Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
File:                     DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json)
Hash identifier:          3l8WF7ZxOnKotELuNGtvXleJ5ifhxsUXX/aFikrgMy8=
Subject key identifier:   97:53:89:27:F9:88:37:E8:F8:EA:B0:AB:0A:4B:57:9B:15:CD:E8:71
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Certificate issuer:       /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial:       66E4DCC6E2ED06F0F9C1E635405A673E5CA6B16E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
Manifest number:          0163
Signing time:             Fri 31 Jan 2025 14:24:05 +0000
Manifest this update:     Fri 31 Jan 2025 14:19:05 +0000
Manifest next update:     Sat 01 Feb 2025 14:55:05 +0000
Files and hashes:         1: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: 5tfOBrygOXAVeXG5prlZAYljjLnFL4xsQWQCoQKIEPg=)
                          2: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: mS3dzyzuh09vfaUo1SquHXUMhXVEOsmXQp2uVB1G+fA=)
                          3: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: biKeaACFzgHi3xqeNrNkeI1ZWmghMR7ZKgtF1inCxKA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e4:dc:c6:e2:ed:06:f0:f9:c1:e6:35:40:5a:67:3e:5c:a6:b1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
        Validity
            Not Before: Jan 31 14:19:05 2025 GMT
            Not After : Feb  1 14:55:05 2025 GMT
        Subject: CN=97538927F98837E8F8EAB0AB0A4B579B15CDE871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:b5:55:c7:b3:f7:53:42:bc:d0:bd:8d:6f:
                    ac:ab:ba:f7:7b:61:f5:42:fc:9f:12:5b:12:00:44:
                    0e:fc:f9:2b:40:2c:80:53:30:11:50:64:fc:26:1e:
                    8b:0d:f5:e0:18:07:07:c3:8d:11:c1:4e:fd:87:12:
                    3d:0f:8a:0f:dc:f8:50:fc:97:40:5c:db:94:42:e4:
                    f1:e3:ee:e6:9b:cb:5d:1b:60:a3:73:8d:9f:e2:5f:
                    fe:80:3f:95:10:86:21:57:d0:75:ea:0b:29:ba:c5:
                    6e:43:2b:c1:61:57:4e:38:f5:ae:fe:bb:63:27:c1:
                    52:40:66:70:34:6c:32:ab:5a:0a:9d:dc:48:be:94:
                    52:b4:fc:ad:1d:f9:ba:de:74:fb:6f:2f:0f:5a:1c:
                    d4:69:d9:f6:ad:2b:0f:6e:fb:fe:4d:03:23:c2:2a:
                    9d:2f:17:3c:82:ae:04:af:84:5d:1e:d8:d9:ac:4d:
                    7a:f8:13:82:61:01:67:d1:a9:b9:0a:14:7b:27:a4:
                    10:93:47:3f:83:ff:81:b9:6e:e7:dc:f4:a1:11:16:
                    32:7c:f2:f2:b2:67:e5:b3:7d:9e:91:93:1b:90:29:
                    56:ac:39:36:3c:0c:74:95:e8:b6:6e:32:61:f7:03:
                    db:5a:3a:b1:e1:dc:0a:7c:53:1d:71:96:4a:b5:3b:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:53:89:27:F9:88:37:E8:F8:EA:B0:AB:0A:4B:57:9B:15:CD:E8:71
            X509v3 Authority Key Identifier:
                keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:79:65:a9:f5:67:7a:76:00:ee:72:8a:38:59:1c:3d:e3:be:
         b3:66:86:d2:c4:ce:ee:74:c5:69:80:9c:12:ca:0a:6c:56:52:
         69:b2:0c:eb:3e:80:f2:6b:2e:1b:03:24:04:14:e9:08:93:73:
         3b:a4:05:e7:92:3f:8e:6b:75:f3:b0:0e:37:60:4b:5c:24:7b:
         47:e8:be:89:ab:0a:6f:d7:50:f2:41:29:cc:0d:30:74:db:ed:
         2a:18:5c:dd:78:82:6b:0f:d6:9d:4a:d6:e1:fb:a2:04:61:10:
         51:14:be:c1:0d:80:3b:14:94:2a:1b:d7:85:f2:4d:19:fa:1d:
         3b:62:c2:48:5b:76:05:2c:55:df:65:af:bd:09:3a:0c:8b:45:
         dc:e3:a7:90:f5:45:39:54:77:f3:17:a2:a2:21:60:c7:d7:6f:
         dc:d5:60:23:b1:d3:90:52:81:fc:9f:2e:44:93:62:6c:ab:b4:
         50:cb:7a:07:90:75:f3:64:52:11:b2:04:f0:88:63:52:35:3c:
         7b:6d:86:06:2d:10:02:30:e9:29:52:53:ef:64:49:50:43:49:
         df:c4:3e:53:dc:62:f3:04:eb:a8:19:e8:8a:68:92:f8:40:43:
         14:c4:3b:ad:57:e8:9e:40:a2:4a:77:26:4c:e3:75:e2:3f:48:
         8e:46:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:42 2025 by rpki-client