Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
File:                     DB87B78475D3067687137BE8069FFB8CBC613CAF.mft (raw, json)
Hash identifier:          rsAT1EVGl3wiQBmRMbNyxPT/typZ6+E8KOdJeEfm6DE=
Subject key identifier:   62:2F:63:B4:04:14:AB:58:CF:A8:65:68:97:EA:07:1C:E8:AE:71:81
Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
Certificate issuer:       /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Certificate serial:       42C58AF63D67B2A74CEC4A5382C39D5BDC3821CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 07:58:54 +0000
Manifest this update:     Fri 31 Jan 2025 07:53:54 +0000
Manifest next update:     Sat 01 Feb 2025 11:23:54 +0000
Files and hashes:         1: 3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (hash: KVtDdYV0Oz+OdUeNMIGlFUYIY2oj9MItyW5ifSH17kU=)
                          2: DB87B78475D3067687137BE8069FFB8CBC613CAF.crl (hash: LfuSSHELwMv8BEdndNOkqU1ow166hapzlWm9wBqDvrQ=)
                          3: 323830343a376663383a3a2f33322d3332203d3e20323731373039.roa (hash: j6033AuUjc59rlU/CzWzTwKIFEFmaptFMlnzPAA4Y0g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c5:8a:f6:3d:67:b2:a7:4c:ec:4a:53:82:c3:9d:5b:dc:38:21:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
        Validity
            Not Before: Jan 31 07:53:54 2025 GMT
            Not After : Feb  1 11:23:54 2025 GMT
        Subject: CN=622F63B40414AB58CFA8656897EA071CE8AE7181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:2f:2b:7a:44:10:9e:fc:c2:dd:55:10:19:
                    3d:2a:05:2d:ce:4a:4f:38:7e:6a:c6:40:66:a8:1a:
                    9a:17:3c:41:23:08:e9:13:a4:04:42:2e:42:75:0b:
                    1c:3a:d7:4f:4d:93:c1:69:cf:db:21:2d:af:c1:37:
                    f0:20:0a:85:e8:4e:3f:27:19:f2:bd:4c:0e:8b:0a:
                    7a:7c:15:c4:b7:0e:cb:17:27:75:c5:f2:17:ce:d4:
                    b4:da:64:67:cd:8b:d9:1c:b6:4b:55:20:39:83:d5:
                    9c:49:18:33:de:10:83:d7:b0:2c:4a:56:9c:38:bd:
                    8a:1d:da:94:50:a6:4a:2d:3a:54:f0:b2:de:84:c6:
                    6d:8d:ce:6a:f7:59:86:57:15:dc:c5:21:06:2e:42:
                    ae:49:aa:4a:4e:56:f2:d3:19:3f:c9:91:e5:a3:3b:
                    a9:12:82:22:92:fd:6f:36:c7:70:c3:9c:a3:94:35:
                    5e:7c:40:06:f6:24:61:60:18:2a:9b:e5:cf:d1:30:
                    2f:fd:bd:e1:e9:a0:c6:0b:b4:5f:bc:5b:a8:91:f5:
                    6d:8d:76:32:5d:d3:c4:0a:3a:eb:bf:e0:67:19:00:
                    35:bc:68:d8:ce:65:47:69:b3:62:32:8c:e0:07:36:
                    de:6c:d5:ce:ee:8c:65:17:63:d4:0a:9a:9a:a9:de:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2F:63:B4:04:14:AB:58:CF:A8:65:68:97:EA:07:1C:E8:AE:71:81
            X509v3 Authority Key Identifier:
                keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:e3:99:cf:44:08:9b:b9:1d:78:75:3d:41:dc:82:cc:14:
         c1:b7:5b:7c:72:ef:c2:45:37:c9:bd:14:99:5f:f4:2f:4c:f4:
         c8:04:be:38:85:a9:9b:69:24:d1:5f:8c:44:99:ac:3b:f7:9f:
         e6:99:fe:f3:49:51:3a:19:86:f5:3a:15:cb:b7:b8:ae:c7:8b:
         c8:4f:88:5d:c8:aa:8c:9e:22:b9:5e:16:b0:90:3c:55:86:f8:
         b3:06:93:0c:e8:be:0e:44:02:e8:6a:0b:de:4c:c5:af:ce:c7:
         7e:4b:f0:06:09:77:01:5e:7a:38:14:75:fc:6e:3b:b5:00:d6:
         c9:19:77:65:db:69:bc:e7:1b:60:b5:e1:6b:89:41:a9:9a:6b:
         3e:ea:f6:fa:97:24:e0:c9:65:30:f7:95:3c:ee:3f:4c:99:65:
         6c:d1:f8:b4:b4:96:a2:5f:37:4c:e9:1a:91:b8:35:7d:e5:43:
         f9:84:f8:7f:6a:18:3c:24:66:46:11:6a:a2:a0:d1:6e:87:b2:
         42:0e:d8:ec:1a:4d:a1:93:2b:21:bc:81:d8:90:b2:a0:f1:65:
         ec:8d:d7:d4:6f:2d:96:e9:f5:77:39:90:0c:cf:5e:d5:0f:7d:
         34:12:63:1e:cf:75:2c:d0:b2:22:c4:f9:ba:28:bd:74:81:b1:
         80:14:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:29 2025 by rpki-client