Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
File:                     8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft (raw, json)
Hash identifier:          myvUY1hd86VSYFZWGL2LJ7hfAnAiQOu5wH3Oi0/yXLk=
Subject key identifier:   63:A8:B8:0F:AE:1F:17:38:62:78:77:8C:53:B6:FC:44:36:DB:93:24
Authority key identifier: 8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E
Certificate issuer:       /CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
Certificate serial:       1D5CCFAA59E1BA8D75F16D8F1D500B0B27AF3CCB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft
Manifest number:          01C4
Signing time:             Mon 17 Mar 2025 17:19:11 +0000
Manifest this update:     Mon 17 Mar 2025 17:14:11 +0000
Manifest next update:     Tue 18 Mar 2025 21:10:11 +0000
Files and hashes:         1: 8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl (hash: Oq4a5IabV+HP6SZBOHyF1C6OrW1yow3sgv3ppVfz+rE=)
                          2: 3230302e3231392e302e302f32332d3233203d3e20323731303137.roa (hash: bQyK3T5vZxA3YzeGAAXZa6xZdrmEREekJyLWpRg5rTc=)
                          3: 3230302e3231392e312e302f32342d3234203d3e20323731303137.roa (hash: iJKPsDQ01pnFAi+TbdZ/UpM0Zxk2lVqpjuJ1DPLXXyc=)
                          4: 3230302e3231392e302e302f32342d3234203d3e20323731303137.roa (hash: E+vOY5ByaLjhKnZug+L59IM9Zl1PcS2pD/jZdu56/uQ=)
                          5: 3230302e3231392e322e302f32332d3233203d3e20323731303137.roa (hash: 26RVyS6zeYYuXBgRnX6MsiG72VPGCQU0f98DwkcjN88=)
                          6: 3230302e3231392e322e302f32342d3234203d3e20323731303137.roa (hash: HrPw8BUStz7olESNpTyU0VRTlF3axkN2H0pGL8fV97U=)
                          7: 3230302e3231392e332e302f32342d3234203d3e20323731303137.roa (hash: DPl+EvwzRr2+QlwBh7Co+/+7hmIrpDA0yS85eAng5Ic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5c:cf:aa:59:e1:ba:8d:75:f1:6d:8f:1d:50:0b:0b:27:af:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1CD5C0B8C5A3A259C71AA293766C8CF670835E
        Validity
            Not Before: Mar 17 17:14:11 2025 GMT
            Not After : Mar 18 21:10:11 2025 GMT
        Subject: CN=63A8B80FAE1F17386278778C53B6FC4436DB9324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:47:ac:c6:72:69:b3:29:1b:9d:31:31:da:
                    56:2e:14:6a:85:a6:89:07:ed:22:b8:54:f1:c3:70:
                    a9:4d:f8:10:29:ac:c6:df:9c:4f:bd:44:b6:84:48:
                    45:c9:fa:82:99:68:51:29:e7:4e:87:64:ce:48:79:
                    b0:ec:e2:0e:ba:d7:30:3f:ba:4f:96:db:cb:bd:90:
                    18:34:8f:02:15:0f:aa:9b:71:07:5d:d0:64:75:32:
                    fd:39:de:b3:da:25:ba:6c:dd:7e:9c:3e:c0:a1:28:
                    71:36:22:d8:6d:e2:7a:47:2b:9f:39:b2:b3:28:d1:
                    d1:0f:46:3c:b8:b8:a2:01:22:d0:a6:89:5f:0e:aa:
                    5d:ac:8e:61:ab:31:70:5c:dc:81:ca:75:cd:ed:77:
                    91:df:99:32:d6:d4:e3:7a:67:63:41:2a:fb:a1:fd:
                    39:02:f1:be:aa:52:d4:79:3a:c8:af:8c:35:2a:77:
                    d5:fa:43:45:85:19:5d:8d:06:ea:08:11:0e:7c:88:
                    25:7f:49:5a:d7:88:21:c0:32:a9:8b:c9:db:be:23:
                    f5:b2:b9:d4:a8:89:32:8f:35:1c:d9:30:ed:81:19:
                    85:79:e4:a2:18:eb:08:14:8e:3e:d1:e4:db:d8:ba:
                    8c:f3:68:95:33:1f:7c:67:6c:8b:60:13:02:06:cc:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:B8:0F:AE:1F:17:38:62:78:77:8C:53:B6:FC:44:36:DB:93:24
            X509v3 Authority Key Identifier:
                keyid:8D:1C:D5:C0:B8:C5:A3:A2:59:C7:1A:A2:93:76:6C:8C:F6:70:83:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/2/8D1CD5C0B8C5A3A259C71AA293766C8CF670835E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:08:4f:4c:8a:fa:95:bd:5f:c4:28:78:0b:d4:de:cc:a6:
         6a:a2:5e:48:7f:c1:fa:6e:4d:0a:3e:ca:08:02:d9:13:9a:b6:
         76:ac:03:50:5c:9a:2c:41:5c:8e:74:6f:59:b7:31:52:23:7b:
         55:97:4c:ee:ba:ce:b0:f0:8c:f9:5a:07:83:df:47:a9:83:32:
         28:cb:79:1a:d5:ed:26:33:c6:c8:83:87:ed:59:5b:19:56:ac:
         41:86:57:23:92:ce:e0:01:c2:a7:a3:dc:78:76:f0:6e:fb:97:
         8d:77:7b:6d:2d:ac:e7:8d:91:31:b1:16:d0:69:de:4e:f4:04:
         7b:6b:a2:cb:95:48:c4:28:85:be:c4:49:63:37:7b:71:d7:56:
         64:9b:35:a7:68:95:75:43:05:43:33:cd:c1:a3:9e:a8:20:4f:
         a4:06:e8:e5:92:ea:9f:c5:4f:05:76:74:83:52:f1:4a:91:5e:
         d5:36:54:76:85:24:63:1a:a5:57:1a:3c:e8:e5:d2:e8:9b:d0:
         07:9f:01:7a:f9:a2:88:e0:f5:6f:e0:ba:3d:aa:20:1b:4b:c9:
         c7:ff:68:2c:f5:c0:b1:7e:ae:12:07:a2:4c:a3:5f:76:37:64:
         2e:d4:ed:e9:3c:a2:d7:0d:22:0e:a3:60:54:42:80:61:7d:b0:
         ca:c3:ef:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 22:31:02 2025 by rpki-client on console.sobornost.net