Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.mft
File:                     A8CF5718115B9C05B14F07941D58B618B367CCE3.mft (raw, json)
Hash identifier:          hE9+apRnpIPZUHsQulZ8zzWhBTWgh68Hk9wDckrOF7Y=
Subject key identifier:   D4:BF:33:A8:BE:A3:59:08:A2:F4:9E:0A:03:91:BD:FD:89:3C:6C:7F
Authority key identifier: A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3
Certificate issuer:       /CN=A8CF5718115B9C05B14F07941D58B618B367CCE3
Certificate serial:       45929DDDEA64B2F716D58B8B33FE389076AC1D4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.mft
Manifest number:          0222
Signing time:             Wed 08 Nov 2023 03:28:33 +0000
Manifest this update:     Wed 08 Nov 2023 03:23:33 +0000
Manifest next update:     Thu 09 Nov 2023 07:18:33 +0000
Files and hashes:         1: 323830343a323861383a3a2f33322d3332203d3e20323633393733.roa (hash: BzBNyNOO4h9DdHlRrvcSd5lVrZJ34aQ0cHY8/lMQnPY=)
                          2: 3133382e3235352e3132342e302f32322d3232203d3e20323633393733.roa (hash: nSJp48s0RhVvlIHb9xJU75+dEbx444++k0QcKEyqqFg=)
                          3: A8CF5718115B9C05B14F07941D58B618B367CCE3.crl (hash: gyIGBVR4ZtzNZ1mErfBMY3sNvoV6SnUQqlS23yD+OH0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:92:9d:dd:ea:64:b2:f7:16:d5:8b:8b:33:fe:38:90:76:ac:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8CF5718115B9C05B14F07941D58B618B367CCE3
        Validity
            Not Before: Nov  8 03:23:33 2023 GMT
            Not After : Nov  9 07:18:33 2023 GMT
        Subject: CN=D4BF33A8BEA35908A2F49E0A0391BDFD893C6C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:ac:e6:4d:74:00:27:25:b8:43:b5:42:33:
                    98:fa:a4:99:c4:3f:1c:7d:e5:6f:77:5f:0a:7e:3d:
                    62:90:55:fb:67:b2:1b:88:36:53:b7:7d:d3:f4:fc:
                    04:ba:cd:74:0a:50:d2:79:83:fd:d4:73:7f:60:c6:
                    b2:4e:31:a3:59:4f:12:fa:c7:b0:9b:6d:12:f2:2e:
                    e7:43:e1:40:c8:4b:3c:25:37:e7:4b:dd:00:a4:dc:
                    fd:b5:ad:8c:23:8e:0b:fc:ad:20:55:c1:06:2f:52:
                    15:35:c1:43:de:27:cb:af:d7:01:38:df:a2:2a:18:
                    9e:e8:c9:0a:76:6a:9b:1c:75:af:53:5d:4c:59:90:
                    42:d6:32:18:5c:a4:98:76:cc:25:8e:50:85:f4:8c:
                    ab:27:79:a8:1e:cd:c2:67:81:bc:cd:74:d0:4f:e4:
                    62:2b:bc:13:a8:4e:91:28:ef:c1:bf:0e:08:2a:01:
                    db:43:24:ae:b2:9f:4d:b9:d7:4b:32:05:4e:ba:26:
                    5d:8e:78:29:60:8b:ed:01:12:a3:d6:d9:67:4a:cf:
                    1a:22:6c:52:a5:8f:27:05:e7:72:bd:7e:cd:ce:76:
                    87:c6:21:2e:19:f3:98:12:08:b6:13:2b:b2:8a:5b:
                    8a:47:81:fa:f8:ea:48:e2:61:7a:73:4e:f1:20:f0:
                    e7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BF:33:A8:BE:A3:59:08:A2:F4:9E:0A:03:91:BD:FD:89:3C:6C:7F
            X509v3 Authority Key Identifier:
                keyid:A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:2c:aa:cd:1b:a2:4c:96:2a:8b:59:91:7a:b9:29:f0:fc:
         98:7a:28:0d:fa:67:b5:9f:4c:d7:26:d8:7e:c1:81:07:37:59:
         69:40:19:50:05:a1:d3:10:39:a7:6b:17:f9:ca:8b:7e:15:65:
         5a:b6:b5:65:a1:d4:fd:64:8c:d1:4a:6b:91:ba:a8:5a:16:b0:
         ef:cb:3b:ae:36:5a:b2:a6:24:59:b6:83:8f:a9:20:a5:5e:dc:
         ad:c5:94:c3:80:7d:87:8b:81:bf:11:95:3a:c2:bc:64:0d:ee:
         1d:81:20:a1:fa:92:45:d4:19:01:85:34:63:75:ab:b0:c5:cf:
         13:40:11:bd:73:56:2a:2f:b7:90:0c:d5:77:ef:dd:ff:e3:c1:
         89:df:50:7b:8f:1b:86:10:8b:70:9a:06:b4:0a:a3:cc:01:83:
         32:70:d4:b5:4d:ce:f5:d7:76:55:7a:42:29:a9:ae:ea:9a:8f:
         bf:c6:39:70:92:5f:bb:41:53:eb:b4:a7:89:9a:3f:a0:ea:e4:
         16:e7:8c:4d:54:65:39:b6:ec:bf:45:35:70:96:74:98:64:38:
         15:c8:05:3a:94:15:c0:30:1c:f4:12:1e:18:26:23:5a:20:35:
         37:15:42:26:1c:d0:4a:6b:7d:16:2f:f3:74:e8:ce:e5:88:a6:
         bb:d7:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:28:32 2025 by rpki-client