Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.mft
File:                     2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.mft (raw, json)
Hash identifier:          /CIatFj4n1g0l8wi4U2T0gvPZKnc7zVBl5hhbbBEwos=
Subject key identifier:   90:D8:92:66:E3:8D:F0:C0:B2:40:3C:15:89:C0:DA:F0:2B:E3:2B:07
Authority key identifier: 2A:2D:0C:C1:DC:98:8F:00:02:5A:E7:9F:7F:F7:A0:33:42:EB:0E:43
Certificate issuer:       /CN=2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43
Certificate serial:       624A1395A5B2A07FAA00D32C740611028F1BC94B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.mft
Manifest number:          49
Signing time:             Tue 28 Feb 2023 13:54:53 +0000
Manifest this update:     Tue 28 Feb 2023 13:49:53 +0000
Manifest next update:     Wed 01 Mar 2023 17:32:53 +0000
Files and hashes:         1: 2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.crl (hash: 9D0kxeGQMJQgf2K0mymazFKHhCvYCZUoZwg4w2g82V0=)
                          2: 323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (hash: 4E0YFoT/GZ8P2wuDPCe93/eThJYE4UkQard7e72JTbY=)
                          3: 34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (hash: hnyeq4A7UtvE3doXMQNhTQnWiXvKoBj1pOSSp6/rZgw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:13:95:a5:b2:a0:7f:aa:00:d3:2c:74:06:11:02:8f:1b:c9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43
        Validity
            Not Before: Feb 28 13:49:53 2023 GMT
            Not After : Mar  1 17:32:53 2023 GMT
        Subject: CN=90D89266E38DF0C0B2403C1589C0DAF02BE32B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:1f:57:37:9b:da:1a:02:b3:4b:8b:a0:7d:
                    d5:a1:54:76:f7:45:a1:80:d8:d4:58:58:6c:0d:a9:
                    f4:42:67:d8:e3:41:46:f2:6c:10:32:57:4c:cd:80:
                    58:ba:33:30:ea:f9:09:a0:0d:a0:0d:64:70:0d:8b:
                    49:81:16:02:38:20:aa:d2:39:86:9b:e7:a2:21:b6:
                    bc:ee:80:8f:6c:98:7c:c4:8e:63:7b:02:35:9a:b5:
                    62:40:5d:d9:41:0f:5d:7a:4d:9d:6e:d8:cc:31:2a:
                    25:57:10:1c:86:33:61:85:04:c4:04:2c:ce:05:cb:
                    60:b9:21:c8:af:63:d7:e8:77:6e:59:c6:e7:6c:d0:
                    77:9e:ad:b5:14:62:b7:b5:7a:b5:48:0e:77:f6:14:
                    cb:a0:27:cf:bf:1e:38:27:ae:b1:90:29:7d:93:03:
                    17:4b:57:d1:a6:f3:fa:5f:61:13:15:f8:a3:47:51:
                    3b:b1:96:06:20:f1:f4:e2:8f:91:56:de:c3:c8:f2:
                    ea:7c:69:0e:5a:a6:b0:32:d1:2b:c1:51:0a:1d:c2:
                    90:8c:f7:3d:f6:47:98:c1:54:9d:72:17:5b:f6:67:
                    09:12:72:21:2b:49:78:10:d4:59:10:00:f4:5f:59:
                    e7:d8:ca:a0:64:76:9f:6f:21:ce:cc:db:58:7c:7d:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D8:92:66:E3:8D:F0:C0:B2:40:3C:15:89:C0:DA:F0:2B:E3:2B:07
            X509v3 Authority Key Identifier:
                keyid:2A:2D:0C:C1:DC:98:8F:00:02:5A:E7:9F:7F:F7:A0:33:42:EB:0E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/2A2D0CC1DC988F00025AE79F7FF7A03342EB0E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:37:10:c1:8f:5a:c9:1a:c6:83:46:60:7c:e1:e5:05:ce:
         fe:b2:61:93:23:b7:8f:64:31:69:f6:f0:a9:b6:f0:f0:f2:c4:
         e1:ba:12:67:aa:d3:34:03:df:32:e3:50:28:0c:6b:4c:8b:18:
         9e:2a:d9:f9:b3:8f:77:d7:e6:89:30:9e:c9:6c:8c:26:2e:61:
         cc:5a:af:dd:77:24:c9:72:13:cc:6b:09:72:51:bf:16:ef:76:
         40:52:62:f1:9b:3e:db:e5:30:2d:82:20:93:0b:0d:00:f6:d7:
         60:e8:ff:3e:e1:31:06:c2:e2:c9:f7:aa:2d:05:d6:8f:47:60:
         8d:a4:39:db:ba:95:6b:62:2d:d1:92:f8:dc:7b:a0:b5:db:4d:
         8b:53:c0:57:7a:3a:0c:97:a2:89:f9:c5:c6:ac:a4:d8:92:9c:
         6a:8c:ba:d5:33:2f:74:92:8f:f1:66:93:68:44:4b:cd:df:2b:
         ae:24:1a:bc:19:fb:59:a4:69:d6:af:53:7d:af:0f:83:f8:6f:
         bf:0a:97:42:54:fa:23:ed:c1:1e:47:f7:3f:a5:b1:ff:85:8a:
         32:64:44:c7:a9:2f:56:c7:af:bb:c9:31:01:46:bd:40:f0:22:
         d3:1b:db:88:70:57:ca:6a:df:06:91:b8:ac:e7:ed:2d:59:33:
         2c:a5:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:41 2025 by rpki-client