Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
File:                     3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft (raw, json)
Hash identifier:          dTdvuTIX6OHbuXy2EecbM9acfjiLfRIyFRXJPghrsbY=
Subject key identifier:   EA:61:C1:BC:EF:06:FD:92:D4:AC:57:36:45:39:78:7A:FD:D5:31:CD
Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2
Certificate issuer:       /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
Certificate serial:       1E6DCF3247B82E5CE69086EEE4BBDB692C0C86F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 04:43:23 +0000
Manifest this update:     Fri 31 Jan 2025 04:38:23 +0000
Manifest next update:     Sat 01 Feb 2025 05:38:23 +0000
Files and hashes:         1: 3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (hash: lXFqDJqFTV03GvEbpjass+8DqzqGC8Z9LWxa8lKtPd8=)
                          2: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl (hash: IGnS4fY5+mvazTF1IDUjoCzGsaOtoGNu4xeymtxWUEU=)
                          3: 3134332e3133372e37362e302f32322d3234203d3e20323633363638.roa (hash: Plbsgk1mgbvydt71dO0Sd43Rmrz/o3Q+taVD4sbTJ68=)
                          4: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (hash: ovOfNhZHWXVIGXcRXN0XGeOIarfY9y3Exgn7CwMh0Wg=)
                          5: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (hash: KziogyOV/MWL4wuLPDZOvgJocTdi3i0NC94EHSaeW7o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6d:cf:32:47:b8:2e:5c:e6:90:86:ee:e4:bb:db:69:2c:0c:86:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2
        Validity
            Not Before: Jan 31 04:38:23 2025 GMT
            Not After : Feb  1 05:38:23 2025 GMT
        Subject: CN=EA61C1BCEF06FD92D4AC57364539787AFDD531CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:58:d6:95:4c:61:fa:91:98:72:95:9f:fa:
                    b2:83:8c:fe:f6:4d:35:05:ce:08:b3:2c:93:5a:26:
                    03:ce:8e:47:cb:42:79:f7:c8:22:5a:4f:19:10:78:
                    24:0b:51:30:bc:23:3d:21:9e:54:da:61:11:5b:ec:
                    26:9f:5a:ee:c5:85:61:25:03:0b:ad:be:3b:32:f2:
                    3d:be:8e:7f:75:03:af:9e:a2:c4:d4:91:ef:1b:09:
                    02:e4:8b:7b:2b:1a:12:a0:3a:65:46:8e:33:e4:9b:
                    b0:ea:6f:f0:87:10:1e:e7:49:0e:d4:a7:0e:0e:92:
                    88:de:5a:ef:33:2e:5e:28:a0:21:4c:b2:da:5c:83:
                    70:c9:89:3d:10:54:ed:5a:cd:7c:b3:67:a8:4e:43:
                    06:bb:87:57:de:18:be:82:1f:92:31:5b:fe:ba:c5:
                    a0:09:0f:96:57:64:66:60:3c:f4:52:cd:9b:1d:ae:
                    07:94:e4:42:9e:2a:25:bb:4e:0a:83:91:60:9c:16:
                    1f:ca:b1:24:32:54:75:c7:61:6b:8d:e1:4e:16:f5:
                    b8:08:85:5a:95:9a:82:3d:08:62:82:4b:f8:2b:c1:
                    09:b8:a4:ac:71:86:42:c4:66:8e:c5:66:f0:51:71:
                    ff:63:e8:7b:99:e7:6a:43:1c:11:e8:ee:00:df:ff:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:C1:BC:EF:06:FD:92:D4:AC:57:36:45:39:78:7A:FD:D5:31:CD
            X509v3 Authority Key Identifier:
                keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:05:29:de:21:90:e2:1c:56:5c:5d:7b:45:54:e9:4b:80:
         b3:a7:b0:9d:81:61:37:2b:20:60:e3:d9:57:10:10:b0:0a:92:
         0b:cd:d2:ad:f6:34:ba:0f:7c:4c:88:00:b7:ee:1b:05:91:1d:
         54:6e:1c:63:84:6f:36:72:1c:5c:5c:ac:06:01:0b:ce:13:c5:
         59:6e:d6:02:4c:a5:93:96:bf:d9:e2:fd:60:7c:dd:1c:a4:56:
         57:d2:df:2d:14:19:b5:65:ba:8d:20:02:89:dc:1f:96:0d:58:
         87:9e:14:e6:f3:53:6a:69:83:ab:ee:6c:c7:d2:68:27:4e:fb:
         82:31:99:73:18:d9:3a:58:9f:f5:a7:a0:97:f1:ca:dd:db:13:
         c3:94:09:ad:9e:fc:6b:53:e0:9a:a0:63:bc:53:10:53:62:5e:
         2c:d8:33:34:cf:bd:7b:84:06:45:a5:ff:df:29:e3:54:ad:7f:
         10:c7:e9:76:11:43:7a:a5:ae:07:01:c8:b1:1d:28:a1:98:b1:
         47:0d:12:63:f8:a3:01:84:dc:79:b3:d3:d3:d0:8e:0b:db:77:
         04:a1:c0:5f:42:83:07:b9:05:d2:20:de:12:c5:d7:89:08:41:
         53:3c:af:5e:25:cc:e8:cf:f1:21:d2:05:00:88:14:9e:a0:e6:
         1b:87:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:47 2025 by rpki-client