Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.mft
File:                     CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.mft (raw, json)
Hash identifier:          7vOA7Af+npaV1b3FZV97+yWXZV/cv+R/sjfOCTsDYCM=
Subject key identifier:   8F:3D:24:FF:A2:17:92:8A:5F:08:45:4C:64:32:5C:A5:83:66:92:B5
Authority key identifier: CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Certificate issuer:       /CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Certificate serial:       3D79F9B194739109D716DCA9A3617710FECCDB59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.mft
Manifest number:          0130
Signing time:             Mon 23 Jan 2023 11:21:34 +0000
Manifest this update:     Mon 23 Jan 2023 11:16:34 +0000
Manifest next update:     Tue 24 Jan 2023 12:50:34 +0000
Files and hashes:         1: 323830343a6264383a656230303a3a2f34302d3430203d3e203532383338.roa (hash: FW8uy2kfg6C2MzWQXKn6DxY2NbhvRqTMcF0EljaVqG0=)
                          2: 3134332e3230322e39322e302f32322d3234203d3e203532383338.roa (hash: 8gFHbtVmaPmxkUdYCc0FGPpmMiUS+Thfp8D97R/osug=)
                          3: 323830343a6264383a363030303a3a2f34302d3430203d3e203532383338.roa (hash: LwBBWDctvlHk1Nyf3A7V/MCUW90j5at/ohVP0UeXKq8=)
                          4: 323830343a6264383a636330303a3a2f34302d3430203d3e203532383338.roa (hash: pGwwAhhsTlfbY5xT0J1Ry0kQg3lQtkQwOD8B+J57e6Q=)
                          5: 3137372e36362e3130302e302f32322d3234203d3e203532383338.roa (hash: pzaSHGFEO22YgLPM6qk2csilNBII0ubAmCXWnMLsen4=)
                          6: 3133382e302e3138382e302f32322d3234203d3e203532383338.roa (hash: YBKOYrj2rXl6aSrS8D2lJu+4eiu/BnTyWz2JR7Y14Wg=)
                          7: 323830343a6264383a3a2f33322d3334203d3e203532383338.roa (hash: AFPqRIL9ZNqEx+/pAQl6Aic4FIzxWBSHBHONxd0dpzM=)
                          8: CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl (hash: 3DHrC1BAh86Ti03WoZFSv4/TwOzKadlro6Ojf664EM8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:79:f9:b1:94:73:91:09:d7:16:dc:a9:a3:61:77:10:fe:cc:db:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
        Validity
            Not Before: Jan 23 11:16:34 2023 GMT
            Not After : Jan 24 12:50:34 2023 GMT
        Subject: CN=8F3D24FFA217928A5F08454C64325CA5836692B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:2a:74:00:24:20:4a:a4:c4:cf:83:78:08:
                    8d:59:56:56:00:a2:6a:66:6b:ef:fe:c7:6d:be:1f:
                    b3:0e:36:cd:5b:49:1c:59:6d:b2:86:19:ad:c1:0f:
                    55:84:5e:fb:37:ff:4a:43:6a:cd:4a:2d:74:b8:5c:
                    d0:cd:7b:93:67:b7:51:00:c2:96:b2:43:7f:9b:f3:
                    2d:e5:71:69:70:41:44:01:94:1c:5c:09:dd:0f:9d:
                    2b:86:86:e0:69:e6:f5:a2:b7:e4:20:c6:61:6d:d8:
                    c6:5d:e8:57:22:af:70:78:42:11:a7:02:d4:1c:fa:
                    3f:7f:d3:63:41:89:57:33:84:39:3b:77:6e:d7:e1:
                    95:d6:e8:79:6e:27:14:57:a7:3a:87:80:17:e4:08:
                    6e:46:48:32:1b:f1:35:e8:b3:17:94:03:16:e5:e0:
                    1e:f0:c9:b1:02:e7:38:f2:04:a5:b0:d4:1d:8a:85:
                    e4:87:6f:68:3e:d7:c8:d1:5c:5b:d0:e2:60:e0:58:
                    af:2c:01:32:cc:02:e3:29:36:fd:3d:73:6a:7c:d2:
                    10:bb:c9:1b:9e:08:87:64:6f:5e:46:56:eb:76:f0:
                    01:6c:5e:35:73:9b:76:54:bb:3f:66:db:e1:a3:24:
                    b7:f7:8b:7b:a8:d9:b8:c1:6e:11:a4:0b:98:85:28:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:24:FF:A2:17:92:8A:5F:08:45:4C:64:32:5C:A5:83:66:92:B5
            X509v3 Authority Key Identifier:
                keyid:CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:70:fb:40:20:1a:ac:13:33:46:f5:07:d7:f2:a9:ac:58:99:
         51:4b:a5:d7:cb:3e:b7:3d:88:06:a4:86:6c:5d:5a:d8:97:a4:
         6e:19:2a:7e:38:c4:c0:34:ad:cd:26:2c:e3:49:ca:c1:75:58:
         55:d0:66:48:2e:4a:cc:1b:f0:7e:48:1d:15:90:cc:85:1f:1d:
         a9:35:2d:3e:ae:47:a1:b5:16:2c:7f:b5:c6:cd:40:76:d7:3a:
         f1:08:99:2f:d8:28:22:29:b7:53:84:3b:95:5d:71:42:e4:d2:
         2d:16:ed:ac:50:61:3f:8d:43:7d:71:fa:ac:b6:c9:41:7b:37:
         dd:ed:35:44:72:b6:7e:58:c2:2a:06:21:38:a7:4a:b6:7a:4a:
         de:7c:d3:e0:c6:a2:9f:20:95:12:4a:4b:29:96:b4:73:28:89:
         99:f6:a7:2e:0b:41:00:89:e7:8f:df:c5:56:b6:be:95:1b:e6:
         d6:25:b8:01:65:7d:8a:15:29:f1:ab:40:65:1d:1d:08:77:2c:
         e0:13:ea:7d:c8:7d:a9:0b:7a:a3:8a:73:d9:d2:81:c0:88:21:
         e8:2b:7a:12:63:c1:58:8e:58:54:82:b2:0b:82:6b:eb:c1:dd:
         16:62:57:7d:d4:9d:7c:c2:9a:3f:2d:4a:11:89:a8:e8:d3:5e:
         e0:a0:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:53 2025 by rpki-client