Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
File:                     33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json)
Hash identifier:          a7jSq3KEPICk7JR9A2TVXJkqCin0l+bJfzOQ6RWqbPM=
Subject key identifier:   09:ED:DE:9B:5E:05:FC:3B:BB:BF:3C:77:3F:CC:35:49:4B:0B:F2:B6
Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Certificate issuer:       /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
Certificate serial:       639CC74D8C8BD75917793EC1705FF99AC6B11AB4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
Manifest number:          019A
Signing time:             Fri 31 Jan 2025 05:36:30 +0000
Manifest this update:     Fri 31 Jan 2025 05:31:30 +0000
Manifest next update:     Sat 01 Feb 2025 07:25:30 +0000
Files and hashes:         1: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: +G0H6/45nk7kHu05Oy5T5SMRlHwt34RYCOpe0Q9m4Zg=)
                          2: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: /XwYHZupa+FJTNO5XsovX8RlSGV6OfQ7o5Ml47Ou0qE=)
                          3: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: IZcT5fjbL7B222FvRYdmAELihwyA4ohZxbK0cN2DS7U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9c:c7:4d:8c:8b:d7:59:17:79:3e:c1:70:5f:f9:9a:c6:b1:1a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Validity
            Not Before: Jan 31 05:31:30 2025 GMT
            Not After : Feb  1 07:25:30 2025 GMT
        Subject: CN=09EDDE9B5E05FC3BBBBF3C773FCC35494B0BF2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:51:70:87:ca:04:7d:00:4f:f7:6a:ce:a3:
                    de:33:a2:ab:eb:04:48:84:99:af:da:59:6e:44:ab:
                    52:3d:b3:db:de:1b:25:9a:13:a9:87:3f:73:9a:67:
                    55:30:51:7c:f8:fa:34:63:f5:21:4b:5d:7b:0b:1c:
                    24:50:32:6b:fe:7b:d3:ca:ee:af:d2:a1:bb:b0:f7:
                    04:ed:69:06:63:b9:89:23:7a:90:ec:95:3c:b2:3b:
                    d4:fc:aa:b2:18:31:10:cc:68:e6:7b:d4:53:c1:24:
                    00:52:f9:a3:98:33:fc:6d:ed:67:42:25:2d:bd:6d:
                    68:af:6c:38:71:1e:41:b7:b1:b6:34:0d:ca:19:1f:
                    77:6c:94:89:f1:5f:4f:23:07:35:2e:a9:c7:68:2f:
                    5c:a1:4d:55:f9:d0:f6:6c:74:c6:cd:9b:7a:b8:31:
                    6a:9b:b7:f3:a1:f6:60:dd:ff:ac:b4:ff:0b:e7:a8:
                    73:2d:c5:bd:14:7d:d3:6d:b5:1d:ff:9b:a2:47:15:
                    6b:44:e1:b0:f7:05:1f:e1:6e:65:69:8d:9c:5e:8d:
                    b1:7c:ca:17:bc:4b:2f:b0:97:fe:9d:4d:b3:bd:05:
                    c2:fa:23:24:53:63:22:83:88:09:e6:a8:0a:1b:ad:
                    d3:35:d9:06:2b:a2:44:ba:b9:a2:01:96:cd:54:7a:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:ED:DE:9B:5E:05:FC:3B:BB:BF:3C:77:3F:CC:35:49:4B:0B:F2:B6
            X509v3 Authority Key Identifier:
                keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:af:27:df:bd:65:56:17:23:2c:5a:d5:91:71:a5:5c:2e:
         d7:89:09:ac:e9:7d:4c:ae:5e:00:be:09:4d:95:d6:80:34:03:
         43:27:c4:a2:93:98:f9:74:82:2b:ff:5a:0c:11:9b:5d:ec:4b:
         03:66:c9:57:7d:19:88:f7:75:92:19:a7:62:ef:ce:0d:24:7f:
         e6:b8:6d:df:16:0f:42:05:77:60:f8:fb:4b:5b:a7:e3:6c:e3:
         75:e7:1e:f2:ca:e9:4a:47:80:1c:9e:92:82:b3:7a:5e:db:85:
         b1:ab:da:a3:df:0d:db:ad:38:57:2d:43:74:6e:da:a1:eb:c3:
         f8:4b:6e:5c:d8:16:23:97:68:d8:ac:11:0c:02:c8:d3:a5:7e:
         37:64:5b:8b:65:6f:19:d7:11:3d:5d:88:e7:51:8c:01:23:d4:
         d2:92:9f:9a:a2:e3:42:b2:df:b7:00:95:fc:30:76:fc:43:75:
         50:8b:6d:70:9d:07:b3:d1:b0:47:1d:8d:bf:2f:87:c6:09:a4:
         07:66:e7:3c:01:c9:6c:df:e8:b2:fe:1d:92:08:0b:5b:25:ea:
         5b:8e:32:e5:37:88:b7:3d:20:cc:6f:38:74:46:27:6b:1b:ed:
         93:f2:78:c7:ea:45:01:7d:4b:07:50:72:af:6a:bc:18:35:1b:
         56:81:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:10:46 2025 by rpki-client