Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft
File:                     7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft (raw, json)
Hash identifier:          mPKcIKqmXv3lCAC7sgA3nDagO4VEg/Jl2YSC3l1ypsY=
Subject key identifier:   4B:EF:CE:C7:E9:F0:10:17:35:E0:EE:DE:6B:29:B3:46:38:01:0E:0C
Authority key identifier: 7F:3F:A5:26:B9:5F:2A:4C:20:81:E3:EA:3E:A5:FE:A9:39:92:DA:F8
Certificate issuer:       /CN=7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8
Certificate serial:       2AA76A6DB02A7C4C20F88C4D0881128604BFFE3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft
Manifest number:          0146
Signing time:             Fri 31 Jan 2025 05:13:14 +0000
Manifest this update:     Fri 31 Jan 2025 05:08:14 +0000
Manifest next update:     Sat 01 Feb 2025 09:08:14 +0000
Files and hashes:         1: 323830343a386335633a3a2f33322d3438203d3e20323733373938.roa (hash: C5qNJvNsEQDo+TpjMkV4rWLs0MMnAVggMdwLgJxWBP4=)
                          2: 3138372e3130392e3132312e302f32342d3234203d3e20323733373938.roa (hash: d34jtzR4hKJO3Lu+TtP1JrLN8/z9rYDbI5g+B70N6K8=)
                          3: 7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.crl (hash: hotQD1lc1FNzYjIVqtxEtzyIfMowH02DEUvgtTI4ApU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a7:6a:6d:b0:2a:7c:4c:20:f8:8c:4d:08:81:12:86:04:bf:fe:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8
        Validity
            Not Before: Jan 31 05:08:14 2025 GMT
            Not After : Feb  1 09:08:14 2025 GMT
        Subject: CN=4BEFCEC7E9F0101735E0EEDE6B29B34638010E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:03:50:22:21:bc:34:48:c1:7d:2e:f8:67:3f:
                    74:f0:de:ef:30:1d:42:01:44:f9:cb:59:38:47:9d:
                    41:73:d3:5a:78:84:aa:78:c5:8b:91:a3:2f:e9:39:
                    50:5a:d8:1e:6d:47:27:a9:24:ae:f1:89:d7:9e:82:
                    49:f0:b7:5b:f7:f2:73:24:bc:af:76:f3:32:b5:a2:
                    1e:22:bc:44:e2:05:68:70:73:27:5c:aa:f9:46:7a:
                    4e:6f:bd:48:83:26:92:7b:5a:59:c3:a7:b4:1c:05:
                    4d:9d:74:3e:e2:3c:6e:f8:0c:c4:db:ec:f7:42:a7:
                    c6:ba:96:b7:d0:a1:04:3b:cd:01:2f:03:9f:1f:17:
                    2a:da:be:e3:13:cf:e0:90:01:c7:88:25:8e:ca:05:
                    7f:78:18:8d:90:1b:f3:a1:7e:05:8c:6d:cd:77:ea:
                    11:7c:51:76:d3:51:17:18:ca:e6:b9:da:f6:c9:c3:
                    e3:6f:57:70:7a:32:dc:20:06:8c:b8:2d:97:29:f6:
                    08:98:42:e6:a7:26:d0:bb:22:ba:32:83:4f:31:b1:
                    cc:da:73:38:8d:47:6e:fd:11:2e:49:b1:11:2d:16:
                    4a:2d:85:b2:2e:39:53:3c:db:9d:b6:97:7c:06:55:
                    a2:e6:d1:0e:4d:12:68:3a:f0:be:17:0f:6a:bc:42:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:CE:C7:E9:F0:10:17:35:E0:EE:DE:6B:29:B3:46:38:01:0E:0C
            X509v3 Authority Key Identifier:
                keyid:7F:3F:A5:26:B9:5F:2A:4C:20:81:E3:EA:3E:A5:FE:A9:39:92:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7F3FA526B95F2A4C2081E3EA3EA5FEA93992DAF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:a3:c1:e3:0c:e1:23:fe:67:56:c3:c7:10:26:c2:ba:e1:
         17:9d:9c:7c:a7:5b:1b:b1:91:80:32:e4:7c:dd:d9:b5:96:51:
         52:be:ac:14:1d:3b:65:f0:2a:44:12:9f:88:8a:59:36:ad:3c:
         e5:ee:c0:8c:8d:b6:38:1b:cc:4a:f5:cb:b1:12:d1:c6:69:7a:
         e3:00:e4:f3:57:dc:7d:cb:b2:54:84:ab:94:9b:45:9f:16:22:
         c9:4f:2d:81:70:5b:1a:3a:18:16:4c:0a:a9:9a:4c:e6:5d:7a:
         3e:dd:4a:7e:e1:4d:73:ba:7e:2d:8e:3c:a5:a7:f8:7e:20:08:
         a6:8f:ec:4d:31:cf:a2:a7:df:a7:8e:dc:e3:19:4b:1b:75:b7:
         2b:5f:59:e1:f5:af:18:cf:24:38:a5:e4:0c:c6:99:de:a5:20:
         72:b7:20:cb:d0:3a:c7:e2:7c:31:e0:1c:52:ec:07:c8:99:26:
         d8:ee:7a:c7:04:58:50:d1:8e:43:48:e5:08:b7:00:3b:3d:f4:
         ef:b4:91:84:5d:40:6f:f4:21:26:ce:e9:2e:cf:d7:30:00:5b:
         04:b0:0f:ee:72:95:8f:5f:df:f0:0c:16:49:ad:fd:87:3a:27:
         82:5c:73:ab:6a:51:73:7c:cb:e1:bf:2e:ac:86:5b:0e:3a:19:
         1d:f2:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:58:49 2025 by rpki-client