Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/389D0476ED46B28BF403A21F7534E8E4788C1B89.mft
File:                     389D0476ED46B28BF403A21F7534E8E4788C1B89.mft (raw, json)
Hash identifier:          03dBRahiJP1vK9cYwmI8hDojYUtqremD9wwM9QV1l5A=
Subject key identifier:   20:76:1F:D2:7D:6A:64:66:D1:E6:9C:9D:81:5E:29:92:51:B2:B1:3A
Authority key identifier: 38:9D:04:76:ED:46:B2:8B:F4:03:A2:1F:75:34:E8:E4:78:8C:1B:89
Certificate issuer:       /CN=389D0476ED46B28BF403A21F7534E8E4788C1B89
Certificate serial:       2FB7B73EF5D98DD9B79A111963EBAF50F6BF9FB4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/389D0476ED46B28BF403A21F7534E8E4788C1B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/389D0476ED46B28BF403A21F7534E8E4788C1B89.mft
Manifest number:          BB
Signing time:             Wed 16 Oct 2024 08:09:59 +0000
Manifest this update:     Wed 16 Oct 2024 08:04:59 +0000
Manifest next update:     Thu 17 Oct 2024 09:06:59 +0000
Files and hashes:         1: 323830343a386562383a3a2f33322d3332203d3e20323733343434.roa (hash: kRBhVpiMkfqm8SMAQGDXJ0K8Wx9sBre43frF5s5Xp4E=)
                          2: 389D0476ED46B28BF403A21F7534E8E4788C1B89.crl (hash: n8/8jsitO2gonV4OkOZz5f4LL8G/4KMbYE+//Ii0t4A=)
                          3: 323830343a386562383a3a2f33342d3334203d3e20323733343434.roa (hash: K/YzQ7PDKAoDb0mlyZbK94AZ4t6Obv+1feQS8amZPKY=)
                          4: 323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa (hash: r3kN5Nf1a6v6y+0O5DWHvUxEk1tEXpfZai2U8iqYHOQ=)
                          5: 323830343a386562383a383030303a3a2f33342d3334203d3e20323733343434.roa (hash: om1oiAyzVbh9CIne0TtsltIEBB6Kt6x9GB9cMAjg7yA=)
                          6: 323830343a386562383a633030303a3a2f33342d3334203d3e20323733343434.roa (hash: ZakjzkGizphscPBv9n2Bw8dQYKiHOaw6cK1ClwRmruU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b7:b7:3e:f5:d9:8d:d9:b7:9a:11:19:63:eb:af:50:f6:bf:9f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389D0476ED46B28BF403A21F7534E8E4788C1B89
        Validity
            Not Before: Oct 16 08:04:59 2024 GMT
            Not After : Oct 17 09:06:59 2024 GMT
        Subject: CN=20761FD27D6A6466D1E69C9D815E299251B2B13A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:0f:36:34:9f:04:56:10:60:87:7b:46:60:
                    2e:ea:10:10:95:91:7a:9f:1b:b2:98:7a:38:de:35:
                    a8:f7:cd:16:6c:e9:05:3f:33:90:6f:e2:c5:f9:44:
                    69:35:d9:3c:bb:a2:3e:5e:ca:08:8a:5e:07:ce:d6:
                    9f:2d:c0:61:08:4e:f0:55:7f:6a:3a:ea:4a:cd:85:
                    ba:31:69:be:73:e8:46:7c:ac:c3:77:86:41:4e:f4:
                    d3:8e:75:1d:f7:3c:3e:3c:33:66:19:d7:d7:e6:ac:
                    f6:ba:0e:57:9c:82:12:23:97:a6:65:db:e3:6f:e0:
                    3b:16:bd:3f:f0:91:db:c3:87:20:40:cf:df:f4:4c:
                    47:d5:04:1f:26:b8:60:8b:93:14:af:ca:17:9e:a8:
                    2d:a7:fc:e7:be:91:9c:6f:bc:ee:5e:41:c4:07:16:
                    88:86:76:fe:94:2d:5e:f2:15:77:64:e0:85:90:72:
                    2c:57:12:f8:12:98:48:50:db:b8:81:70:3d:c5:aa:
                    e8:71:3f:18:af:72:e0:0d:80:f7:4d:11:08:1f:07:
                    b9:46:67:1e:9d:03:25:80:77:9f:9b:ea:ed:a7:9f:
                    ae:c2:fa:b9:df:a6:11:29:cc:2e:67:83:9f:9b:a0:
                    de:b1:7c:b6:9f:9b:40:f7:36:b1:e8:b5:5c:23:37:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:1F:D2:7D:6A:64:66:D1:E6:9C:9D:81:5E:29:92:51:B2:B1:3A
            X509v3 Authority Key Identifier:
                keyid:38:9D:04:76:ED:46:B2:8B:F4:03:A2:1F:75:34:E8:E4:78:8C:1B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/389D0476ED46B28BF403A21F7534E8E4788C1B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/389D0476ED46B28BF403A21F7534E8E4788C1B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/389D0476ED46B28BF403A21F7534E8E4788C1B89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:7d:8c:9e:7d:77:9f:2d:6c:e2:7e:e5:7c:ae:ca:85:a7:
         4a:3d:6a:a3:3d:65:3b:74:49:46:d1:cb:07:0f:41:c6:94:fd:
         cb:58:5a:04:6c:9f:25:0d:6f:12:b7:e0:7c:c2:b1:e3:01:fb:
         9e:f6:91:a8:7f:38:07:de:51:3f:fc:83:8b:4b:ff:31:82:b3:
         a1:0c:33:be:ef:26:ee:b8:1f:43:94:27:82:07:35:7e:aa:ba:
         a7:9e:c9:6b:d0:94:85:00:ec:0b:27:86:8b:a0:0b:b5:d6:d9:
         94:b7:3e:2c:c2:ff:a8:d2:ba:f3:0d:fa:51:02:ab:0d:92:4c:
         d8:a2:f6:f7:bb:bb:35:69:31:79:22:01:73:b4:b2:04:b3:aa:
         ab:a8:c5:09:9c:fa:c3:28:50:5f:94:54:dd:15:fc:ff:22:eb:
         99:64:8c:d0:0c:6d:1b:45:e4:00:d1:7b:71:b3:62:81:6e:d5:
         a1:d7:6e:01:7b:94:6c:f2:27:16:41:f2:70:8a:7f:0a:94:45:
         21:40:c5:b5:8c:57:19:62:a3:97:91:75:da:5c:4d:13:d0:3f:
         78:4c:54:b0:0f:01:1a:fd:c3:db:e8:07:cb:17:ad:f0:8a:44:
         3d:83:0a:79:48:79:67:3a:e3:c6:0e:d6:c4:fb:fb:41:44:fd:
         09:14:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:24 2025 by rpki-client