Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
File:                     AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft (raw, json)
Hash identifier:          YYOYx0+/mMhRRDP07fDbQAHW6lCdYuycRjt6blPzsHc=
Subject key identifier:   3E:C5:5E:AC:FD:6F:74:3E:CB:05:EB:34:52:B8:EE:85:B7:4A:77:E9
Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Certificate issuer:       /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Certificate serial:       19E33E7859BCE109C3B83C2C6123F0323FC3AA61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
Manifest number:          27
Signing time:             Thu 27 Feb 2025 12:48:30 +0000
Manifest this update:     Thu 27 Feb 2025 12:43:30 +0000
Manifest next update:     Fri 28 Feb 2025 14:08:30 +0000
Files and hashes:         1: 323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa (hash: 8M55ueYEU9gD0wgP6cFlMxQg3ob6dzf7yhsdWbb13X8=)
                          2: 323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa (hash: KG3OhV4qQx3JBnzNgwBKDcyuvC79RsRsxfjSupwP/x0=)
                          3: 323830343a383237303a3a2f33322d3332203d3e203631363038.roa (hash: ywWFGv4FrHR7EOcQP1+8fMFn8twSkZPAcE0qpm2Fb38=)
                          4: AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl (hash: eyDJQuibYuUR2cMkFp9gOYgD+iIzBSOZQqgPTvcGwmU=)
                          5: 323830343a383237303a3a2f33342d3334203d3e203631363038.roa (hash: WFBp1V/bkcQBnfHePovHA34gex/+Mw4hMniC46k5NXs=)
                          6: 323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa (hash: vztNO4B0ZMFPd5mJDO7VPSkCSecIyyueuDmJFRB0pAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:3e:78:59:bc:e1:09:c3:b8:3c:2c:61:23:f0:32:3f:c3:aa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
        Validity
            Not Before: Feb 27 12:43:30 2025 GMT
            Not After : Feb 28 14:08:30 2025 GMT
        Subject: CN=3EC55EACFD6F743ECB05EB3452B8EE85B74A77E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:09:50:ad:40:1b:a3:f1:a3:c5:bb:0c:9c:
                    c2:f6:ec:d3:a0:c1:e0:c2:cb:4e:a8:7b:8c:85:c2:
                    86:6a:a1:a1:aa:3b:98:e2:63:f6:0f:e1:36:a8:f1:
                    15:9c:ed:94:07:bd:d0:86:cd:c1:b9:8f:34:0a:c0:
                    8c:5c:a7:a3:e9:2d:2d:f9:1f:6d:a1:14:b3:65:bd:
                    a2:ed:c0:37:f8:7e:28:eb:3c:b7:03:d3:61:2e:a7:
                    14:f0:fb:7d:f8:9b:68:d3:cc:73:62:2f:a3:4b:da:
                    2c:96:93:27:e3:73:63:94:23:d3:d5:e0:d7:28:bd:
                    64:16:a3:78:b1:db:fa:a9:75:3e:0f:b9:c4:9f:a5:
                    ea:c7:37:bb:07:6f:41:8d:3c:24:06:69:07:0a:f5:
                    ef:66:ea:78:38:aa:c2:c4:66:4e:58:dd:c8:ef:ba:
                    5d:ca:49:a6:57:e9:58:99:81:00:69:aa:ee:9f:0e:
                    7f:4e:f7:0a:c7:4d:11:6d:c7:61:a7:e1:24:20:b4:
                    03:bc:f3:0e:a1:75:0d:30:3a:2e:2e:58:72:fb:8a:
                    44:6c:56:c1:0d:75:3d:9a:92:fa:87:86:51:b4:c1:
                    c6:af:7e:f6:09:aa:0f:be:10:33:db:a5:07:35:9f:
                    f5:57:5f:d0:97:36:e3:90:8a:6a:7a:bf:24:73:e5:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C5:5E:AC:FD:6F:74:3E:CB:05:EB:34:52:B8:EE:85:B7:4A:77:E9
            X509v3 Authority Key Identifier:
                keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6a:04:7a:4a:a0:3b:da:f9:7d:28:ad:1f:e2:8c:ea:fc:82:
         55:3c:fe:02:96:db:9a:75:cc:2f:d0:e2:3c:63:85:8c:38:4d:
         34:37:50:0d:aa:4e:5d:84:ab:ed:69:8d:65:6e:34:7d:0c:b6:
         fd:61:42:b3:5e:96:55:b2:4b:9a:df:cb:b1:80:a3:ee:f8:9f:
         17:a2:6d:fd:a7:3a:3d:c8:27:13:93:02:1d:ce:c2:d3:89:45:
         e6:27:d3:8b:e8:f9:09:63:aa:09:96:4a:d2:e5:01:fa:ec:5a:
         36:14:00:66:70:6e:f1:05:3c:2e:6b:a4:f9:c3:60:ea:ba:86:
         a6:b6:d3:3e:81:e5:a3:46:d8:9b:ef:e4:42:25:dd:ed:c7:6d:
         3e:45:d7:00:8f:ed:17:12:e6:3f:95:60:9d:e6:f3:b2:bf:dd:
         db:9f:76:79:11:c8:30:e1:a4:95:e4:db:9c:de:d2:3e:58:22:
         21:e5:bb:a2:98:8e:c0:2c:4f:ba:95:c4:2e:07:d9:ff:4a:e0:
         db:f7:6f:bf:b7:5d:7d:dd:42:d3:f6:ee:c6:12:cf:54:35:3b:
         cb:d0:5b:0c:8a:88:2a:58:2e:e3:4d:6a:5a:2f:1a:a1:82:25:
         7d:b6:31:88:45:68:f8:89:cb:70:e1:b2:f2:c8:7c:17:bc:27:
         e7:b7:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:28:26 2025 by rpki-client on console.sobornost.net