Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft
File:                     76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft (raw, json)
Hash identifier:          JkDYdMqEhYR4sac5yjeSNUiDA5JAJKKi3PCf0mR7npM=
Subject key identifier:   14:BD:67:6E:FB:51:7B:FB:DA:48:E0:C9:FB:D0:E9:87:B8:97:D8:BD
Authority key identifier: 76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF
Certificate issuer:       /CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
Certificate serial:       4DBF25DC3052CAF7B05BDBEBE212A98F509099A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 08:53:02 +0000
Manifest this update:     Fri 31 Jan 2025 08:48:02 +0000
Manifest next update:     Sat 01 Feb 2025 10:03:02 +0000
Files and hashes:         1: 323830343a363935383a3a2f33322d3438203d3e20323730323634.roa (hash: h2wUv/cu8G0y9BWhSaWfc0bakwSfqU0GlIGcqQ57Ef4=)
                          2: 76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl (hash: zMH2aDeJ56gHM9aSTehwZaQubWI5DALMVHcFZu6LTwE=)
                          3: 3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa (hash: RXQT6umd8Q+k+Esvg/ml679Ltis218ZG+QZWMa+guKs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bf:25:dc:30:52:ca:f7:b0:5b:db:eb:e2:12:a9:8f:50:90:99:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
        Validity
            Not Before: Jan 31 08:48:02 2025 GMT
            Not After : Feb  1 10:03:02 2025 GMT
        Subject: CN=14BD676EFB517BFBDA48E0C9FBD0E987B897D8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:d0:82:51:59:07:7d:d6:ed:2b:ee:f8:23:
                    05:f5:40:3e:89:e2:5e:5c:e0:80:3a:47:67:24:ab:
                    d5:18:38:d5:91:62:44:43:e2:8f:69:8e:7a:5d:8e:
                    06:f4:1c:b8:e8:fc:47:39:4b:fd:6c:62:a1:d5:f7:
                    bc:c0:60:ff:38:ac:bc:0c:e1:1c:47:33:4c:34:e4:
                    a6:86:33:55:64:0a:5b:f5:90:be:c1:31:56:65:7c:
                    c0:ed:ac:62:e5:0b:02:70:39:5a:a6:4a:90:5e:2c:
                    b7:0f:b7:95:07:cd:65:0a:f0:5a:ef:24:dd:b8:be:
                    de:f9:ae:22:1e:20:b3:1f:e3:40:58:ca:f7:be:e3:
                    e2:5f:45:2f:2a:11:be:ca:b9:45:e0:12:6a:ac:c4:
                    d9:c5:47:11:91:d7:97:ef:7c:5b:00:ca:2f:2e:78:
                    f4:40:42:64:92:67:61:80:a6:fc:32:cb:36:44:c6:
                    f8:b3:f6:00:ee:f4:41:ea:af:ca:2d:1e:f6:b1:9d:
                    97:d8:f6:ea:49:6c:7c:c6:dc:32:54:5d:d6:29:64:
                    8c:4f:88:6f:33:40:32:ae:ae:ee:5d:05:1f:c3:af:
                    f5:28:7f:12:a3:ab:d4:40:8b:1c:15:86:69:38:43:
                    d4:29:92:d3:96:97:f7:a6:4d:ae:90:24:b9:f9:eb:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BD:67:6E:FB:51:7B:FB:DA:48:E0:C9:FB:D0:E9:87:B8:97:D8:BD
            X509v3 Authority Key Identifier:
                keyid:76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d4:ff:7b:63:c7:b5:d7:10:62:dc:bb:e6:6f:16:48:8a:2b:
         1d:14:e3:2c:d7:b7:fe:a6:04:93:4a:27:91:f6:d0:60:07:34:
         cd:90:53:00:79:97:7c:20:36:ec:60:c3:a3:b8:bd:54:8a:7e:
         49:38:c2:61:2f:05:61:66:2d:48:1c:75:07:82:df:e8:f3:c7:
         d2:91:d1:e5:b7:d9:0c:0a:10:be:a9:62:5c:f4:0b:6e:36:75:
         40:9c:55:90:cc:47:f7:60:10:8a:28:d0:44:4f:2e:d3:07:a2:
         07:57:2e:42:9e:66:fc:2a:6f:56:f1:8b:31:c9:f1:bf:8f:26:
         e3:c5:b3:dc:aa:70:bc:81:e1:fc:20:e7:86:38:6f:5d:e6:b3:
         d4:ea:64:e3:09:fe:03:91:c7:ef:ea:d5:b2:b2:5b:b4:eb:25:
         23:81:11:e5:eb:3c:92:bb:b0:c9:ea:39:d9:20:0b:fc:0f:23:
         91:96:be:a8:9d:9c:81:31:28:ab:ab:7c:73:5e:ec:29:26:9b:
         70:9b:f6:c3:e7:eb:b8:03:8d:e8:a8:da:25:78:0a:6c:e7:e5:
         68:73:3f:d3:68:90:66:31:9a:2a:b7:39:45:77:99:4e:2c:1c:
         41:14:8f:55:dc:b3:74:34:71:66:e8:8e:d3:bb:4e:8e:81:9a:
         cb:a9:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:04:47 2025 by rpki-client