Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.mft
File:                     B005EA4161E63BC8DBDA011004C07D752C26EEF2.mft (raw, json)
Hash identifier:          PeeUK4OcGnO+jP+2j3YZuc1ChOvPOs6B8yE593Y34SE=
Subject key identifier:   3D:01:6E:F0:CB:C4:CD:0D:34:32:F3:AC:9E:F9:BB:66:92:35:BE:D7
Authority key identifier: B0:05:EA:41:61:E6:3B:C8:DB:DA:01:10:04:C0:7D:75:2C:26:EE:F2
Certificate issuer:       /CN=B005EA4161E63BC8DBDA011004C07D752C26EEF2
Certificate serial:       36FF8D9E4D66ADFA9FB4F35FD4D44714AC2C9A35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 13:43:26 +0000
Manifest this update:     Fri 31 Jan 2025 13:38:26 +0000
Manifest next update:     Sat 01 Feb 2025 16:38:26 +0000
Files and hashes:         1: 323830313a38303a333664303a3a2f34382d3438203d3e20323639323136.roa (hash: 7HR27c4rmLk7zNESdG14CP2mz8lmIfBdMdW7N88oDzo=)
                          2: B005EA4161E63BC8DBDA011004C07D752C26EEF2.crl (hash: 2pjNswlGbVzwFhivnxkzJtJP46BsQ5WbbvLrX1LTkWE=)
                          3: 34352e3138312e372e302f32342d3234203d3e20323639323136.roa (hash: QpD8M/Pvn5gX2rHbBobdGEEg7Na8yyJh1HItGizC0AY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ff:8d:9e:4d:66:ad:fa:9f:b4:f3:5f:d4:d4:47:14:ac:2c:9a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B005EA4161E63BC8DBDA011004C07D752C26EEF2
        Validity
            Not Before: Jan 31 13:38:26 2025 GMT
            Not After : Feb  1 16:38:26 2025 GMT
        Subject: CN=3D016EF0CBC4CD0D3432F3AC9EF9BB669235BED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:1b:63:83:a9:79:32:7f:50:e8:fe:c9:2b:
                    ae:9f:0d:5b:85:ca:5d:38:5e:0e:aa:fc:ef:ce:81:
                    4e:8a:13:5c:00:2c:3f:4a:77:98:a6:b7:fc:ac:51:
                    36:fe:3e:89:04:82:b7:54:8c:7f:31:98:4a:13:46:
                    2b:7e:53:76:a8:77:4d:11:a2:9a:1c:31:d9:cc:e7:
                    70:a1:d8:aa:96:50:e8:3a:c4:16:58:21:26:24:cb:
                    0c:91:d6:bf:fd:d8:03:49:15:5d:a5:24:20:5d:e5:
                    ab:d5:d9:ae:6d:ed:d5:d0:eb:34:5d:5a:17:66:f8:
                    89:e0:9a:8c:24:7e:d9:25:f3:5a:29:06:94:90:8f:
                    3b:64:ee:dd:5d:bc:48:f0:37:ce:8b:cf:cb:8a:1f:
                    a4:54:fd:2f:ba:a0:f6:68:a3:f2:61:e7:81:c2:54:
                    bf:9e:89:db:e9:00:75:bd:98:6f:15:82:17:32:8c:
                    43:2a:b1:d1:33:e2:b4:d6:74:dc:7a:89:09:e2:ed:
                    14:87:32:8c:21:5a:a2:c3:a9:5a:ad:28:bc:73:42:
                    fe:50:50:61:65:6d:6f:f5:f1:00:49:ba:2c:fb:05:
                    80:7e:25:97:95:1d:0f:f3:fd:ed:36:b4:51:b4:f2:
                    f7:5d:2d:c6:1e:b9:77:3c:57:eb:f0:09:cc:85:ee:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:01:6E:F0:CB:C4:CD:0D:34:32:F3:AC:9E:F9:BB:66:92:35:BE:D7
            X509v3 Authority Key Identifier:
                keyid:B0:05:EA:41:61:E6:3B:C8:DB:DA:01:10:04:C0:7D:75:2C:26:EE:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2goSCtU9KNYjPcGpmm3sZ6sKTQyDzhz67p2tFDUDgJC3/1/B005EA4161E63BC8DBDA011004C07D752C26EEF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:92:bc:c1:7a:2a:61:8e:83:c0:be:a7:c9:8a:5e:eb:b8:
         91:47:45:2b:4f:7b:7e:87:b1:f1:fe:d4:de:98:7a:cd:a4:d3:
         c3:8b:16:a4:b5:65:32:32:72:3b:f4:66:d6:d1:b1:cf:c5:8f:
         8f:90:53:a9:09:79:ce:a2:b6:03:5c:d9:84:73:4b:e2:0d:17:
         3e:7a:72:e7:b6:8d:25:94:17:64:dc:38:2b:57:0c:2a:8e:8d:
         19:ec:86:c5:a2:fb:4d:6c:3c:29:58:49:0c:30:3a:c5:08:e4:
         d9:17:3c:0e:dc:fe:b9:9e:a7:17:ba:e9:cf:0e:50:cb:b3:11:
         ac:81:3a:8c:b8:51:d8:8a:98:be:7d:42:62:5b:20:69:70:20:
         1f:9a:15:25:35:a1:bb:41:89:39:f5:3e:89:e0:cf:6c:67:f1:
         23:56:b4:1e:75:90:aa:09:3b:b1:14:51:2c:6b:68:9d:41:a9:
         bb:c2:1c:c1:86:c3:83:cc:4e:53:f3:fb:c8:f3:c7:4b:8a:1b:
         40:41:37:78:74:d6:cc:17:31:77:1c:69:5e:f7:33:d1:2e:d7:
         cb:dc:18:d2:e9:8f:67:8b:f9:a7:89:ca:a3:68:4d:de:08:db:
         2f:08:77:46:02:4f:c1:41:54:66:e4:d2:1c:f7:0a:3a:85:8e:
         3a:57:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:20:33 2025 by rpki-client