Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.mft
File:                     2D5218850067B1879FF7D928A844733CA008C908.mft (raw, json)
Hash identifier:          LCJ57eJ8bo1h+hYwjwp9fklHkDOZUVHaTDIumzXuGAo=
Subject key identifier:   79:FF:1E:5F:60:6E:F2:53:A7:BB:78:EA:45:15:04:9E:B4:BF:BC:22
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Certificate issuer:       /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial:       116FE2F5D7CA95A2B6032BC829D64DB2C65C670D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.mft
Manifest number:          1E
Signing time:             Mon 10 Feb 2025 06:31:53 +0000
Manifest this update:     Mon 10 Feb 2025 06:26:53 +0000
Manifest next update:     Tue 11 Feb 2025 08:35:53 +0000
Files and hashes:         1: 3137372e3132392e3230382e302f32312d3332203d3e20323633303437.roa (hash: xjp3G2uxpcJW16YRqGAJMM4i15uV2TPMooSRUPvK1wY=)
                          2: 3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa (hash: VlC4X0ybM7sHWCD7Vke0M7gQdTR8wgcm/+71sOZGhJ0=)
                          3: 3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa (hash: knlSiayZa56wfBQZY3T2ldMHiUPHLzr5JjZ7MOWKcqQ=)
                          4: 3137372e3132392e3231322e302f32322d3332203d3e20323633303437.roa (hash: pY+BxtqK2jZIfSHUVqLDhXZiX8cixTtLdRslgTuVBkY=)
                          5: 3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa (hash: nAX8NdETHfp6usKCKvHg4s7lantwEyLYOHxmOREIUC0=)
                          6: 34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa (hash: wW1AYRIWnLT2+9i255d3wrWlJgs7R8uYiDTp+MQiIbw=)
                          7: 2D5218850067B1879FF7D928A844733CA008C908.crl (hash: K78SF42fHqwAs+YaDfvK4R2axFaKQD7+qaaEy9d25Yw=)
                          8: 323830343a3930383a3a2f33322d313238203d3e20323633303437.roa (hash: mCYiAtu6sdqakJ+N2F4QnZO5Hg/TZvqO3gdlF6mDOBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6f:e2:f5:d7:ca:95:a2:b6:03:2b:c8:29:d6:4d:b2:c6:5c:67:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
        Validity
            Not Before: Feb 10 06:26:53 2025 GMT
            Not After : Feb 11 08:35:53 2025 GMT
        Subject: CN=79FF1E5F606EF253A7BB78EA4515049EB4BFBC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:48:e5:89:f7:9f:f1:4d:4a:58:2c:e1:0d:
                    11:33:bc:86:a3:db:76:e1:8c:d8:dd:56:9e:3a:78:
                    0b:0e:73:7d:4e:35:fb:94:f2:f4:8c:8b:ac:70:18:
                    7a:ff:95:61:5c:0d:5b:75:96:5e:f4:ea:00:4e:31:
                    c6:3f:3d:fe:ba:09:70:5b:a8:eb:f1:16:18:14:9e:
                    c6:00:63:a4:3e:b3:f3:ac:6d:5e:2a:f0:8e:07:51:
                    b8:eb:3b:49:bf:15:c1:4b:76:34:34:8a:16:0e:bd:
                    5d:e2:63:18:09:84:ce:e5:e7:f7:ce:72:bd:c5:58:
                    0d:00:ca:a9:14:87:d4:8a:07:5f:27:5e:a9:41:bf:
                    d3:de:2d:bb:b7:5f:37:67:13:15:a4:d5:71:f0:8a:
                    ea:ea:16:95:b3:3c:9a:8f:dd:bf:bf:ee:da:69:20:
                    42:f1:df:8f:6c:6b:da:63:2a:77:a8:f6:9d:1c:af:
                    b4:38:ac:51:9e:f2:ac:1c:d9:4b:4f:fc:68:8a:83:
                    bd:47:00:a9:e6:01:2b:c6:c8:42:c1:cf:96:60:f8:
                    04:c9:6c:dd:c3:94:4f:8f:21:88:6e:29:fb:56:d8:
                    7c:05:b4:76:6c:d2:46:f5:1b:9f:21:d6:8e:a0:d3:
                    3b:50:ed:13:69:73:56:70:ca:ce:6f:da:4c:9b:06:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FF:1E:5F:60:6E:F2:53:A7:BB:78:EA:45:15:04:9E:B4:BF:BC:22
            X509v3 Authority Key Identifier:
                keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:ac:1c:6c:43:bf:36:36:4e:70:4f:50:94:87:50:ed:ad:
         fd:b1:e2:24:49:02:c4:29:d4:f9:f2:8e:0a:ab:9d:2f:ea:51:
         0a:fe:34:b1:61:98:33:e6:03:34:02:69:32:10:3d:17:c1:d1:
         83:d7:26:c1:12:fa:c4:83:96:e4:2d:cf:ec:95:5d:7d:8f:c5:
         68:2b:4b:c4:29:07:6d:8d:85:4c:21:ba:dc:0d:93:b9:90:28:
         2c:98:51:d1:20:d5:d0:0d:f3:cd:19:ba:9e:90:5d:f1:e3:bc:
         03:23:04:b5:12:76:2a:ac:25:4e:34:d0:c9:67:03:55:7b:df:
         de:dd:30:bd:b3:b2:47:96:67:4c:40:99:50:f5:f5:56:ba:3d:
         33:40:78:8d:59:70:ae:ef:07:d5:9a:e2:90:cc:52:6a:04:ad:
         75:50:77:07:5d:82:19:b5:93:38:83:5b:2c:bc:de:73:e1:b6:
         13:25:5a:2d:98:e7:b7:2d:54:45:26:38:6a:9f:da:d5:b6:42:
         75:e0:58:f1:c4:eb:14:6a:a9:b5:79:0b:23:a5:8c:ea:a3:c6:
         87:c9:19:14:5f:5a:3b:55:19:aa:01:6c:33:a3:68:e8:5c:38:
         b2:4f:34:7b:5b:15:d8:b6:c0:9a:ef:de:3c:2c:b0:20:d5:78:
         c6:43:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 03:49:23 2025 by rpki-client on console.sobornost.net