Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
File:                     30FE93C29B2D9E965F52FCED04760810A240E9E1.mft (raw, json)
Hash identifier:          GKxU9pDoELAvwkiGrhrLVwXhgkTEEJ0L65Tc7FPamlU=
Subject key identifier:   00:A5:A6:5B:AD:A8:99:2E:0B:66:84:C2:07:7E:24:EE:89:B4:F7:DD
Authority key identifier: 30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Certificate issuer:       /CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Certificate serial:       572A3A06A99064113C28CAC42651ACFE7E4147BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 11:30:44 +0000
Manifest this update:     Fri 31 Jan 2025 11:25:44 +0000
Manifest next update:     Sat 01 Feb 2025 14:40:44 +0000
Files and hashes:         1: 3139312e3234322e3136302e302f32302d3234203d3e203533323436.roa (hash: 5BnoxB5wXIzMfUD5aZMy1gYsnDUvB738qajCB6R0fLI=)
                          2: 323830343a3335383a3a2f33322d313237203d3e203533323436.roa (hash: yBDSmUfxqOSWQB9vkO+ov+DM0VLEYT7ihvyl9iSSN0k=)
                          3: 3137302e3135302e34302e302f32322d3234203d3e203533323436.roa (hash: HNKXg2bLHu31vSCZuq1SyuGVFgV6pi11o8CKaRop3gE=)
                          4: 30FE93C29B2D9E965F52FCED04760810A240E9E1.crl (hash: p88Fif/gW42QSYEIfyC40eZCW64uZMp79RFEBmt/kS0=)
                          5: 3137372e32312e39362e302f31392d3234203d3e203533323436.roa (hash: XYYTHO1H5n3pWSC4K+/LtnYIPqyHqOUzqcHTgDzRWdg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2a:3a:06:a9:90:64:11:3c:28:ca:c4:26:51:ac:fe:7e:41:47:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Validity
            Not Before: Jan 31 11:25:44 2025 GMT
            Not After : Feb  1 14:40:44 2025 GMT
        Subject: CN=00A5A65BADA8992E0B6684C2077E24EE89B4F7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:d0:93:56:ac:1a:f2:8a:4f:68:54:b4:8b:
                    ed:4c:02:3e:15:76:a3:60:cd:e2:b5:04:bb:6c:bd:
                    9d:c9:6c:e6:32:1f:fe:49:38:f7:d0:02:de:bf:a0:
                    0a:66:af:76:38:d6:8c:01:19:ad:74:39:64:26:53:
                    fd:b7:d2:80:57:35:19:ac:97:84:61:c6:2d:39:44:
                    8f:e8:f2:66:af:3a:79:b3:e7:d7:51:f8:6d:85:b2:
                    2e:bd:e9:2b:b6:19:9e:d7:4a:99:e7:15:dc:c0:cc:
                    33:4c:9b:9e:9c:68:de:42:4a:82:37:95:54:b5:1a:
                    ca:f1:95:c4:73:3a:5d:9a:fa:27:c1:92:06:30:7b:
                    a9:aa:ef:3d:64:4d:b6:4d:18:93:f1:0e:d8:6f:15:
                    73:5d:5c:d4:1c:d7:f4:b1:b4:7a:9c:12:ce:d8:23:
                    5f:79:26:d3:f8:2d:16:44:12:99:42:ec:09:1d:3f:
                    46:a7:8f:1d:d4:fa:56:76:d1:9d:b5:58:45:da:ad:
                    29:82:ee:ba:51:78:b4:de:f8:1d:98:e2:f5:f4:63:
                    26:31:9b:e0:5c:bf:3e:cf:65:f9:f8:23:d1:a0:81:
                    87:e3:95:8f:a0:b9:1d:94:8f:4c:4a:00:9f:9f:49:
                    d6:e5:a7:99:06:ed:de:a7:04:09:f7:98:53:b7:12:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:A6:5B:AD:A8:99:2E:0B:66:84:C2:07:7E:24:EE:89:B4:F7:DD
            X509v3 Authority Key Identifier:
                keyid:30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:48:0e:a1:08:c5:cc:c9:cd:9f:65:71:1e:f8:6f:42:72:
         22:ea:03:fd:fa:fa:90:20:1b:8a:22:73:52:b9:24:7b:fc:81:
         f7:1d:01:2a:c8:ed:e4:c0:3c:c0:9a:48:c0:5b:71:26:76:0a:
         cf:87:9c:1d:69:a1:88:6b:7f:76:ce:11:58:11:8e:8d:72:89:
         16:d8:ec:73:66:0f:46:0a:50:5b:38:b3:c6:95:4d:94:d1:13:
         ba:da:fb:f0:03:74:dd:50:f5:a3:0e:a8:93:b7:51:ee:4b:7c:
         38:d5:54:fa:51:52:19:7b:15:68:41:1c:e4:e2:b2:b9:77:cf:
         f9:c8:bc:77:55:00:23:0c:a7:b0:46:87:41:24:97:de:1e:cf:
         59:8a:08:29:f8:c6:96:aa:84:28:e5:fa:43:e2:3b:2e:9e:52:
         c8:36:63:1a:c1:3a:49:7a:18:5a:0d:e8:cb:78:d4:c6:f4:f0:
         31:7e:cd:7b:5a:d8:fc:68:c7:b2:34:f4:d3:07:c5:d9:f8:2b:
         1d:fa:02:a4:13:8c:1b:bb:26:7d:67:62:30:77:a9:50:6a:14:
         94:f8:38:ce:eb:73:fc:74:a9:f6:d3:f9:9a:cd:91:c5:2d:aa:
         2c:b1:a0:a3:56:6f:1f:60:98:a5:ca:f0:12:ad:f7:2d:3b:d5:
         53:9b:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:48 2025 by rpki-client