Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          EPTpgc8xWIFB4MViPkBVWAr6PHkprnfIcGFZjmJSyic=
Subject key identifier:   2A:4C:7D:3A:E6:BE:8A:5B:2F:07:55:8C:23:18:02:3A:96:79:67:03
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       3C1B01BABD5EA02FF6521491FAFA135E4FB11596
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          07
Signing time:             Fri 31 Jan 2025 12:52:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:47:22 +0000
Manifest next update:     Sat 01 Feb 2025 13:17:22 +0000
Files and hashes:         1: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: fea2l4Czv0afsRyz6+vaalsHqhnmReRTa3LXxext3cU=)
                          2: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: Yr4E9+z/5F0guiJtesfecuSMeOMmf9ndDDz5FFFAij8=)
                          3: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: wySWIaPp8P/apsFvr8UGe1iAS4IBMMSJLQ0H95Wfao4=)
                          4: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: evBMuZINqcHeHMsP+DE1yiYnYPy8jhxgXpjGL+vMnoM=)
                          5: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: 4PPYBpXogJKoB8CdTXQjzX5YQWO69XxPjOg2VgclUPE=)
                          6: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: zhfAj8up/CxBM6GZnuFFQNzFJjo75wVCc/e6i3AXNbM=)
                          7: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: u8Gtg1w64hjHx82cogL9tzISbpLMPGPEPX5tye/1XiY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1b:01:ba:bd:5e:a0:2f:f6:52:14:91:fa:fa:13:5e:4f:b1:15:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Jan 31 12:47:22 2025 GMT
            Not After : Feb  1 13:17:22 2025 GMT
        Subject: CN=2A4C7D3AE6BE8A5B2F07558C2318023A96796703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:07:3f:22:a5:1c:f0:14:92:54:e9:99:9a:
                    43:de:41:4d:03:c5:28:ee:f8:4d:be:8c:85:57:93:
                    a3:67:34:33:dc:4b:2f:16:84:b5:2a:ec:3d:fe:83:
                    57:0b:03:54:5c:5e:9b:e1:1d:9e:d1:73:9f:db:d8:
                    bd:04:e8:1e:bb:56:5d:d7:81:c4:2c:80:28:89:e1:
                    3c:cc:da:0b:f0:3d:e4:6d:9a:a4:ae:87:0d:33:38:
                    dc:f6:1e:64:7c:3d:8f:8f:b5:8a:55:95:81:a3:c1:
                    4a:a7:16:e5:13:ee:ba:d3:05:a7:86:2e:af:98:9a:
                    8f:ce:95:6c:45:4d:6a:89:84:3c:48:ae:10:fe:4b:
                    e7:eb:92:57:97:8f:45:bb:23:1d:cb:32:f6:39:1e:
                    f9:3c:ca:15:f3:a7:7d:7a:ed:23:6e:8e:c3:9c:0e:
                    64:c4:a2:b9:6a:83:a2:2a:ab:1a:0a:11:7d:a0:2b:
                    13:ef:ed:ee:b5:72:76:a2:11:ad:c3:27:5c:5e:e6:
                    7e:d0:53:17:c1:7f:06:a4:99:d0:1c:a1:87:8e:11:
                    1c:53:72:1c:34:55:a5:f5:6b:3c:a5:60:48:33:b9:
                    c1:8c:ea:dc:19:3c:1a:7a:d4:ab:78:54:bb:d5:7c:
                    61:88:62:69:d2:57:88:ca:23:72:a9:12:3e:ea:2d:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4C:7D:3A:E6:BE:8A:5B:2F:07:55:8C:23:18:02:3A:96:79:67:03
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:86:a3:18:19:ee:9f:b8:de:23:09:26:19:b9:5b:94:ab:8a:
         07:a7:c0:77:47:e4:c7:33:f2:b4:2c:84:52:d0:d3:e9:2d:2c:
         25:6c:8a:0f:db:b8:30:c5:80:d0:77:ce:9d:ef:75:b2:a5:fb:
         9a:a6:46:14:5d:24:55:0e:d0:d6:c5:99:a3:c5:f4:64:9e:47:
         5e:07:32:2e:ea:90:60:dd:d7:8a:91:ab:67:57:49:c8:11:b5:
         97:33:89:79:a7:ff:26:6b:40:60:71:aa:0e:5b:20:70:73:aa:
         b5:3d:ba:ff:64:b9:32:c0:83:04:86:04:94:03:67:23:f0:93:
         f0:82:b6:4d:c8:9a:60:7d:5e:d5:11:cb:25:6b:2b:3e:52:26:
         d2:6d:27:c8:33:ea:c1:84:74:6d:82:98:e4:f8:88:b1:89:12:
         49:df:9b:30:03:73:d8:9d:be:08:39:cd:b5:f0:22:2e:64:ff:
         db:42:9e:59:89:93:11:3e:1d:9d:79:32:95:74:55:ef:b7:ce:
         c5:a3:cd:01:49:c4:dc:03:64:f2:31:cd:b6:5f:13:48:02:ac:
         ad:6d:52:9c:da:13:91:d4:ae:b0:19:97:d5:da:77:f3:dc:85:
         ba:c1:fc:6a:45:c3:49:53:cc:97:bb:b8:f4:47:fa:f9:2d:bc:
         a7:6f:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:06 2025 by rpki-client