Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.mft
File:                     1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.mft (raw, json)
Hash identifier:          SBmpMglwRC3TLXanIMnXXJPUXFCRHAuD/ulK8kEGx0o=
Subject key identifier:   EA:E0:D0:45:D6:DE:FE:EC:FE:6C:06:4F:D4:03:B5:F4:B0:A2:64:52
Authority key identifier: 17:45:CD:1F:18:29:DE:5A:B4:F2:FF:2D:04:42:6A:9B:64:E9:E4:3C
Certificate issuer:       /CN=1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C
Certificate serial:       1C8003F46BF7E80AF209C25C1EA9AE1B30F1C780
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.mft
Manifest number:          013A
Signing time:             Fri 05 Jan 2024 05:41:04 +0000
Manifest this update:     Fri 05 Jan 2024 05:36:04 +0000
Manifest next update:     Sat 06 Jan 2024 07:59:04 +0000
Files and hashes:         1: 34352e3138302e3134342e302f32322d3234203d3e20323639313337.roa (hash: t7W5iZps2MdWuAWV2c6ZP2u8YWxIZqkbsvxsB6P97IM=)
                          2: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: 2mKtifAa2TWUUNNexjixLX+P1DjG2BaGzbKhOT5gvdQ=)
                          3: 1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.crl (hash: 4kQBjlsdm0bW7ngFOxkMd3ti4aUhCl8M3w8+fIODaL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:80:03:f4:6b:f7:e8:0a:f2:09:c2:5c:1e:a9:ae:1b:30:f1:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C
        Validity
            Not Before: Jan  5 05:36:04 2024 GMT
            Not After : Jan  6 07:59:04 2024 GMT
        Subject: CN=EAE0D045D6DEFEECFE6C064FD403B5F4B0A26452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:d7:6b:96:39:da:f7:d4:80:b4:cb:7e:ba:
                    ab:7d:6b:9c:02:8a:68:b7:ef:c4:44:94:3a:c7:66:
                    f0:14:c1:de:f0:9c:15:ac:f9:bf:30:96:c1:b4:5a:
                    ec:aa:3c:be:13:31:1f:c8:e2:0f:c2:f1:34:52:10:
                    e5:e9:7f:d9:32:36:62:21:d4:64:43:1d:1a:66:e2:
                    08:bc:73:d7:ed:9e:8a:ee:9a:5a:8e:b8:07:57:92:
                    3e:5f:51:0f:26:98:e6:03:4a:cb:69:87:55:35:c5:
                    ec:86:64:fc:76:fd:fd:18:a9:7f:b9:f6:77:31:36:
                    4a:f1:c3:e5:dd:55:16:9e:29:ba:00:9b:df:a4:4e:
                    85:8d:03:07:e7:0b:de:ed:75:30:65:67:07:38:d9:
                    76:bd:de:4f:5a:ab:1f:b4:08:d3:2c:11:d2:4d:01:
                    27:1e:1a:01:9f:df:c5:ac:ae:60:54:7a:ef:e9:83:
                    64:b2:9b:ca:4e:c6:4a:20:5e:81:6f:ec:0a:f2:ce:
                    bf:b5:05:0b:c5:81:3d:01:4f:43:d5:6d:1c:6f:d2:
                    f0:c6:0d:be:7c:c1:a2:5a:0e:24:6c:4a:c9:e6:8a:
                    96:2f:6d:0f:32:43:e3:24:59:99:92:41:96:e2:a1:
                    0c:00:d6:05:d4:ac:ff:3b:53:33:a0:2d:05:b5:7a:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:D0:45:D6:DE:FE:EC:FE:6C:06:4F:D4:03:B5:F4:B0:A2:64:52
            X509v3 Authority Key Identifier:
                keyid:17:45:CD:1F:18:29:DE:5A:B4:F2:FF:2D:04:42:6A:9B:64:E9:E4:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/1745CD1F1829DE5AB4F2FF2D04426A9B64E9E43C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:55:df:d1:dc:9d:16:be:0d:6b:63:1e:6e:67:3f:6d:6a:5f:
         81:f5:a8:76:a5:ed:2d:89:65:dd:cf:c5:e1:c4:ee:23:6c:e1:
         2a:c3:f9:60:83:67:9a:fd:7c:45:38:9e:75:3f:03:c5:9a:31:
         fd:a3:57:9d:28:7a:3c:a6:94:82:9d:0b:f6:72:82:cd:ce:a9:
         46:b0:3d:d6:d0:cc:fe:8e:dd:5c:a7:e5:03:06:4d:c2:dc:05:
         5d:c4:6c:4c:62:c9:85:cc:07:c0:bc:e4:01:dc:dd:61:26:0b:
         a9:96:71:52:3c:f5:62:16:de:8f:f0:e4:80:5e:1e:76:69:e3:
         fe:29:db:8b:4b:b3:91:03:e4:8d:4e:25:5b:2f:72:cf:62:e6:
         4d:81:87:3e:12:6c:c2:eb:7f:b0:f9:e9:e2:87:01:98:55:96:
         2c:f5:d2:9e:49:a1:7e:bb:b2:3d:06:d8:d2:af:f7:33:c5:7a:
         68:f1:7e:f8:9d:fe:4c:0f:03:08:be:60:70:37:52:f9:b1:6d:
         34:f3:d9:66:41:ff:cc:6a:42:db:d1:7c:68:28:7f:a4:6f:09:
         d6:f9:68:61:32:a9:57:9a:b2:78:86:05:b1:23:1b:7e:54:c6:
         c6:77:86:b6:54:8d:c7:f7:6c:d6:1d:89:b0:8e:c8:b2:5a:75:
         e4:d1:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 14:32:26 2024 by rpki-client on console.sobornost.net