Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.mft
File:                     3F50B1080599A7B91D805ADC9C3E7B90AE734736.mft (raw, json)
Hash identifier:          05Y4qSrnQ9CrHx2lXeT75/7oh0A9RtJjp1OKiXwdB3I=
Subject key identifier:   2E:38:B8:E4:78:38:AE:D1:33:9C:1E:B2:D5:26:BD:DA:F6:FE:3C:94
Authority key identifier: 3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36
Certificate issuer:       /CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
Certificate serial:       7D36917F3D178B4C5439DD1403FA2155E23C0CEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.mft
Manifest number:          32
Signing time:             Thu 06 Feb 2025 02:11:38 +0000
Manifest this update:     Thu 06 Feb 2025 02:06:38 +0000
Manifest next update:     Fri 07 Feb 2025 03:44:38 +0000
Files and hashes:         1: 323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (hash: FnfBu6heAlERIdVBR38vM+pyuVhwcJmOiLFjn4e+5g8=)
                          2: 3137302e38332e38302e302f32322d3234203d3e20323633303236.roa (hash: MtyoTQVPJw69EZK74Pp76k5GGTUKP27OYbGe3Dxp8Qs=)
                          3: 3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (hash: c7otnTQ5242wBosVVm31pAYdtSqXJrYDuFe8BEGDyPw=)
                          4: 3F50B1080599A7B91D805ADC9C3E7B90AE734736.crl (hash: kJUrAlEmX7yQmc3Rejht35vtDnlzw80rK0DbV6IcH4s=)
                          5: 3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa (hash: LkgveWYSUcYClX/3N1HGNilH0ey2uDemcm0I0I8Glsw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:36:91:7f:3d:17:8b:4c:54:39:dd:14:03:fa:21:55:e2:3c:0c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
        Validity
            Not Before: Feb  6 02:06:38 2025 GMT
            Not After : Feb  7 03:44:38 2025 GMT
        Subject: CN=2E38B8E47838AED1339C1EB2D526BDDAF6FE3C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f6:e6:82:25:c6:cd:f6:74:96:ba:4d:97:06:
                    88:4c:b8:de:c4:25:e3:ca:cf:6c:bb:c9:d7:af:51:
                    41:2b:96:7f:2e:48:36:53:86:78:6b:d6:fc:ae:ac:
                    35:44:36:6a:8c:c5:0b:bd:bf:5a:d1:31:6a:f8:6a:
                    93:44:00:96:0f:7e:98:49:56:75:27:6b:df:e0:92:
                    a3:fc:8a:5f:2f:e4:51:84:23:0d:48:ca:73:b6:54:
                    82:b4:34:9e:20:29:36:0c:90:b3:0e:2c:bc:7b:4d:
                    83:d0:71:85:46:d1:cc:b5:d7:63:ca:88:ee:59:df:
                    8e:d1:ec:16:cd:4c:35:27:6f:35:87:46:d6:1b:8c:
                    c9:62:be:97:c2:f9:8a:ae:e4:24:27:8e:36:ba:e3:
                    e4:78:1c:b9:1b:7d:85:ee:d6:db:29:0e:14:9e:87:
                    0b:c1:fa:ca:9c:b1:09:f3:df:4e:c3:01:07:df:46:
                    f3:a1:a3:07:d9:56:8c:67:ec:29:c5:10:af:4e:54:
                    76:f3:6f:ea:a2:f8:c0:47:20:e3:8b:90:24:1c:8d:
                    4f:28:f6:d9:c6:78:8a:01:58:01:4d:ea:d1:db:56:
                    c1:75:40:48:88:55:2c:df:9a:47:2c:d7:b2:7d:0e:
                    cb:12:96:8e:3b:0b:82:11:3f:00:41:3a:8a:38:f8:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:38:B8:E4:78:38:AE:D1:33:9C:1E:B2:D5:26:BD:DA:F6:FE:3C:94
            X509v3 Authority Key Identifier:
                keyid:3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:66:f8:d4:25:25:47:e4:9d:cb:bc:5d:2c:30:35:bc:ac:
         ad:b1:63:33:80:6c:1e:f2:50:75:7f:5d:f1:5f:9c:92:f7:31:
         c3:91:fa:f6:c7:53:62:7f:22:e6:36:7e:9e:2e:0f:1e:2f:66:
         a6:7d:8a:a1:64:fd:e3:c0:23:20:43:46:d3:5a:22:d1:b7:e1:
         28:50:21:48:6e:e8:41:2d:e8:22:b7:69:5c:72:fc:19:b6:4b:
         bb:07:98:d0:0b:9a:b8:a5:1c:83:ce:29:f4:3b:71:5a:e7:5a:
         1e:fa:77:f6:e8:2c:6a:ad:3c:e7:c1:7e:62:dd:64:50:03:c4:
         8e:05:76:e9:37:9a:24:08:f9:09:3e:51:1f:f7:fe:a3:b6:1d:
         f2:59:d2:7b:3c:60:4a:9f:1a:60:33:ea:50:2e:b6:87:42:f6:
         ca:b7:fa:7c:46:12:20:58:e3:6d:fa:f6:44:de:2f:06:11:4a:
         8a:16:1d:5c:1c:c4:eb:0a:31:1c:bc:7e:ec:b8:7b:37:5e:e3:
         59:f8:03:57:69:56:04:1c:2d:f4:89:6a:a3:ae:16:47:46:53:
         18:c4:3b:3b:c5:12:82:dc:bf:f9:39:07:b5:eb:45:0b:ba:9b:
         af:4d:72:b1:e6:e7:47:ca:02:68:15:4d:56:40:b8:28:e1:2d:
         a9:3d:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:36 2025 by rpki-client