Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.mft
File:                     72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.mft (raw, json)
Hash identifier:          B3egQDsvWimuAGxWc2zyBsCr4muaV2oziULxU+shq9s=
Subject key identifier:   FD:08:BF:D8:B3:84:0B:F9:DC:89:96:2E:08:BF:BF:F7:C1:B1:01:54
Authority key identifier: 72:F3:AB:6B:CB:2E:B6:FB:FF:DC:E1:91:61:72:89:E9:F4:BD:57:71
Certificate issuer:       /CN=72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771
Certificate serial:       2C30B9F3A1C41CEE5E2B979F15492258DFE9AA7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.mft
Manifest number:          0170
Signing time:             Sun 05 Jan 2025 14:51:15 +0000
Manifest this update:     Sun 05 Jan 2025 14:46:15 +0000
Manifest next update:     Mon 06 Jan 2025 16:43:15 +0000
Files and hashes:         1: 323830343a316563633a3a2f33322d3438203d3e20323634343438.roa (hash: iM95uKwE6q6mnCxr3PXmQHmGkVVYcHZcSKt6/ikuABQ=)
                          2: 3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (hash: B6ujMHmOiMEFNTAqBT17YeZqgKjzfvZtN+druzZlJBw=)
                          3: 72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.crl (hash: RlNqDyGNqfTh2G4mg/djgjxq3SvMACIQLCjnLgCxUmU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:30:b9:f3:a1:c4:1c:ee:5e:2b:97:9f:15:49:22:58:df:e9:aa:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771
        Validity
            Not Before: Jan  5 14:46:15 2025 GMT
            Not After : Jan  6 16:43:15 2025 GMT
        Subject: CN=FD08BFD8B3840BF9DC89962E08BFBFF7C1B10154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:ad:49:be:ca:bc:b3:d8:c4:7f:73:17:50:
                    77:15:31:a9:c9:38:44:a3:18:e5:33:65:2a:89:92:
                    1e:ce:00:c4:94:6d:40:fb:42:46:a4:23:f9:74:19:
                    f1:ed:c1:6f:94:d0:28:ea:d5:8e:83:7f:b1:e7:dd:
                    64:a2:34:f0:40:1b:fa:44:77:bd:b7:12:d2:50:53:
                    ca:cb:83:f9:eb:e1:9d:c4:19:e6:f0:88:0d:7b:d1:
                    4d:aa:f2:6a:e1:bb:28:de:3d:fd:46:cc:90:e1:87:
                    87:81:c3:ba:4f:a1:0e:eb:14:29:a2:b7:ab:7c:61:
                    bc:87:04:91:7e:63:4f:4a:1e:e4:ab:51:c1:7a:b8:
                    08:b0:6c:07:07:ab:f5:c4:37:c9:fd:c5:25:72:38:
                    d2:6c:63:f0:b9:df:05:6b:00:81:23:1f:3e:ed:40:
                    ab:af:fa:70:3f:59:f9:a2:fc:6c:53:07:eb:93:53:
                    18:6a:8d:19:10:7c:46:a9:3f:d6:cd:64:b3:1c:ea:
                    c4:3a:49:0c:e1:0e:e7:e7:84:69:ca:4b:97:6c:e8:
                    39:cd:7b:f9:0c:df:66:75:e8:2b:f9:b1:a8:9d:35:
                    9c:fa:66:1c:0f:7a:5b:5d:1c:6b:48:aa:95:5f:3d:
                    5b:fc:e0:32:52:50:d8:a9:a2:03:d3:80:10:e3:e2:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:08:BF:D8:B3:84:0B:F9:DC:89:96:2E:08:BF:BF:F7:C1:B1:01:54
            X509v3 Authority Key Identifier:
                keyid:72:F3:AB:6B:CB:2E:B6:FB:FF:DC:E1:91:61:72:89:E9:F4:BD:57:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:9c:47:96:d0:4a:f7:63:73:18:eb:86:1d:40:71:cc:5a:
         1b:10:14:a9:82:dc:b6:10:f2:b0:e4:df:32:25:0b:3f:76:67:
         31:71:e4:4e:35:66:aa:f8:1e:3e:34:01:b9:71:57:45:ed:ca:
         3d:ab:c0:81:96:b9:00:51:b6:a6:c7:53:e9:45:86:52:0c:b9:
         56:fd:d8:26:88:dd:c4:87:52:c3:7d:2d:f1:44:fb:af:11:b6:
         0c:5f:77:1f:78:a4:92:dc:3a:ad:ef:25:2b:e9:26:21:f9:5e:
         7a:04:c4:41:85:36:00:a6:b3:20:c7:fb:7d:1d:4e:42:ed:36:
         a8:cb:06:fd:1a:12:1e:b5:ee:e8:1d:3a:4d:00:44:f3:a6:4f:
         09:80:ce:5a:18:4e:c0:63:aa:4e:b7:96:75:d7:9e:1e:06:34:
         e6:70:6e:c2:28:87:18:ab:06:87:88:0a:eb:89:10:ef:de:b6:
         2b:fb:32:3c:93:7f:aa:c4:0e:40:7e:c0:01:78:c3:6d:0f:35:
         a2:49:39:1f:2e:e1:2b:88:a2:3b:fa:5f:ad:70:d6:7d:bc:26:
         f0:21:e7:67:db:17:0b:a6:3e:c7:a7:dd:72:50:cf:e0:1e:70:
         b7:17:f7:4f:47:50:7c:0f:20:d0:0c:30:3e:96:b4:aa:05:05:
         67:89:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:41 2025 by rpki-client