Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft
File:                     85A7E0A72BD08974369104FECCC3D14C543F54FC.mft (raw, json)
Hash identifier:          KBSobgxHyv/zyef88WbFpoZChH3Wt4oAdj3TYpLRivY=
Subject key identifier:   C7:8B:60:9E:A0:9E:1E:71:DB:BD:C2:A0:FD:72:BD:74:BD:3E:8D:53
Authority key identifier: 85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC
Certificate issuer:       /CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
Certificate serial:       268286DA4B343FB809DC5BB7E933BFD7F99DD41B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft
Manifest number:          DC
Signing time:             Tue 11 Feb 2025 20:21:59 +0000
Manifest this update:     Tue 11 Feb 2025 20:16:59 +0000
Manifest next update:     Wed 12 Feb 2025 23:01:59 +0000
Files and hashes:         1: 85A7E0A72BD08974369104FECCC3D14C543F54FC.crl (hash: tLhnJh685ho2O47ygLbYx1L1mQhJddxX7bqsqknsC54=)
                          2: 323830343a386135383a3a2f33332d3333203d3e20323733363633.roa (hash: IZ2woYHZNEaBt1PvzhcQ4tKNX4K6uO6bjcxSh3vNyy4=)
                          3: 323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa (hash: HTBt4QnSL3Etbg4kYS/t4g9a2GDuS0W8TKMQfxdKckE=)
                          4: 323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa (hash: ZK5sG8vfq5Z0a6AldFvFtJb4f/Z0Em/TYxagJK2Km3I=)
                          5: 323830343a386135383a3a2f33322d3332203d3e20323733363633.roa (hash: Ga45aDIXwjlsq0qZqcdCWKyFgfaw6Xfto/DU5niQG+Q=)
                          6: 323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa (hash: jPok2DRAbHNTT06MR4H6b871/3vK/HRAJsBnu8Fq8p0=)
                          7: 3137372e382e37312e302f32342d3234203d3e20323733363633.roa (hash: FH+mJPMjkGQRfKjlYxJlPGhmpf4zTUjKPJoepdYnSoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:82:86:da:4b:34:3f:b8:09:dc:5b:b7:e9:33:bf:d7:f9:9d:d4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
        Validity
            Not Before: Feb 11 20:16:59 2025 GMT
            Not After : Feb 12 23:01:59 2025 GMT
        Subject: CN=C78B609EA09E1E71DBBDC2A0FD72BD74BD3E8D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:9d:90:ea:3b:81:3c:67:6e:48:fd:f8:b8:
                    29:c8:77:f2:1a:92:39:72:9b:70:d9:c6:b9:fc:43:
                    b1:40:c0:c3:f8:a7:1d:50:50:03:13:1a:ec:27:97:
                    12:71:5f:15:18:56:16:72:dd:25:84:c9:31:ac:85:
                    ce:3e:c4:8f:6d:93:13:90:aa:27:d6:1d:e0:c0:62:
                    b8:d6:9a:e0:f8:eb:d3:58:30:4f:16:c5:0e:18:33:
                    c8:ce:a7:06:a6:ff:f0:55:38:24:81:e3:59:7c:ab:
                    73:f3:08:32:57:71:e3:ce:00:76:dc:44:f4:d1:22:
                    3e:7e:35:85:97:3d:11:77:ee:fc:51:a7:9a:7c:b1:
                    6a:3e:99:3e:52:28:21:2c:33:f9:dd:a7:64:be:60:
                    38:75:83:f3:7c:39:9e:14:96:6d:58:86:71:04:16:
                    22:3f:59:41:82:6d:b2:34:00:52:5c:35:c3:57:0c:
                    ec:d6:e3:ad:a0:68:57:f9:7a:4f:08:e2:27:ed:0d:
                    89:35:7e:8a:9f:63:a0:7a:74:d6:5f:c0:7a:1c:2f:
                    90:ee:6e:7b:ed:75:28:1e:b4:3a:78:52:fe:82:eb:
                    bf:00:c3:7a:b3:d1:53:29:cf:8a:4d:0f:47:5d:21:
                    0b:d0:e7:92:0f:f6:35:31:fa:83:c3:24:dc:4c:65:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8B:60:9E:A0:9E:1E:71:DB:BD:C2:A0:FD:72:BD:74:BD:3E:8D:53
            X509v3 Authority Key Identifier:
                keyid:85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e1:09:45:f6:63:df:d2:74:46:11:64:f3:0c:90:f8:bd:83:
         d2:20:fd:2c:f9:35:8f:64:0e:01:fa:d4:d6:9c:5c:81:c3:5b:
         39:22:a5:eb:ff:2c:76:93:c7:c2:ad:a0:5c:8e:61:53:a5:3c:
         cb:cc:9f:37:df:02:9d:52:76:38:70:e9:12:e1:51:52:7b:81:
         d3:48:b7:f6:f7:f7:47:20:4d:36:ca:60:ac:22:9e:86:22:7f:
         b4:39:09:0c:bb:90:e4:1a:cc:f2:49:47:9d:ec:17:b7:29:29:
         13:07:98:1e:f5:0f:cc:e8:b7:23:d7:73:97:dd:5f:b6:e0:e2:
         cf:14:88:a0:62:6e:7f:3d:94:95:44:5d:7a:1c:8d:ef:c0:1a:
         63:5e:0e:75:82:28:a8:de:75:71:5b:d6:c7:0a:b1:fe:ef:c8:
         c1:c4:ef:cf:9f:df:6e:b2:b0:e9:31:e1:44:09:c5:05:fc:2d:
         cc:38:af:ee:41:5d:e1:d4:76:6c:17:92:63:73:c8:14:97:0d:
         27:8d:50:64:d3:71:c8:47:51:65:ef:e2:5a:6d:76:28:94:d9:
         08:15:0a:44:38:16:d2:2d:df:fb:77:c0:bd:69:ce:a7:72:38:
         a1:e9:82:e3:ed:5c:0b:74:09:d7:99:36:5b:8a:0c:c1:4d:ac:
         59:0b:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 03:49:23 2025 by rpki-client on console.sobornost.net