Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.mft
File:                     9AF58802664F504429310F7B4DFD6676DAAB27F4.mft (raw, json)
Hash identifier:          PC85piVH3ximO8I5KOUtiW3Dr48NNoL8z42D8fsxGN4=
Subject key identifier:   D0:58:C2:F9:C8:72:02:11:53:C4:B3:D9:AD:BD:43:33:04:31:99:A8
Authority key identifier: 9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4
Certificate issuer:       /CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
Certificate serial:       2BD4CE2B496EDF1FA82389A5C57A8D1519AAA3C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.mft
Manifest number:          019D
Signing time:             Wed 08 Nov 2023 17:01:55 +0000
Manifest this update:     Wed 08 Nov 2023 16:56:55 +0000
Manifest next update:     Thu 09 Nov 2023 19:08:55 +0000
Files and hashes:         1: 9AF58802664F504429310F7B4DFD6676DAAB27F4.crl (hash: s5UgsaQKLgjVdfXMWR3KiQgipDSXt6OL0oRS6Y8uwSM=)
                          2: 34352e3233302e3230302e302f32322d3332203d3e20323637323038.roa (hash: L1zWx7pHqwoPZz/bZFOtdnm5ZD6Ujowi8xUvDHQ9cBY=)
                          3: 323830343a343965383a3a2f33322d313238203d3e20323637323038.roa (hash: Dq7c+Rbr3TylekNhhfAwzTVoLLqfZiYvsWrc6J0fULQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d4:ce:2b:49:6e:df:1f:a8:23:89:a5:c5:7a:8d:15:19:aa:a3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
        Validity
            Not Before: Nov  8 16:56:55 2023 GMT
            Not After : Nov  9 19:08:55 2023 GMT
        Subject: CN=D058C2F9C872021153C4B3D9ADBD4333043199A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:29:eb:40:7d:aa:d9:be:93:df:e4:9e:78:
                    32:5d:0d:41:ba:c6:a1:69:ff:16:c1:4e:be:bf:86:
                    fe:6b:c8:8c:7d:34:a8:8c:c8:d2:c2:6a:e4:86:77:
                    18:b0:a8:eb:ee:a4:f0:7d:10:58:40:ad:16:5c:61:
                    ba:88:39:3c:8f:2c:38:cd:89:7a:6c:ad:10:08:c6:
                    f8:35:9c:5d:8d:7b:f4:28:52:11:ee:10:43:e5:69:
                    ea:20:28:41:39:5e:0c:35:cb:98:81:79:a9:b5:fc:
                    ae:e8:be:90:d4:ef:0f:66:c4:7d:db:66:e1:3a:cf:
                    69:13:07:5d:4a:26:94:40:fb:62:41:90:0c:86:49:
                    ac:52:0d:79:2b:e6:78:a4:64:66:97:cd:45:c6:33:
                    26:7b:ac:92:0a:70:46:f6:f5:6c:a1:04:12:e8:12:
                    0a:64:06:4f:fa:c2:97:5a:5d:ed:14:f7:3b:ad:e4:
                    fd:ff:38:70:55:89:b1:97:71:fb:e2:5a:c9:48:46:
                    94:35:26:99:32:dd:b4:c3:17:88:2d:af:43:9d:18:
                    8d:eb:04:c3:94:e2:6c:4f:08:83:1c:ed:14:52:48:
                    f3:dc:15:a8:cc:41:88:21:ab:5c:3b:32:97:e5:0a:
                    9e:e6:ff:20:51:c9:12:e2:a3:35:98:2d:8e:6e:ca:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:58:C2:F9:C8:72:02:11:53:C4:B3:D9:AD:BD:43:33:04:31:99:A8
            X509v3 Authority Key Identifier:
                keyid:9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:34:50:56:fa:d2:e1:94:a3:da:d2:ea:f6:fd:53:d3:0d:8a:
         e7:4a:d5:ab:05:19:d6:d3:2f:bb:41:9a:1b:55:20:55:ea:5b:
         c5:87:f1:3a:e7:5a:11:12:e7:1a:42:e0:21:5a:b1:15:2f:18:
         f3:17:1e:94:f7:b8:51:0b:ed:62:77:68:63:88:9a:4a:19:76:
         9a:25:a5:f0:48:bc:ad:84:c9:56:29:26:7d:32:62:d9:71:5a:
         ed:2d:22:ad:3d:70:45:25:e7:84:2d:a8:ed:65:34:81:9f:eb:
         9a:dd:86:39:a6:e8:9c:0b:37:dc:da:34:83:c8:36:30:49:74:
         d4:fa:0d:49:e9:af:f2:94:9a:35:6a:50:c9:2a:42:86:e1:40:
         33:5e:e0:6a:61:e2:be:a9:51:f7:6f:fb:16:f7:23:74:c1:6b:
         f3:e2:3f:6c:80:c7:18:f1:10:cf:f7:bb:43:99:79:1e:12:f9:
         c3:80:09:65:81:16:03:d7:fe:b8:5f:85:0e:62:22:eb:eb:14:
         b5:bc:7d:f9:99:7a:5e:6a:d6:0b:37:1e:2d:62:df:4f:eb:f6:
         13:4e:a7:7e:21:be:d2:a2:41:18:f6:6f:72:7d:58:16:a4:36:
         2e:ce:e5:7c:a8:a7:48:d7:cd:67:99:ae:4b:96:d1:71:5e:c6:
         37:6a:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:44:52 2025 by rpki-client