Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/61E90F5632DB67AC6132B737350FD7BDC259EC87.mft
File:                     61E90F5632DB67AC6132B737350FD7BDC259EC87.mft (raw, json)
Hash identifier:          PYN33DA+bqRKj3Wb/ndSpazB9n7KrW4yQLVQCXQUyFI=
Subject key identifier:   DD:57:B7:9D:AB:0F:E4:BA:21:FC:64:17:96:A9:66:C8:25:43:FC:7F
Authority key identifier: 61:E9:0F:56:32:DB:67:AC:61:32:B7:37:35:0F:D7:BD:C2:59:EC:87
Certificate issuer:       /CN=61E90F5632DB67AC6132B737350FD7BDC259EC87
Certificate serial:       36D9FD17AD8EA5C218EA339C96A4DDCE899529F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61E90F5632DB67AC6132B737350FD7BDC259EC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/61E90F5632DB67AC6132B737350FD7BDC259EC87.mft
Manifest number:          04
Signing time:             Thu 20 Feb 2025 03:35:59 +0000
Manifest this update:     Thu 20 Feb 2025 03:30:59 +0000
Manifest next update:     Fri 21 Feb 2025 07:32:59 +0000
Files and hashes:         1: 323830343a3739303a3a2f33322d3438203d3e203238363533.roa (hash: UVuNIOgNE+HCyYF6QF2AIBueUTqCge6S+R5d+45PwxA=)
                          2: 61E90F5632DB67AC6132B737350FD7BDC259EC87.crl (hash: aZ1btoco1D/G3Lpkhs8llUbyEze0ZPHHCFgtJCqGMKY=)
                          3: 3230312e37362e3230382e302f32302d3234203d3e203238363533.roa (hash: b7rgaAnIk2X3cPdo3KXc3E2RymMwhSLzI7YzL4+78LQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d9:fd:17:ad:8e:a5:c2:18:ea:33:9c:96:a4:dd:ce:89:95:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E90F5632DB67AC6132B737350FD7BDC259EC87
        Validity
            Not Before: Feb 20 03:30:59 2025 GMT
            Not After : Feb 21 07:32:59 2025 GMT
        Subject: CN=DD57B79DAB0FE4BA21FC641796A966C82543FC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:94:9a:e9:00:6d:c5:7a:8e:b2:f4:30:00:
                    2f:62:b8:70:35:e1:eb:27:73:f4:1c:a7:9a:39:85:
                    eb:3d:db:c0:e0:56:43:d0:cc:7f:49:95:ac:be:b9:
                    9c:fb:c4:34:ee:b6:7d:32:a7:be:6f:6b:e9:55:97:
                    4d:ad:2d:6b:01:b6:90:ff:c9:04:13:b8:24:92:74:
                    f6:b6:ac:59:53:49:9b:a3:8b:3d:56:1d:dc:23:94:
                    f9:b8:39:9d:4c:03:91:55:26:d9:29:eb:97:87:e4:
                    68:ba:ce:f3:19:5c:8e:9a:3f:8d:f8:b3:92:23:47:
                    c0:d9:6e:b0:07:4c:53:7c:d6:6b:7d:7f:00:12:f6:
                    3e:fd:bd:31:72:32:90:c0:43:a5:3f:a8:cd:1f:eb:
                    dc:fe:65:f4:89:f9:ec:c9:c8:b1:26:5a:1c:d4:b3:
                    36:53:40:26:a2:5f:3c:c0:91:00:a6:b4:88:bc:18:
                    57:5a:7e:8b:b5:92:77:b2:08:8d:69:37:ea:b6:4c:
                    b5:62:50:18:f2:fa:ce:c6:b3:07:84:9e:83:02:f2:
                    ef:d4:e7:57:57:61:a7:94:61:8a:22:30:19:da:f3:
                    38:d2:07:25:0a:47:7f:21:11:ae:ed:e3:3d:a6:0c:
                    7d:9c:cf:b9:71:9c:ce:7a:20:3d:5a:73:a6:db:10:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:B7:9D:AB:0F:E4:BA:21:FC:64:17:96:A9:66:C8:25:43:FC:7F
            X509v3 Authority Key Identifier:
                keyid:61:E9:0F:56:32:DB:67:AC:61:32:B7:37:35:0F:D7:BD:C2:59:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/61E90F5632DB67AC6132B737350FD7BDC259EC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61E90F5632DB67AC6132B737350FD7BDC259EC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnCbp8v7iDMurgVtADrM17wgTJuFiozSkksoxv54AjP/0/61E90F5632DB67AC6132B737350FD7BDC259EC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:67:dc:2a:a8:29:ee:1d:1e:6a:c7:60:b8:cf:c2:80:cf:
         b8:2d:56:51:9c:2b:a9:bc:9e:00:d5:74:f2:8c:c0:53:ad:74:
         c0:9c:cb:5d:49:5d:94:89:ba:b4:d8:00:23:a1:5f:c9:54:24:
         f4:75:49:51:0c:29:a8:ef:5e:f6:2e:ac:2f:66:88:cc:de:fe:
         42:9e:57:f3:9b:c9:25:7e:e0:83:7c:57:4e:1a:3c:17:b8:8f:
         9e:58:f3:ce:2c:77:0a:64:8f:2d:ca:27:b0:c1:90:9f:e4:58:
         d2:f3:1e:0d:1b:0e:76:17:89:0d:7d:a1:58:63:6d:bc:bb:d0:
         ae:2e:2f:77:1e:7e:10:ea:2a:55:bc:a4:71:a3:48:a6:70:30:
         7e:e8:3f:69:5b:bf:2f:b8:1a:63:73:05:3b:e8:df:8b:9e:5f:
         53:cc:d2:6b:cd:60:e3:d6:5a:85:71:a0:83:d3:08:bc:f3:89:
         31:9b:86:c7:1c:82:85:11:12:8e:3d:0e:3b:12:9a:d1:88:b2:
         11:0c:26:3c:f1:31:2c:01:ed:17:02:06:69:8e:37:a9:56:17:
         43:5a:87:af:a0:17:eb:d1:18:d5:bb:34:35:bb:32:5a:06:a5:
         29:c9:39:a5:00:a6:dc:c3:9c:44:9a:d9:42:8a:7f:da:23:63:
         45:ab:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:54 2025 by rpki-client on console.sobornost.net