Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft
File:                     409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft (raw, json)
Hash identifier:          mhtKjkrxYPxOFmjevXl1yraoPwwrMs/+WODyfrEdK64=
Subject key identifier:   F7:EA:7B:56:CD:17:84:11:DD:B8:CC:71:FB:08:27:4C:17:2E:14:34
Authority key identifier: 40:9C:ED:9F:E5:C8:C7:F6:A3:6B:A6:7D:E7:13:AE:E1:1E:91:FC:95
Certificate issuer:       /CN=409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95
Certificate serial:       68721ECA60AFB64BAE14399E60119315B0E2AFAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft
Manifest number:          78
Signing time:             Tue 28 Feb 2023 14:27:15 +0000
Manifest this update:     Tue 28 Feb 2023 14:22:15 +0000
Manifest next update:     Wed 01 Mar 2023 17:36:15 +0000
Files and hashes:         1: 409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.crl (hash: MovFIYdIYWzQm9yJ8CvKQIflFkJFJrwyFr+2PZJhtUo=)
                          2: 3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa (hash: E4g5NzYT6SQYLfxTDVpIcWPB5TGQ5SxTBDfd8RHyhWM=)
                          3: 323830343a366130303a3a2f33322d3438203d3e20323730333035.roa (hash: X301RC/bsFQF8D0E8axyL10j1E+k7M0METh3KIE3Ghs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:72:1e:ca:60:af:b6:4b:ae:14:39:9e:60:11:93:15:b0:e2:af:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95
        Validity
            Not Before: Feb 28 14:22:15 2023 GMT
            Not After : Mar  1 17:36:15 2023 GMT
        Subject: CN=F7EA7B56CD178411DDB8CC71FB08274C172E1434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:d5:55:3a:30:79:1b:d4:82:f9:80:9e:34:
                    64:e6:8a:3e:81:81:11:7e:38:b3:1c:6b:40:b9:8d:
                    c6:ed:cf:2e:6e:3d:e9:85:56:26:90:f8:a1:ae:8f:
                    6e:a8:20:79:0f:04:af:8f:83:4b:bb:0c:9e:da:19:
                    32:42:42:f5:0f:57:8f:15:2c:73:42:c2:77:21:ca:
                    ec:65:0d:ae:29:9d:c8:4a:37:d4:93:bb:64:53:33:
                    3e:fc:8e:6c:f6:1b:e1:64:bb:ec:94:18:66:54:a1:
                    eb:9f:e2:c6:29:2a:26:c9:9a:05:ff:09:57:4e:8b:
                    61:87:56:f3:34:9b:2c:06:87:ce:de:f0:67:02:35:
                    4b:bb:71:3b:89:93:0f:04:b2:66:67:28:91:cb:cb:
                    9c:58:4e:50:ab:d5:09:52:9f:54:8d:a8:ce:e6:70:
                    8a:48:14:0b:d3:0a:56:7f:33:02:47:f2:4a:94:40:
                    75:a0:3c:e4:c1:e1:58:f9:76:e5:ea:ac:e9:fa:6c:
                    2b:73:8f:d2:8c:4b:f4:df:04:e7:04:01:d8:8a:45:
                    49:20:ad:a2:7b:94:b2:c9:e3:b7:90:8c:56:ab:6a:
                    8d:2b:ad:dc:36:62:4f:d0:f6:a4:6c:42:31:c4:81:
                    ed:dd:d5:22:65:8d:aa:d9:c3:45:f0:07:f3:c6:76:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:7B:56:CD:17:84:11:DD:B8:CC:71:FB:08:27:4C:17:2E:14:34
            X509v3 Authority Key Identifier:
                keyid:40:9C:ED:9F:E5:C8:C7:F6:A3:6B:A6:7D:E7:13:AE:E1:1E:91:FC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2c:63:4c:2a:30:b4:ca:5e:8a:b8:39:86:2d:e0:e6:00:35:
         d7:60:bd:10:e7:eb:cf:64:9f:69:42:40:7f:a7:6d:35:63:3f:
         5a:d4:bf:33:2d:7c:23:6a:21:fa:22:62:c7:d6:29:3a:8d:ee:
         fa:dc:2b:3f:a1:61:d2:ad:75:5c:f1:f4:21:4b:d3:1f:67:20:
         9f:4e:05:3c:3e:d4:cb:5d:a5:8f:17:0e:03:e6:3b:7b:9d:c6:
         c0:f7:fa:0d:fc:c4:47:2d:64:eb:04:36:e8:ee:bf:a0:69:60:
         69:12:e8:6c:0e:6c:11:95:d2:56:29:87:c4:c9:e3:8f:97:7d:
         5a:8d:bc:f7:6d:5c:b6:2e:02:2c:56:b7:ce:3a:2c:b7:c5:04:
         14:2f:59:b2:47:b0:52:4a:39:e7:45:cd:17:96:e0:27:4d:f2:
         cc:36:b4:a1:05:c6:e7:65:f5:4f:7a:e4:f2:9a:81:56:fd:76:
         b5:66:f5:b9:86:b2:83:43:4a:fb:c8:42:fe:58:6c:d7:d0:28:
         56:3c:a0:c8:85:82:d2:98:97:06:4f:67:a1:8d:b5:26:b0:ec:
         40:cc:bd:c9:68:8e:28:d7:8b:91:14:21:6f:02:92:37:da:37:
         47:bb:b1:b0:11:14:de:b7:ff:20:a6:f1:4a:d3:02:13:7f:34:
         3e:96:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:59 2025 by rpki-client