Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft
File:                     890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft (raw, json)
Hash identifier:          jKuqItKmfDuiPlD5X3gPNstYfZguUhtpKLgeRRMXwaw=
Subject key identifier:   11:FC:5E:3D:9D:82:8A:A5:EA:94:64:BE:34:F8:71:BA:52:56:1A:36
Authority key identifier: 89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E
Certificate issuer:       /CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E
Certificate serial:       1E88AB43DF9A841616F7262B4829947B61F9786A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft
Manifest number:          01B7
Signing time:             Mon 24 Feb 2025 16:04:17 +0000
Manifest this update:     Mon 24 Feb 2025 15:59:17 +0000
Manifest next update:     Tue 25 Feb 2025 16:53:17 +0000
Files and hashes:         1: 890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.crl (hash: PIL1V0x5ne+dE8h8I451n559Yfa3BveQSgipY7LKOhU=)
                          2: 323830343a363332383a3a2f33322d3438203d3e20323639333432.roa (hash: FOoIGnT+y9KSbeAjO8El5Wi62jVDKq+T/kg1/4jaqHk=)
                          3: 34352e3138342e3139362e302f32322d3234203d3e20323639333432.roa (hash: czs71pNYpwVt/iIzTEE6SfnGDOpFl2XBpM7AvNQe9lM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:88:ab:43:df:9a:84:16:16:f7:26:2b:48:29:94:7b:61:f9:78:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E
        Validity
            Not Before: Feb 24 15:59:17 2025 GMT
            Not After : Feb 25 16:53:17 2025 GMT
        Subject: CN=11FC5E3D9D828AA5EA9464BE34F871BA52561A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:19:07:f8:d5:6b:80:fe:b1:1c:4e:d0:bb:
                    ad:c6:3a:05:fe:25:5a:c2:3d:73:db:c0:b1:c4:8a:
                    b0:a0:b1:87:9b:8b:61:77:0d:46:9a:21:af:01:9d:
                    4e:5a:05:9f:22:0e:eb:a4:49:d2:e5:67:d8:e4:6d:
                    3b:5c:08:de:1a:e8:d3:36:1b:82:bb:05:03:d8:a9:
                    53:85:d3:66:42:23:aa:66:9b:2d:f5:c6:58:06:94:
                    66:88:dc:22:fa:df:b9:4d:af:31:38:a1:69:fc:64:
                    d8:d5:9b:b9:cf:df:24:b0:ce:a7:5e:a2:f6:2d:84:
                    78:6d:b4:52:49:cc:fd:d0:82:f6:c4:88:04:cc:52:
                    82:a9:4c:d1:14:82:0e:6e:5a:ef:7a:19:18:cd:34:
                    cd:28:40:e9:99:97:dc:74:f5:60:67:40:7d:c3:ea:
                    63:d6:b0:da:47:be:1d:7c:0f:15:61:f4:55:9d:b1:
                    0a:6f:41:61:9c:6b:d0:7e:7c:a0:09:ca:09:87:a9:
                    84:09:cc:c1:94:81:db:61:e3:44:88:f3:94:27:a5:
                    2f:32:20:3b:bb:49:01:86:63:34:a9:60:cf:ed:69:
                    4f:28:7a:27:d2:2c:d7:4c:0e:16:df:29:ee:f6:8a:
                    72:1b:62:c4:ac:ff:9a:b7:b5:1c:db:07:ae:07:5f:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FC:5E:3D:9D:82:8A:A5:EA:94:64:BE:34:F8:71:BA:52:56:1A:36
            X509v3 Authority Key Identifier:
                keyid:89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:51:55:09:1f:d2:81:25:80:ca:aa:89:c5:8f:d3:f0:66:
         ee:c3:10:04:25:be:d0:e8:40:3f:fa:93:fa:38:99:9c:ca:0a:
         1b:2f:4d:a1:03:53:a3:1f:c0:13:c0:23:15:97:c3:e5:57:ba:
         59:91:f4:a8:81:ce:6d:e0:9f:3c:27:7b:3d:58:dd:30:b1:04:
         10:8a:43:55:40:ee:63:ba:ab:e5:66:27:02:a5:18:c5:36:4f:
         f9:03:50:38:c2:8b:9c:f9:7e:a3:09:29:76:12:ea:5c:bd:dd:
         7d:d4:d5:4c:1c:3f:71:38:08:83:07:64:01:51:b3:db:21:00:
         67:f8:75:9e:89:30:38:97:2a:6c:ec:94:c3:52:cd:c6:ce:a4:
         1a:56:ad:cd:22:f4:76:cf:8e:9f:3a:55:e4:d4:1e:d6:ad:a0:
         bf:f8:c1:9f:f3:f5:1d:3f:13:09:47:d2:69:9f:85:f6:8e:dc:
         5c:7f:18:aa:56:a8:60:08:e2:5b:a5:f3:ec:90:63:98:c7:c1:
         da:04:1b:82:81:03:e6:4e:95:5d:90:21:bd:a1:59:fb:20:33:
         81:b5:cd:d2:8a:c5:f0:04:90:6c:e4:50:85:70:c3:f8:3f:a8:
         c9:4b:ed:85:64:82:80:b5:12:1d:b4:2c:d3:c1:21:cc:2c:b4:
         87:98:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 14:52:54 2025 by rpki-client on console.sobornost.net