Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft
File:                     822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft (raw, json)
Hash identifier:          rcf8rDfHpjcGIEWwZcN37MCOLeYao80i1Ocb4F9e2vM=
Subject key identifier:   69:41:40:D3:7A:7C:69:54:93:7A:3B:87:C6:CD:94:5B:B2:15:FC:EE
Authority key identifier: 82:2E:39:8C:D6:E1:F5:D6:EC:6D:82:E1:34:00:D0:66:B6:F4:C8:B1
Certificate issuer:       /CN=822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1
Certificate serial:       37B0C33087F62164FCD6ACF37756A60CA1502CF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft
Manifest number:          013F
Signing time:             Tue 01 Apr 2025 10:13:54 +0000
Manifest this update:     Tue 01 Apr 2025 10:08:54 +0000
Manifest next update:     Wed 02 Apr 2025 12:54:54 +0000
Files and hashes:         1: 822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.crl (hash: KgdMR4VbYFBlRVR8u/tEXZrSmuZubYGGFHYQptETNZY=)
                          2: 323830343a326230343a3a2f33322d313238203d3e20323635313331.roa (hash: B+hLJWuHzZp9IqF7knTR+OFbDOc6f4EiS/vVFMrHjuE=)
                          3: 3134332e3230382e3232302e302f32322d3234203d3e20323635313331.roa (hash: OHmkoiwBsAjdZNjWDkJJVrPxC4XWCZU5iXM8akCS77I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b0:c3:30:87:f6:21:64:fc:d6:ac:f3:77:56:a6:0c:a1:50:2c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1
        Validity
            Not Before: Apr  1 10:08:54 2025 GMT
            Not After : Apr  2 12:54:54 2025 GMT
        Subject: CN=694140D37A7C6954937A3B87C6CD945BB215FCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:1b:d9:3a:6b:6e:b0:1f:f6:f2:df:39:f4:
                    61:9a:a9:9c:d1:d8:ee:7d:d3:33:c9:f7:40:24:07:
                    e9:e7:ba:2b:d8:a9:05:a4:42:a4:19:37:12:f0:2c:
                    16:55:f7:74:b0:28:2b:ed:8f:75:02:d0:01:d0:eb:
                    d9:d8:13:91:5a:38:43:0f:96:1d:9f:2e:53:44:64:
                    14:8d:a2:28:80:e7:1d:66:6d:d1:62:69:cc:d1:64:
                    48:59:bd:98:0a:37:fd:00:30:37:65:24:fe:18:ee:
                    55:33:23:43:ed:44:53:b8:78:aa:f1:8f:b5:5a:73:
                    7b:13:dc:80:91:e4:ea:d7:0d:da:f8:ff:57:3f:33:
                    06:bd:ef:dc:a1:b9:20:d9:f2:06:87:63:50:98:37:
                    b8:03:65:23:6c:28:d8:52:f6:a5:9b:9b:79:a6:0b:
                    c3:c3:e2:61:b5:f0:de:5b:90:55:d0:0f:cc:21:b0:
                    8b:79:11:75:39:3a:30:30:a1:a1:a2:80:43:76:4e:
                    1b:49:c9:76:69:e4:f7:6b:7b:f2:cc:72:fa:64:91:
                    17:ea:a9:ef:25:1e:67:df:d3:0c:74:16:12:8e:86:
                    c1:3e:dc:23:64:fb:a2:ad:a5:72:37:82:32:c8:9e:
                    4f:32:0f:99:d0:4b:1b:d5:6c:5b:b4:0c:47:86:76:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:41:40:D3:7A:7C:69:54:93:7A:3B:87:C6:CD:94:5B:B2:15:FC:EE
            X509v3 Authority Key Identifier:
                keyid:82:2E:39:8C:D6:E1:F5:D6:EC:6D:82:E1:34:00:D0:66:B6:F4:C8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:6a:18:c6:4f:5a:1a:de:79:97:17:0e:37:39:96:03:14:8d:
         38:8e:7b:fe:81:66:dc:90:60:f6:31:c3:ad:79:69:b2:04:cc:
         fb:70:55:08:38:79:90:86:bd:9f:70:d6:45:3e:4b:45:18:8d:
         c7:61:21:63:c2:4e:2d:a1:e6:0b:4b:10:e6:a7:18:8e:01:ab:
         ef:72:8a:8c:22:63:a5:5d:33:b2:19:f6:bd:73:7d:8f:55:48:
         f5:3a:e2:78:d1:3a:06:b0:85:ed:93:4e:77:3c:1c:30:e3:1d:
         58:f1:f8:e4:12:4e:0e:fe:9d:3d:90:71:4d:df:ee:8b:e3:4b:
         f9:b2:b2:8d:ae:0a:91:e9:b4:b0:82:77:f1:ec:a6:5f:5a:00:
         0a:3c:bb:36:0b:4b:e7:e2:bd:6b:ad:6e:9c:6b:fc:4b:e5:6d:
         a8:c1:ca:cd:7b:91:c9:ff:a6:09:3c:cc:aa:94:44:65:5d:10:
         f5:09:b6:7b:b8:21:62:a3:a5:fc:98:5d:eb:b7:01:04:de:13:
         90:8e:33:a0:da:88:1f:be:8b:dd:b4:e7:ab:bb:3d:b4:de:62:
         fb:80:cb:ba:04:b2:05:a6:e1:4a:c0:79:c7:d6:f6:03:41:96:
         bb:46:2a:df:49:52:f6:c2:26:af:42:a3:3f:7e:2d:dc:95:d0:
         27:76:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:51:58 2025 by rpki-client on console.sobornost.net