Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft
File:                     CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft (raw, json)
Hash identifier:          hqIto3tuv45MM0nb5D+oSz+AwaN4S0qjp9K3RSPxP1s=
Subject key identifier:   70:58:5A:64:94:4D:C3:26:94:0A:F2:C7:96:EA:5A:35:88:AA:6A:82
Authority key identifier: CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95
Certificate issuer:       /CN=CE5AFAF91877392AB78A95A77E48B4731F1D8B95
Certificate serial:       735E3DC13D53B86EA49F35E37F1CF31B0AED0A7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft
Manifest number:          2D
Signing time:             Wed 11 Dec 2024 06:21:25 +0000
Manifest this update:     Wed 11 Dec 2024 06:16:25 +0000
Manifest next update:     Thu 12 Dec 2024 08:31:25 +0000
Files and hashes:         1: CE5AFAF91877392AB78A95A77E48B4731F1D8B95.crl (hash: y/+fAo6yGzx9thX3nz7ozHtP3/GKQMlLTDXqQbFc9qk=)
                          2: 323830343a373937633a3a2f33322d313238203d3e20323731333038.roa (hash: k16NTEvkAn7CR2ZW56IknOfnalR5GW49xzPlRjnIWbg=)
                          3: 3137372e3132352e39362e302f32322d3332203d3e20323731333038.roa (hash: Xwl12JPMnoi05fvBBc2BwyOxAdPFa7pRfhG+7HmlsX4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5e:3d:c1:3d:53:b8:6e:a4:9f:35:e3:7f:1c:f3:1b:0a:ed:0a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE5AFAF91877392AB78A95A77E48B4731F1D8B95
        Validity
            Not Before: Dec 11 06:16:25 2024 GMT
            Not After : Dec 12 08:31:25 2024 GMT
        Subject: CN=70585A64944DC326940AF2C796EA5A3588AA6A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:c4:81:71:93:ae:a5:8d:16:8e:d2:f6:e8:
                    e9:61:03:80:72:e3:d5:ad:1a:c1:a6:ad:6c:91:bd:
                    cc:06:21:9d:94:6e:80:16:91:60:61:3c:b9:b4:2a:
                    0e:81:da:37:84:75:59:5c:14:50:f5:e2:ea:e6:dd:
                    4c:5a:07:87:5b:fb:bc:97:0d:5e:92:73:2b:bd:87:
                    9a:82:37:79:a8:5c:a3:2e:78:2e:7b:53:d2:e3:f2:
                    09:20:db:7d:cc:2f:f1:86:b2:a9:c8:7e:13:c1:1d:
                    0e:1c:be:5c:35:af:e1:48:b0:58:5e:35:de:88:ec:
                    54:5f:b1:ca:8d:b6:79:75:f9:9f:c1:69:3c:f4:f3:
                    c2:e5:45:ed:16:46:3c:da:e9:35:63:e2:59:a2:53:
                    9c:97:88:98:56:55:71:da:8d:8b:4d:70:bd:65:c6:
                    f9:38:00:05:bf:6e:4f:ef:90:6f:51:2e:68:8b:20:
                    61:7c:7e:cc:f7:fc:bc:3a:80:ef:63:6c:32:69:c9:
                    9c:f0:d4:6b:84:d9:15:55:fb:e8:fb:86:f8:c6:c4:
                    ed:3b:7d:ce:3e:f6:32:13:bc:ab:5c:f2:54:53:c2:
                    ae:bf:3c:87:93:0e:fa:1b:4f:e2:5f:e1:da:aa:25:
                    55:c8:5b:88:4e:96:2c:5b:fd:3d:c3:ac:c7:dd:80:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:58:5A:64:94:4D:C3:26:94:0A:F2:C7:96:EA:5A:35:88:AA:6A:82
            X509v3 Authority Key Identifier:
                keyid:CE:5A:FA:F9:18:77:39:2A:B7:8A:95:A7:7E:48:B4:73:1F:1D:8B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/CE5AFAF91877392AB78A95A77E48B4731F1D8B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:b1:d3:9b:51:8d:81:b0:51:3b:d4:33:e0:b4:e0:97:89:
         02:5c:33:bc:a4:e6:c1:02:e0:d7:f1:af:ff:50:31:a3:2a:67:
         82:1b:33:62:c8:02:cb:3d:18:f3:b1:bd:3a:55:27:31:e4:46:
         03:92:c1:b3:51:de:1f:ac:16:d6:16:79:7a:c1:ee:89:65:d2:
         a5:b4:2b:66:ef:b2:28:ea:f5:83:5d:f5:33:24:56:92:34:12:
         7f:8e:a0:3b:2a:62:2e:9a:51:18:19:54:f2:c0:f9:50:4a:c5:
         6a:02:97:0a:d6:31:d4:62:bd:cf:8a:7a:e2:b2:71:ad:bf:8d:
         86:36:81:6e:a3:07:c3:30:80:04:b4:e2:7d:de:77:af:11:f4:
         a6:be:e4:00:7b:44:7c:3f:a2:2a:9a:95:90:07:3d:0b:d1:fa:
         be:d8:ca:58:d7:81:45:7b:a5:b4:73:2c:f9:9e:54:2a:8e:00:
         fc:3d:6d:b6:a6:6b:4c:a1:51:fb:ab:fb:48:b7:2f:14:f7:fd:
         6e:e7:a2:89:1b:5e:0a:2e:fc:b1:3b:4d:24:55:ba:71:07:7f:
         0a:3f:7a:fa:29:c0:45:b3:9d:aa:de:88:a9:d4:46:28:ba:34:
         11:67:c9:c4:c4:54:34:81:30:77:8d:05:55:1d:c3:44:40:f9:
         56:ae:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:36:30 2025 by rpki-client