Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
File:                     0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft (raw, json)
Hash identifier:          tK7sbbRBVxfx2DvNvLKQkJI2eVLa6xBv1blE0w5QouY=
Subject key identifier:   A7:26:2C:C4:40:0C:3A:F1:68:93:7A:D7:C2:DE:68:78:1D:84:C0:9D
Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Certificate issuer:       /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Certificate serial:       362ECDF6E87645A7E3DEA46551AAD7599A89B6F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
Manifest this update:     Thu 30 Jan 2025 23:55:00 +0000
Manifest next update:     Sat 01 Feb 2025 03:58:00 +0000
Files and hashes:         1: 323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (hash: eXvVK2Ix1oMw1CwMXpadulGbD/x5E7vcmJn23p0jg1o=)
                          2: 3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (hash: 7Myy81UB6OABZrGUJgkmeq7bMLEXbjn95e8FEyeuRs8=)
                          3: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl (hash: 7Ik5bzx9UWMVokyoSIclQLpW/vkvr3fIz6aWBVZEaU4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2e:cd:f6:e8:76:45:a7:e3:de:a4:65:51:aa:d7:59:9a:89:b6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
        Validity
            Not Before: Jan 30 23:55:00 2025 GMT
            Not After : Feb  1 03:58:00 2025 GMT
        Subject: CN=A7262CC4400C3AF168937AD7C2DE68781D84C09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:f7:b4:30:e1:6c:cc:d9:41:d9:4a:c5:ac:
                    85:0e:97:c9:ab:7c:75:b0:44:d6:c7:19:88:93:20:
                    32:b7:20:21:39:81:f4:f3:4b:06:1a:f2:6c:a8:88:
                    18:c5:a9:87:33:de:40:76:46:6b:de:61:40:eb:2d:
                    da:31:e1:4e:1f:f7:35:2e:70:ef:d3:44:ec:c0:76:
                    75:65:e4:48:91:a9:a5:f6:31:59:74:dd:20:8f:1b:
                    2f:4a:7f:20:a1:d9:7c:f6:98:3e:da:29:43:df:29:
                    81:15:ba:cd:15:b8:f4:9d:5b:e6:5f:3a:ee:e1:ce:
                    b0:d4:df:e7:eb:8d:23:dd:b2:65:35:fe:fe:b5:37:
                    0c:e7:d7:2a:76:30:fa:1c:eb:94:37:c1:3b:b6:72:
                    67:21:76:2d:4c:18:8c:f8:49:9f:ac:25:c9:3d:0c:
                    4b:c8:23:60:7f:21:e3:4b:2f:fa:ad:40:29:3b:a9:
                    d9:51:eb:85:53:df:47:58:dc:79:3a:a2:3b:7c:6f:
                    10:a3:19:89:de:5c:56:b2:f8:d8:64:ad:9b:0f:ea:
                    9d:ce:2e:2f:d9:46:1b:b9:6a:4e:18:e6:73:80:8b:
                    64:d3:5e:f2:e2:c9:b5:c5:5a:87:83:fd:62:ef:ec:
                    42:c4:7d:18:d9:ba:2b:65:10:d0:05:f5:e3:c4:53:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:2C:C4:40:0C:3A:F1:68:93:7A:D7:C2:DE:68:78:1D:84:C0:9D
            X509v3 Authority Key Identifier:
                keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4c:0b:52:8e:03:4a:a7:30:09:06:19:c6:89:02:24:7a:d1:
         19:cb:06:07:fa:f1:87:ec:3f:02:3b:76:74:06:66:87:74:03:
         dc:6c:7a:f0:3a:f4:96:ca:6e:dc:18:d0:c3:5c:9f:c1:dc:5f:
         39:e0:9e:df:21:7f:79:a0:e2:65:61:0f:ab:95:32:2d:32:32:
         89:10:8a:2c:3c:cf:3d:24:92:6a:96:b7:3c:cf:ec:30:cf:1e:
         ee:42:c0:b2:72:14:35:85:13:11:93:ca:0b:51:87:e9:ba:7e:
         0a:a0:c4:6a:26:a3:0d:51:65:de:3c:94:4b:57:82:be:79:16:
         75:a2:1e:fb:4c:da:a5:86:15:7b:51:48:a3:bf:8d:b8:e7:08:
         d8:13:55:b5:f6:18:ce:03:54:03:3a:1b:49:4c:cb:ba:3c:cf:
         69:cb:4b:41:58:9e:94:86:d7:8e:a8:6b:0a:dc:a9:93:92:ab:
         99:a9:3c:b8:eb:03:5d:60:aa:8f:84:cc:f9:48:d2:6f:8d:fc:
         e4:0b:71:9f:d1:00:67:05:18:81:dd:5f:70:7e:98:2f:0c:c6:
         5a:36:0a:8d:8c:d6:62:e4:e7:7b:a4:4a:fc:10:68:04:e1:49:
         3f:b3:14:3b:ff:66:c5:ed:f6:2e:62:5d:4b:d3:1b:5e:b9:86:
         74:a5:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:55:07 2025 by rpki-client