43:56:54:76:
                    3c:39:1d:04:b2:fa:55:fb:50:e4:ab:15:7b:e2:da:
                    cc:01:e1:a8:e7:b5:b0:da:90:f1:78:9b:64:f7:67:
                    03:72:d4:b0:50:5a:68:6a:0b:bd:60:36:04:3e:2c:
                    46:48:59:b4:ed:2b:e8:66:85:5d:29:05:bf:94:e1:
                    ec:10:eb:fd:09:56:0d:9e:03:7e:e2:a7:3e:9b:57:
                    b9:d6:a8:3a:1b:06:15:eb:ca:96:49:73:43:05:6b:
                    f7:ad:f2:0e:c1:32:21:01:88:5a:9a:b7:8f:ed:cc:
                    4d:dc:ae:95:38:27:8a:8e:72:68:19:1f:38:89:68:
                    af:a7:d8:d6:01:10:82:43:2e:88:68:96:0c:ce:dc:
                    b5:b5:8a:1e:2f:4c:09:b1:c0:5c:dc:07:44:92:54:
                    fb:e7:93:35:2d:88:c7:05:10:d0:f1:09:a5:68:7c:
                    dc:83:61:69:0a:95:e6:1f:8e:15:e5:9b:ce:27:93:
                    93:33:53:04:12:89:3c:e4:28:e4:24:f0:5f:05:d8:
                    9b:16:f3:6d:a2:4a:99:6f:58:93:7c:bc:e4:4a:49:
                    73:31:13:cb:4c:43:b0:30:e0:b6:61:d5:9f:38:2d:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:D6:55:67:1E:66:1B:C7:50:DD:59:DA:03:C1:AB:40:D9:46:A3
            X509v3 Authority Key Identifier:
                keyid:2A:34:C3:78:F0:2C:28:B7:19:B1:B0:E4:FD:02:A7:36:FA:44:26:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4AniHbvGBUjbcCLSXtnKW2hSw5ctboKKp8NEjGrWT4y/0/2A34C378F02C28B719B1B0E4FD02A736FA4426B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:63:b2:cd:d8:2b:0d:30:c0:67:32:1b:2c:2b:30:38:16:
         d6:50:e6:d4:de:d4:d9:dd:65:b0:c2:17:06:79:4c:a0:80:02:
         66:52:b7:59:d0:19:9c:52:06:f1:fe:36:94:b9:52:76:7a:12:
         a3:cc:0d:8c:5c:90:d1:d0:12:d1:5d:25:a7:c7:f5:fd:60:2f:
         25:43:5e:ac:78:d7:6f:93:e5:c6:6d:01:3a:d0:6f:52:8d:26:
         5c:d1:96:f1:0d:a8:51:66:e9:f3:77:4d:7e:00:36:cf:b5:9f:
         8d:03:21:f5:fb:24:72:a4:a6:7c:e0:6f:6b:fe:5e:72:ad:af:
         1a:c1:b3:ff:97:be:bc:39:97:02:29:ee:3e:40:7f:f7:b0:f6:
         25:b5:81:01:36:da:65:86:d8:fa:94:09:c8:50:e9:00:3a:6a:
         22:05:98:ef:99:37:f9:51:ca:bf:45:3c:c9:e4:94:85:a7:0b:
         5c:8a:3f:d2:8a:73:00:4a:60:47:05:b2:a5:d9:67:3f:e1:49:
         3c:25:45:38:81:78:c1:48:5f:18:0a:36:f4:a6:26:7e:45:33:
         97:ab:88:f2:75:76:f7:6d:c9:eb:f2:51:27:63:8f:2d:a3:3f:
         e0:a0:39:71:63:d7:b9:97:65:dc:1a:b8:69:05:6d:88:d9:51:
         cf:28:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:29 2025 by rpki-client