Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.mft
File:                     CB0236634B4C2CE495EE34D60558955292749C07.mft (raw, json)
Hash identifier:          e1jnQwW5ql+oHoE9uRVwGlaN8JdHm082gZKcPp6xKAs=
Subject key identifier:   3C:7C:D5:76:CC:EE:99:E1:FA:E2:15:0F:A6:9F:72:91:9D:40:CB:D0
Authority key identifier: CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
Certificate issuer:       /CN=CB0236634B4C2CE495EE34D60558955292749C07
Certificate serial:       0773EAE57CD694AAEDA85FF259645D7CCDCF5E96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.mft
Manifest number:          46
Signing time:             Sat 01 Feb 2025 07:17:46 +0000
Manifest this update:     Sat 01 Feb 2025 07:12:46 +0000
Manifest next update:     Sun 02 Feb 2025 07:55:46 +0000
Files and hashes:         1: 323830343a363564343a3a2f33382d3338203d3e20323639353137.roa (hash: cPP9Vk35ImFl4GnRIUWSSbkDdDmYDClpk/fz8Aw1Q6g=)
                          2: CB0236634B4C2CE495EE34D60558955292749C07.crl (hash: Rk8za2AiF6CH0wMU3oH2ctXXS7HWDCbez2WCiQ0oo+0=)
                          3: 323830343a363564343a3a2f33322d3332203d3e20323639353137.roa (hash: kfMZq6biw2PRQUaoPf3txOcWPR07WLGysNDwqxgf76Y=)
                          4: 34352e3138382e37352e302f32342d3234203d3e20323639353137.roa (hash: 4PnGM8sOT7Xxx6wwU5TeBvyKKJl0IPPgyX99vePc/aA=)
                          5: 34352e3138382e37322e302f32322d3232203d3e20323639353137.roa (hash: A3OW73U0UJ0+D151t44i6KBo6EU3LiherVq0lGv1J7U=)
                          6: 34352e3138382e37342e302f32342d3234203d3e20323639353137.roa (hash: Am7Akm3XriVDGA/V/qstiMfmnYByjeOJQP/8vdw4mpg=)
                          7: 34352e3138382e37322e302f32342d3234203d3e20323639353137.roa (hash: KUwBXU6v5IKNSknOcfvqMW0TspoTFo23477RxOvMNlo=)
                          8: 34352e3138382e37332e302f32342d3234203d3e20323639353137.roa (hash: tNAUD3f1SV9HAmZ97KHQOVoyF8bevWYlEb++auYvyx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:ea:e5:7c:d6:94:aa:ed:a8:5f:f2:59:64:5d:7c:cd:cf:5e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0236634B4C2CE495EE34D60558955292749C07
        Validity
            Not Before: Feb  1 07:12:46 2025 GMT
            Not After : Feb  2 07:55:46 2025 GMT
        Subject: CN=3C7CD576CCEE99E1FAE2150FA69F72919D40CBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:7e:34:d4:2a:6b:9d:54:55:c8:50:be:09:
                    a1:e2:2f:40:a6:6a:a4:99:43:45:73:ad:44:8d:e0:
                    e2:01:93:f6:10:1d:db:da:0a:08:21:c2:81:16:ee:
                    08:ea:3d:59:5a:12:2e:9c:4e:b0:15:83:31:a1:65:
                    30:00:ac:59:5c:6c:6e:41:24:00:70:d2:69:3e:f8:
                    c6:bd:a4:91:22:ed:b0:f0:e6:4c:14:01:55:19:98:
                    b1:d2:a9:04:48:b8:11:b3:0b:a1:84:37:05:d7:de:
                    31:a1:f1:ab:d5:2d:16:1d:97:bc:2c:12:3c:88:1e:
                    56:01:aa:69:1f:63:a2:03:84:f6:93:e5:04:e0:ba:
                    c5:e2:53:57:2d:7d:c1:ea:4a:16:af:59:fb:c2:a3:
                    78:3e:ce:a5:33:37:35:47:f9:53:21:d3:01:0f:a1:
                    cf:88:33:21:02:fe:ca:c0:3f:8f:6d:72:6a:e6:b8:
                    f4:cf:2b:cd:9d:ba:76:97:8f:2f:5a:ad:a7:2a:49:
                    ec:b5:e3:1f:56:28:56:96:49:c5:69:c2:3b:84:d4:
                    d6:cf:b7:b2:b2:34:11:55:a6:f0:ae:57:da:e3:ff:
                    2e:f4:74:ca:de:58:09:9c:92:74:41:13:0c:e0:d3:
                    6a:02:39:f1:f3:a6:4d:ad:e1:7f:10:ed:8c:39:41:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:D5:76:CC:EE:99:E1:FA:E2:15:0F:A6:9F:72:91:9D:40:CB:D0
            X509v3 Authority Key Identifier:
                keyid:CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:c6:fe:40:9e:97:99:83:fc:47:e0:f0:4e:07:f2:25:32:
         e3:f9:37:ba:79:5d:92:41:7c:4b:b9:ec:af:53:6f:4f:6d:6a:
         45:11:7d:b9:71:4b:8a:36:af:85:f3:2d:c7:8a:ea:bc:b0:db:
         03:9a:50:ba:29:45:21:48:2e:1f:22:76:e8:52:68:19:8a:b2:
         37:0e:4e:25:11:9f:34:11:6a:84:b7:84:2e:fc:47:29:8b:71:
         e9:ad:bd:e5:54:6d:76:6f:6f:f7:d5:94:d3:94:1a:f8:08:73:
         28:8c:c1:df:9d:95:25:f1:e5:f6:9d:fe:af:bf:2f:35:0f:38:
         59:66:87:a8:d7:05:07:1c:fd:2b:c4:86:4b:ab:4e:cf:b2:cd:
         b2:24:f6:fd:85:f6:da:c2:d0:c3:05:c1:21:df:88:f6:f6:a4:
         21:1e:1b:89:b4:c9:7b:00:85:7e:2b:14:5c:d8:fa:90:92:12:
         57:09:9c:b6:48:e3:de:08:99:08:27:55:4e:82:e6:ae:25:d3:
         4d:a7:53:7a:ae:e3:ea:77:6f:a7:77:95:6d:b1:21:e9:b7:12:
         34:5a:78:bf:ce:53:8b:04:6f:fa:34:21:3d:45:dd:4d:89:da:
         37:4f:14:00:bd:2d:c9:da:6b:72:75:4e:c3:06:5c:ee:83:78:
         c7:5d:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 05:42:46 2025 by rpki-client on console.sobornost.net