Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
File:                     B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft (raw, json)
Hash identifier:          WzHhUOsVQOU6uPqfgeaSIC7EpLcMi/7OamvIN+gBmjw=
Subject key identifier:   48:58:A1:FB:68:73:91:95:2A:39:32:7F:8F:94:C0:C4:BC:CF:4D:26
Authority key identifier: B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF
Certificate issuer:       /CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
Certificate serial:       0D06AAC28D280A7D4C4C73B7D48289F6D3F7E0D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 15:46:24 +0000
Manifest this update:     Fri 31 Jan 2025 15:41:24 +0000
Manifest next update:     Sat 01 Feb 2025 18:56:24 +0000
Files and hashes:         1: 34352e3233382e34302e302f32322d3234203d3e20323638333131.roa (hash: ECvYVI6025jQqGFh0wzGFMxUhtQ8Q7LX6LJyas9KnnI=)
                          2: B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl (hash: 6uMNxLTsCfPQ4oMKMtuJjxJcBCXgqtJiuFVtWqpbBA4=)
                          3: 323830343a346633343a3a2f33322d3334203d3e20323638333131.roa (hash: Aht0L/pDZbta+zIticRZXwHjQTj1Sw8uT9Ul+rixFPA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:06:aa:c2:8d:28:0a:7d:4c:4c:73:b7:d4:82:89:f6:d3:f7:e0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DBBA8EA92CD857019C49802F323CF13FFF24AF
        Validity
            Not Before: Jan 31 15:41:24 2025 GMT
            Not After : Feb  1 18:56:24 2025 GMT
        Subject: CN=4858A1FB687391952A39327F8F94C0C4BCCF4D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2d:08:21:da:4c:c6:0e:20:41:8b:68:e1:19:
                    cc:a7:86:21:85:57:30:19:c7:a7:8c:ce:88:eb:f3:
                    6e:ee:2d:1a:1b:36:fc:04:11:10:78:25:9c:74:56:
                    cb:58:17:da:65:10:49:d8:57:2e:1c:59:41:d5:01:
                    8d:d0:6a:9c:62:be:37:44:d9:bf:76:4b:f8:c0:eb:
                    7e:20:f1:6a:cf:88:e6:5c:33:4c:3c:10:d3:42:a4:
                    5b:b4:3b:80:d7:e0:18:59:2b:39:af:a5:da:03:45:
                    3f:e4:a9:7e:b7:ec:2e:79:2c:14:ff:f7:f2:17:c6:
                    bf:ff:fa:23:96:1f:d5:eb:c3:b4:cc:fa:d6:c4:cb:
                    90:2e:d8:ca:a8:08:8c:22:89:d6:15:42:73:b1:6a:
                    5b:65:ae:7d:a5:ff:cb:46:fc:21:dc:3a:18:16:1f:
                    b5:c2:d9:d3:57:77:f0:97:8f:6c:db:67:40:f5:d0:
                    17:40:bc:c3:9b:2d:f2:b1:c9:41:ef:4a:54:f3:a3:
                    dc:2f:43:c7:43:58:1d:09:54:ef:8a:b0:0c:35:6b:
                    c0:e9:bf:9d:9e:3b:0e:62:b1:d7:3c:7e:64:ac:a6:
                    2c:63:d1:b8:85:54:ff:49:19:0c:10:5d:0a:46:4c:
                    bf:d5:2f:72:c7:f9:b9:1b:41:00:2d:e5:43:08:41:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:58:A1:FB:68:73:91:95:2A:39:32:7F:8F:94:C0:C4:BC:CF:4D:26
            X509v3 Authority Key Identifier:
                keyid:B1:DB:BA:8E:A9:2C:D8:57:01:9C:49:80:2F:32:3C:F1:3F:FF:24:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14AAMPR1GZAyRTptTUJ2CmHNHTrGifmtDQE2wFVaR5Yi/1/B1DBBA8EA92CD857019C49802F323CF13FFF24AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:48:36:17:30:66:85:6f:13:e2:bb:0c:35:06:ed:d4:98:
         f9:b7:04:1d:0d:d0:e5:85:14:d2:f0:96:4e:c5:88:c2:ef:ac:
         5d:49:9f:a1:9c:25:5d:0c:f0:db:19:33:af:8a:a7:ed:4c:8d:
         00:7f:45:e6:92:a3:a1:78:b7:3a:79:d4:3d:ac:f2:30:10:ee:
         8e:cb:8d:74:57:a8:9b:27:e5:03:d9:63:5e:c7:a1:15:12:fa:
         22:9d:74:8a:30:7d:6f:9e:b6:ec:b8:ad:d5:a0:c9:28:0c:b2:
         d2:1a:d8:31:e7:f8:c8:8d:49:df:7e:dc:50:a4:30:49:1f:43:
         64:c6:b8:01:b8:47:d7:cc:5f:38:95:79:bc:3c:58:cb:bb:50:
         5d:5f:e1:4e:7c:de:5d:62:8f:77:de:4a:8e:09:ac:a1:0d:81:
         b7:ed:17:92:b0:76:39:a1:7f:28:b5:6b:0c:06:75:c4:62:87:
         d6:d7:bd:de:11:df:01:8f:53:e0:e5:5a:61:f0:f5:ab:0c:56:
         68:90:43:89:64:78:fc:fb:f8:2c:07:eb:6d:27:e6:30:0e:eb:
         32:13:e1:2d:6d:81:65:6b:65:d2:de:45:ae:47:ab:b3:28:e8:
         4a:05:21:52:10:3e:45:7e:a9:7a:87:bb:9e:80:8d:b7:b3:5a:
         54:14:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:32:37 2025 by rpki-client