Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft
File:                     22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft (raw, json)
Hash identifier:          SmA4rzRK6Zl+ZX+YlMm/Kj9f6ZMh+KVagWYqDSq+bpk=
Subject key identifier:   08:94:DF:77:49:D4:94:79:F5:43:EF:21:28:E1:36:A0:41:8C:D0:3E
Authority key identifier: 22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0
Certificate issuer:       /CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0
Certificate serial:       04EA68F3810E1DEF44F584431C1EB0A487AC8146
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 10:21:36 +0000
Manifest this update:     Fri 31 Jan 2025 10:16:36 +0000
Manifest next update:     Sat 01 Feb 2025 11:44:36 +0000
Files and hashes:         1: 323830343a353339343a3a2f33322d3438203d3e20323638353933.roa (hash: dzbTFZFt7AeX9Y1l+r+6ygpBHp2yNQJ5tzPec1xycZE=)
                          2: 34352e3136322e36342e302f32322d3234203d3e20323638353933.roa (hash: dmV4Fv1D57kuQxXtwo+9CuQp6Rr8S1iSSUyto4QInjo=)
                          3: 22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl (hash: MlEHy/Px9PR1Ps9SbH5i0aRdi2IWGd1aSM7+PfcPmDM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ea:68:f3:81:0e:1d:ef:44:f5:84:43:1c:1e:b0:a4:87:ac:81:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22377022A32DC670182F5C02A6E1E234ECF2F9C0
        Validity
            Not Before: Jan 31 10:16:36 2025 GMT
            Not After : Feb  1 11:44:36 2025 GMT
        Subject: CN=0894DF7749D49479F543EF2128E136A0418CD03E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:df:22:f9:37:8b:47:0f:0d:c9:1a:37:18:ee:
                    e3:64:20:cd:ba:64:f0:f0:58:1c:be:ee:dd:c8:e6:
                    62:7d:2f:b4:b7:10:de:b3:e4:4f:57:b3:fe:d6:0f:
                    ea:39:55:d2:dc:3f:3f:8c:ee:37:65:99:c3:0f:78:
                    ad:52:1b:4c:49:dd:02:a7:fa:5c:06:16:c7:d7:db:
                    d4:7f:00:9b:22:4f:66:94:14:20:d2:e0:f2:c0:67:
                    06:4a:3a:9a:3a:5f:8e:f1:db:61:63:ba:f4:8c:51:
                    59:84:9d:66:89:43:d7:3d:95:15:54:16:df:ab:f0:
                    9c:8d:12:2b:9f:c4:3b:9a:18:49:6e:e4:9b:c1:e0:
                    7f:3a:63:98:42:cb:16:b7:cd:c9:65:90:3a:8a:af:
                    8c:70:b3:96:56:96:8b:bb:8a:70:e1:5b:0f:2b:c7:
                    bd:21:bb:33:ab:b5:64:7e:50:7b:f9:ef:30:88:50:
                    de:d5:36:f5:c7:bd:9c:3e:6b:a9:f8:35:d4:cb:7b:
                    b6:d2:b4:00:aa:16:fd:52:59:d2:6d:c2:29:5d:53:
                    65:01:4e:bc:10:2b:81:5e:c8:51:26:5a:43:f2:89:
                    d8:91:26:c0:6a:3d:08:f0:89:9c:e5:08:30:d1:dd:
                    e7:91:27:bc:bb:95:08:37:f8:29:64:17:05:a9:40:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:DF:77:49:D4:94:79:F5:43:EF:21:28:E1:36:A0:41:8C:D0:3E
            X509v3 Authority Key Identifier:
                keyid:22:37:70:22:A3:2D:C6:70:18:2F:5C:02:A6:E1:E2:34:EC:F2:F9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/1/22377022A32DC670182F5C02A6E1E234ECF2F9C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:16:55:ca:e6:55:44:d8:12:78:a2:9a:e7:78:e0:47:b6:
         59:ff:98:7c:c9:80:a1:1e:72:7b:8e:27:9b:76:65:1f:36:76:
         d7:4b:50:9b:26:ad:07:cb:6c:dc:01:4c:31:4e:3f:f8:dc:05:
         11:c6:c0:9a:d3:a1:45:a3:10:70:ea:e5:5a:75:2d:97:28:cb:
         df:c1:93:5d:4d:26:33:9e:fb:8f:c9:44:0a:06:c0:08:d2:7a:
         73:e0:b4:f1:cd:12:17:4b:f7:54:3e:fe:93:4f:7a:4e:1a:39:
         47:c1:d4:7a:39:79:11:29:46:e3:d0:ef:ca:00:1a:f6:a0:0a:
         c2:dc:9c:2d:9f:a7:b0:9b:8e:d1:a9:47:66:50:61:9b:86:91:
         49:35:f1:20:9e:23:b4:a8:24:9c:cb:77:b2:78:2f:76:04:17:
         84:c7:c9:ac:ae:28:83:22:74:33:8a:02:6c:8b:f0:ae:89:1f:
         c9:f8:9f:a2:ae:37:11:dc:ad:bf:e3:37:dc:9b:b6:c0:dd:48:
         06:b3:df:a7:ea:c2:0b:6c:de:af:c9:61:64:bd:6a:2c:8f:cd:
         b6:1f:91:c3:de:a0:fd:74:85:5a:0c:bf:95:d3:60:1c:4a:b3:
         68:64:71:e0:2e:de:c0:c9:0d:7d:cf:6e:82:e5:d6:99:3e:8a:
         49:b7:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:22:21 2025 by rpki-client