Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.mft
File:                     AFE278875684A95688481FDA0240406D1EA7F004.mft (raw, json)
Hash identifier:          smbCD7D7obMMV+LKsaevwU8HbuWYhd5PLtenOhc/5bQ=
Subject key identifier:   FE:F7:F8:B0:D6:17:3F:6C:ED:53:E9:AC:A3:AC:90:00:72:4A:62:84
Authority key identifier: AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04
Certificate issuer:       /CN=AFE278875684A95688481FDA0240406D1EA7F004
Certificate serial:       78A5D16D95AE887AE7EA84375A2A6BA570A761A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.mft
Manifest number:          60
Signing time:             Wed 07 Jun 2023 20:58:25 +0000
Manifest this update:     Wed 07 Jun 2023 20:53:25 +0000
Manifest next update:     Thu 08 Jun 2023 21:19:25 +0000
Files and hashes:         1: 34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (hash: tCLSc118shGYXWPdy0cLkqqo1GQVGcivGk93ekpphW0=)
                          2: 323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (hash: xcbrSh1UdnpkdoVA/wA9vgkm+EwTlsZt1DOaJsTbv4A=)
                          3: AFE278875684A95688481FDA0240406D1EA7F004.crl (hash: NuLx63sxEXhXVs9yLL27AHHkbvGrqZ/1l04CwRkk/Tk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:d1:6d:95:ae:88:7a:e7:ea:84:37:5a:2a:6b:a5:70:a7:61:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFE278875684A95688481FDA0240406D1EA7F004
        Validity
            Not Before: Jun  7 20:53:25 2023 GMT
            Not After : Jun  8 21:19:25 2023 GMT
        Subject: CN=FEF7F8B0D6173F6CED53E9ACA3AC9000724A6284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:ba:91:09:45:b6:2a:02:87:7a:25:b9:bc:
                    48:ab:fa:a0:9d:8e:a2:94:7e:15:44:bb:c6:44:a3:
                    cf:6f:2c:83:76:77:8b:39:13:4a:0b:6b:6e:c1:af:
                    f4:4e:1d:8d:22:53:b0:d3:c7:ac:11:21:f7:74:3c:
                    7f:71:aa:e1:3d:ca:c2:42:b7:84:0a:3a:7c:68:a6:
                    a9:87:ff:e0:26:17:05:1a:79:2f:d9:74:95:5e:6d:
                    ae:9e:10:5b:32:a9:f4:6f:c3:d7:88:a9:a1:4e:27:
                    ff:2d:08:c0:f7:60:08:bf:e1:a6:ee:d1:51:a7:8a:
                    90:ce:98:51:9a:d0:92:f7:04:20:11:e9:c3:79:18:
                    d6:45:cd:f9:c2:db:a2:a4:a2:56:e1:6f:4f:f0:2b:
                    6b:e4:92:ea:7a:86:08:7e:e3:0c:f0:40:d8:05:92:
                    90:d0:3a:fa:cc:d0:70:c4:5e:55:77:ea:5d:ae:71:
                    8b:91:8d:ee:e3:7e:ef:4b:73:a2:f8:1f:74:d0:fe:
                    06:3f:43:8b:18:9b:94:e4:fc:9a:90:6f:89:8a:4e:
                    4c:23:6d:5d:89:03:60:c7:82:3e:4b:02:67:fa:db:
                    e9:30:61:05:ae:29:c4:38:14:38:7e:66:55:71:d4:
                    0f:a5:26:92:dd:6a:d1:a2:0d:33:3a:00:3c:9b:d4:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F7:F8:B0:D6:17:3F:6C:ED:53:E9:AC:A3:AC:90:00:72:4A:62:84
            X509v3 Authority Key Identifier:
                keyid:AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:d4:3c:8a:a9:2a:21:ea:65:bb:5e:7d:47:29:fa:d5:84:
         96:8c:72:51:15:85:63:2a:f2:f6:41:dc:b7:cf:31:f8:ec:7b:
         08:b4:b4:62:66:3c:1e:a0:a4:69:83:e8:d7:3b:cc:b3:db:eb:
         bf:16:cc:0a:43:fa:c4:71:d3:61:52:b4:d1:bc:2f:49:23:82:
         33:73:98:5a:77:0f:c7:70:8c:e9:71:c2:03:02:ed:a4:8e:9e:
         af:da:46:01:6c:51:27:f6:21:89:03:3d:ad:5c:6b:1b:01:0d:
         c7:7f:a4:9e:10:6e:24:e2:9f:fa:b7:2c:f3:2e:5b:a3:27:45:
         b6:d2:d4:7f:0a:3d:c0:13:a7:a6:e9:02:7b:45:1a:80:73:08:
         68:ed:2c:98:fc:6b:25:cd:d9:14:a0:79:8d:52:a9:ce:fe:83:
         57:e8:6d:62:df:b3:29:63:24:f7:7a:92:d0:5f:4f:15:29:22:
         ed:30:24:ef:73:90:8d:c2:96:e2:eb:79:a8:dd:95:fe:7e:b7:
         2a:a7:2d:a5:c3:9e:0c:fa:76:3b:0e:83:4c:bb:61:92:48:9d:
         81:cc:d2:65:6c:77:07:09:29:09:60:f4:be:86:76:ea:2e:db:
         79:56:1d:c3:7f:d8:05:0e:09:52:f5:37:40:02:77:fd:37:31:
         8c:9c:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:57 2025 by rpki-client