Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
File:                     AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft (raw, json)
Hash identifier:          Lcqz/4xSadAPdMr2oMcoQR8o4brYzBB3nT25ctoO94E=
Subject key identifier:   A4:C1:5E:2E:BC:6B:2C:B9:48:E7:21:21:E1:37:24:BB:2E:3C:61:00
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Certificate issuer:       /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial:       0D2CFB056AD739738D39CE1001F67DF5472B3EFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
Manifest number:          36
Signing time:             Fri 31 Jan 2025 09:59:10 +0000
Manifest this update:     Fri 31 Jan 2025 09:54:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:50:10 +0000
Files and hashes:         1: 3137372e35322e36342e302f32312d3234203d3e20323632343338.roa (hash: K8PQUgh01LzhRhJHkugvECyuCRfTqjC9/MVn46/IUms=)
                          2: 323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (hash: Nqck8WgvQAKrcOZojIIg8caQwhZaHsLYU74VYSjovik=)
                          3: AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl (hash: coyIxuMsugxEt7y710HdGWVNh2ZNYExFXBIy1IyqxPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2c:fb:05:6a:d7:39:73:8d:39:ce:10:01:f6:7d:f5:47:2b:3e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Validity
            Not Before: Jan 31 09:54:10 2025 GMT
            Not After : Feb  1 10:50:10 2025 GMT
        Subject: CN=A4C15E2EBC6B2CB948E72121E13724BB2E3C6100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:32:b6:53:61:cd:c8:67:b2:c2:ab:0d:e1:
                    6f:39:e9:aa:58:78:c0:4c:2e:ee:b5:5d:0b:7a:99:
                    5a:e9:70:4c:e4:a4:a8:6d:55:06:62:eb:84:8b:1a:
                    63:21:4b:6a:d9:94:fe:b6:b1:26:e4:22:38:54:8e:
                    97:98:95:b4:11:1e:e9:e0:8a:b4:d2:19:0e:9c:12:
                    20:a5:8b:03:d8:db:3d:c0:16:a6:5f:36:8a:db:41:
                    f1:1a:dd:eb:99:83:29:c0:da:6a:9a:19:e2:23:19:
                    a0:f2:c0:aa:3f:32:6a:a8:e0:0d:b0:69:6f:69:25:
                    c8:ce:ad:8f:64:96:95:27:29:d4:0c:8b:50:e2:3d:
                    64:d4:cf:02:fb:70:36:a5:2a:3e:83:a0:a3:32:38:
                    05:8d:42:0f:91:a7:c6:ae:c5:93:33:52:c7:7e:a0:
                    0d:2e:c2:80:57:15:a1:e4:96:7d:c3:dc:5a:1f:43:
                    53:76:d1:a3:cb:2c:0e:db:1d:16:ed:ff:02:c7:16:
                    a7:51:d3:4b:f4:32:bd:28:10:2e:45:d1:38:cf:c8:
                    50:c2:f3:40:5a:2d:ca:3f:3a:96:2e:56:f2:84:94:
                    75:a1:bc:a6:06:a1:1c:46:45:ed:ba:37:36:95:d7:
                    72:cd:eb:0b:bc:49:eb:65:9f:3d:16:2c:b6:6a:fd:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C1:5E:2E:BC:6B:2C:B9:48:E7:21:21:E1:37:24:BB:2E:3C:61:00
            X509v3 Authority Key Identifier:
                keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:58:64:cd:92:98:73:10:40:e6:ad:2f:12:aa:42:72:bf:
         31:86:fa:c6:09:09:5a:cc:74:96:bc:31:53:1a:60:0f:00:83:
         37:3e:00:27:52:18:91:df:e8:2d:88:18:c4:01:6e:8f:78:a0:
         9b:d0:a9:1f:94:85:67:68:84:ce:a4:55:47:33:8d:59:41:99:
         ba:6e:b3:b8:7b:c2:32:74:9b:6b:a6:e4:6b:a6:6c:f0:79:73:
         56:c7:7b:a8:85:05:da:06:3b:4c:bd:ba:36:7f:fe:f9:b5:1a:
         a6:bd:6f:a0:fb:26:d0:54:8b:cd:ef:d5:2d:c9:c9:66:65:28:
         f2:63:c1:0c:84:f5:35:d5:98:19:f5:8e:64:7f:ad:31:f7:d5:
         c0:86:13:76:02:9d:3f:f2:4f:d4:ed:20:c1:5c:cf:3c:f7:89:
         7e:0d:c1:60:64:bd:54:ca:67:aa:c0:87:8a:8b:0d:ed:8f:8e:
         9f:ba:72:68:2e:e9:16:76:66:07:a7:62:45:a1:f0:94:23:82:
         da:d4:79:03:2f:f2:00:88:02:24:10:53:f0:b2:99:7d:1b:c8:
         48:9d:f0:97:13:f0:0a:b2:c7:0d:21:43:41:b6:35:83:fa:3d:
         10:ad:cf:7c:41:64:21:96:5b:fe:ad:7e:ba:98:3a:0f:53:cc:
         c3:67:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:01:08 2025 by rpki-client