Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/38FE18896AECE3BD6039FDE15B16BBD8242089FB.mft
File:                     38FE18896AECE3BD6039FDE15B16BBD8242089FB.mft (raw, json)
Hash identifier:          MDdxBIkT6Q9ftmqSpVmGKs3Z4c+37RtgdM70L+3llm0=
Subject key identifier:   15:1F:C3:A0:C9:C7:9A:C9:2C:AB:3C:99:64:E8:76:1B:D8:09:1A:0F
Authority key identifier: 38:FE:18:89:6A:EC:E3:BD:60:39:FD:E1:5B:16:BB:D8:24:20:89:FB
Certificate issuer:       /CN=38FE18896AECE3BD6039FDE15B16BBD8242089FB
Certificate serial:       0FC9A81B9D036173DEAAE8A25A908F5DBCA4E46E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FE18896AECE3BD6039FDE15B16BBD8242089FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/38FE18896AECE3BD6039FDE15B16BBD8242089FB.mft
Manifest number:          CF
Signing time:             Tue 28 Jan 2025 08:12:26 +0000
Manifest this update:     Tue 28 Jan 2025 08:07:26 +0000
Manifest next update:     Wed 29 Jan 2025 09:30:26 +0000
Files and hashes:         1: 323830343a383438383a3a2f33342d3334203d3e20323732323636.roa (hash: jPWTAeA5NhpM1rQecjQ0YGFlBtXq+l7fhXVGXpG8634=)
                          2: 38FE18896AECE3BD6039FDE15B16BBD8242089FB.crl (hash: /ScVZ5qc5+DtoyNM6SCjnviwnyVJqx6utLHCgnNqjNI=)
                          3: 323830343a383438383a383030303a3a2f33342d3334203d3e20323732323636.roa (hash: y/+qLahDOtDK/DFlIzw7U7ffgg0YU2qZRedGupGhDLo=)
                          4: 323830343a383438383a343030303a3a2f33342d3334203d3e20323732323636.roa (hash: THI/TSLbl3v9jmdFvTBk0I5RNImiAKAqE4OlopvdyfY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c9:a8:1b:9d:03:61:73:de:aa:e8:a2:5a:90:8f:5d:bc:a4:e4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FE18896AECE3BD6039FDE15B16BBD8242089FB
        Validity
            Not Before: Jan 28 08:07:26 2025 GMT
            Not After : Jan 29 09:30:26 2025 GMT
        Subject: CN=151FC3A0C9C79AC92CAB3C9964E8761BD8091A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:5e:a5:d9:89:45:c0:1a:75:72:b8:6a:8e:
                    c6:be:a1:a7:be:5c:2b:04:b8:96:40:9f:b7:d5:cf:
                    1c:76:75:79:28:c3:88:5b:10:e4:c6:b5:be:49:37:
                    ee:1a:4c:9f:70:28:7f:75:52:15:68:00:56:b8:23:
                    a0:0e:35:ab:c8:44:85:54:b1:c5:31:06:49:10:b1:
                    bf:35:2a:b8:c5:b5:74:d1:0e:bb:2e:4d:3e:57:66:
                    dd:0a:c7:42:84:d1:49:8b:71:78:45:04:10:dc:67:
                    50:25:11:45:00:39:d5:f2:09:ff:37:ad:fa:17:6c:
                    ae:07:bb:3a:66:fc:0f:99:9d:b4:c0:49:67:62:4d:
                    51:fc:03:c7:98:55:e2:62:2b:d0:f0:1c:0b:58:55:
                    9b:a2:77:d6:90:2e:b4:cc:f5:18:f1:a8:6e:9f:5f:
                    4c:19:cf:a4:f0:47:ee:2d:43:c9:4c:00:7e:e1:02:
                    e2:34:13:32:d4:72:96:5e:bf:ed:9f:b4:17:b6:87:
                    13:1c:9a:d2:c7:cf:f4:3e:db:14:01:65:d1:9d:dc:
                    20:7e:3d:8d:d2:e1:12:81:59:da:4a:5d:09:95:4d:
                    c1:e2:25:3a:b6:f2:9b:98:c4:e0:80:99:dc:f5:af:
                    cd:ae:77:c5:6b:45:2f:76:90:bf:e0:64:e1:51:45:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:C3:A0:C9:C7:9A:C9:2C:AB:3C:99:64:E8:76:1B:D8:09:1A:0F
            X509v3 Authority Key Identifier:
                keyid:38:FE:18:89:6A:EC:E3:BD:60:39:FD:E1:5B:16:BB:D8:24:20:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/38FE18896AECE3BD6039FDE15B16BBD8242089FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FE18896AECE3BD6039FDE15B16BBD8242089FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/38FE18896AECE3BD6039FDE15B16BBD8242089FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:19:b0:58:04:68:fe:84:de:70:92:41:43:14:2c:3d:e1:84:
         63:44:d9:69:fc:99:14:65:e5:22:fe:96:5a:2f:e4:6b:f8:85:
         d9:15:21:b2:97:66:2e:f1:5a:b8:ca:67:8e:ce:e7:bc:a5:12:
         ee:a1:5c:0e:2f:18:fa:85:f5:24:e1:41:0c:1c:3b:52:f9:f0:
         0e:ff:51:82:d7:af:e4:c4:c4:6c:2b:bd:4a:5a:07:30:be:13:
         d5:c7:bf:4b:c6:9f:6e:41:2b:19:eb:57:33:d0:a8:ea:14:5d:
         9f:b7:2c:1e:fa:bc:f8:af:67:73:70:c8:97:09:86:ab:45:0e:
         d9:5b:0e:fa:0b:a4:5e:a3:ec:c6:1e:e9:58:da:fa:db:6b:a2:
         f6:5d:c6:18:51:87:e3:20:95:47:df:0a:9d:8c:79:c4:c4:60:
         d9:48:52:26:e9:95:a2:9d:9e:6f:95:57:c8:1e:bd:ba:3f:9c:
         3d:66:5f:0a:98:70:be:fc:d0:d2:98:a4:22:21:f9:b0:ed:21:
         a9:10:cb:34:67:39:3d:f6:22:ce:e5:ff:e0:92:8f:33:35:29:
         3d:42:37:96:d8:90:24:58:c0:aa:67:d4:e6:ed:6e:da:ba:91:
         24:15:c3:e2:82:fd:a2:05:f0:c4:28:f5:53:1a:4a:5b:3c:9f:
         f4:37:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:14:21 2025 by rpki-client