Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft
File:                     573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft (raw, json)
Hash identifier:          InwLKq2LA9/4U1pQmBW/a0bAoVlCHb2WbRHmZanzGnw=
Subject key identifier:   8E:EF:24:43:24:B4:75:6E:F7:BD:EB:39:80:04:DC:89:BF:05:0A:79
Authority key identifier: 57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07
Certificate issuer:       /CN=573D7E4FEE62BCF84142824A34979BB0A13D1E07
Certificate serial:       63D220ECD46E5EEF1DD3D0E18C8B530AB72FF1FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft
Manifest number:          55
Signing time:             Fri 31 Jan 2025 11:56:33 +0000
Manifest this update:     Fri 31 Jan 2025 11:51:33 +0000
Manifest next update:     Sat 01 Feb 2025 12:39:33 +0000
Files and hashes:         1: 573D7E4FEE62BCF84142824A34979BB0A13D1E07.crl (hash: qWXLvpLhCp8Bq7P0acD56fSoWmvwi8YWYRPj35aDApE=)
                          2: 323830343a336264303a3a2f33322d3334203d3e20323636313732.roa (hash: nq3ax6qsRzXjj8zKt2p6DkEpgdnFSsbGK/6TMFYDTY0=)
                          3: 3136302e31392e3234382e302f32322d3234203d3e20323636313732.roa (hash: HPNqJJOXlfMy3ztGyfXa/iz1r3co9KzQs8Q5U2iLHUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d2:20:ec:d4:6e:5e:ef:1d:d3:d0:e1:8c:8b:53:0a:b7:2f:f1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573D7E4FEE62BCF84142824A34979BB0A13D1E07
        Validity
            Not Before: Jan 31 11:51:33 2025 GMT
            Not After : Feb  1 12:39:33 2025 GMT
        Subject: CN=8EEF244324B4756EF7BDEB398004DC89BF050A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:9c:f8:bf:62:57:31:c5:ee:99:17:a8:c5:
                    98:1b:dd:1c:e5:93:e3:81:ac:23:00:ff:af:d8:f5:
                    d3:5d:e4:c6:4f:c1:18:3b:64:f5:68:08:4d:53:30:
                    db:36:58:9c:9b:19:f1:70:aa:a5:01:14:f0:a9:6d:
                    e5:0c:0c:0a:6c:b7:f1:7d:cb:81:bb:97:8d:fa:ff:
                    43:09:9c:51:22:96:30:e9:14:5a:1e:7a:88:49:d7:
                    8e:ef:8d:a7:0e:5a:6c:91:47:ba:82:92:98:78:cc:
                    f4:b5:f1:a0:da:a1:dc:8a:29:ab:98:71:45:e5:9d:
                    35:a6:a2:e6:77:df:d1:f2:54:51:76:fc:41:6f:05:
                    ef:ef:77:ee:03:8d:5b:db:3a:17:4c:f0:b5:8b:80:
                    b2:ad:2c:d8:2b:2a:16:8a:1e:fd:c1:1e:f8:14:39:
                    31:70:9c:38:f7:8c:0e:34:11:7d:16:ba:2a:9c:25:
                    4f:3a:8d:a5:31:ad:d9:3d:67:b4:3c:d4:80:1c:88:
                    cf:dd:d2:c3:d4:b4:d8:90:c0:64:6d:c4:ff:f7:55:
                    e0:b4:f4:83:50:aa:05:e9:f7:04:1f:0e:dc:55:81:
                    d8:2c:e7:c0:ce:ef:d5:2e:45:ed:c0:30:51:43:70:
                    fb:c5:e0:e3:09:7e:a9:bf:3b:05:dd:59:57:0e:a9:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EF:24:43:24:B4:75:6E:F7:BD:EB:39:80:04:DC:89:BF:05:0A:79
            X509v3 Authority Key Identifier:
                keyid:57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f0:7c:98:88:6a:98:96:ef:7c:76:bf:8a:5f:c5:bd:df:1b:
         f5:22:e6:f5:c1:28:8f:49:75:79:0a:41:6d:e2:26:ee:70:ef:
         b4:cd:7b:fb:f6:ce:79:a9:29:58:98:3f:dc:b3:00:98:18:f8:
         d2:c2:04:52:05:0c:fb:f1:84:fc:df:e2:74:fb:25:71:11:ef:
         62:0c:60:4e:e4:53:66:85:21:b6:99:9d:51:3b:18:13:d4:db:
         c3:ac:f3:17:58:42:1c:40:3b:a8:1e:e3:da:9a:c5:0a:db:da:
         26:c8:c0:3c:7e:fc:34:57:98:5b:4c:e8:db:f5:26:85:e9:b6:
         1d:b3:19:f7:8e:62:8e:0f:66:5b:dd:50:4e:b1:50:85:41:fb:
         c0:dd:9d:7d:55:56:aa:31:9a:a4:ae:c8:7c:f0:64:98:11:b0:
         2f:43:02:f4:e8:fa:aa:ad:d9:10:6d:0a:4e:2f:f5:f1:19:47:
         1a:d4:c7:fc:99:91:75:24:ad:da:72:3d:4b:a8:6f:fd:76:93:
         1c:c4:96:b3:1f:0a:bf:e7:c1:7d:c7:93:18:ce:3b:c4:c0:92:
         75:40:4b:12:42:7d:9a:06:88:25:58:9c:4a:c1:be:06:00:df:
         15:62:c5:3e:28:e3:a8:d2:03:29:09:b4:36:9d:0c:34:67:4e:
         64:7c:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:09:16 2025 by rpki-client