Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
File:                     72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft (raw, json)
Hash identifier:          HTZE4Wbw3IPqanHX9a3iDJwbxNgZBi0yKUwW8Wmsxs4=
Subject key identifier:   A0:E2:1F:8C:0E:A4:FD:C5:53:0F:C7:6D:E0:B3:D5:D4:8D:E2:71:3D
Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
Certificate issuer:       /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Certificate serial:       5B686B2DBB00C15BBBA0D6601C5E92FBBEC28093
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
Manifest number:          15
Signing time:             Fri 31 Jan 2025 02:26:10 +0000
Manifest this update:     Fri 31 Jan 2025 02:21:10 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:10 +0000
Files and hashes:         1: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl (hash: qKMkAkK5dXA6W9eVNPrXdlEC5h55eYzL26g9cK1MQY0=)
                          2: 34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa (hash: tfxhjkE/hPQkUVTn6ET0J7Lrxx1n0jwZ6ICuqw7r4ZU=)
                          3: 323830343a353939303a3a2f33322d3334203d3e20323638373130.roa (hash: DO18eHUILT29/ELanQDbTMy/PMg5ZLhheRqaIAa6pVk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:68:6b:2d:bb:00:c1:5b:bb:a0:d6:60:1c:5e:92:fb:be:c2:80:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
        Validity
            Not Before: Jan 31 02:21:10 2025 GMT
            Not After : Feb  1 06:00:10 2025 GMT
        Subject: CN=A0E21F8C0EA4FDC5530FC76DE0B3D5D48DE2713D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:49:62:39:b0:6f:a3:f8:8e:08:99:5e:25:
                    dc:cc:9a:87:95:17:c1:78:40:78:c4:6f:ca:80:86:
                    40:76:22:a8:f6:46:40:ad:bd:3e:f4:6f:3d:71:91:
                    8c:78:61:67:33:99:24:19:80:4e:8d:99:fe:7c:1a:
                    79:b9:dc:c5:d8:c5:57:29:08:b9:83:db:0f:0d:a6:
                    14:2e:61:f0:38:81:c7:36:11:6d:30:65:55:8f:80:
                    cc:91:5c:a7:bc:21:01:76:d6:5b:cf:c2:c1:7a:fc:
                    cc:9d:95:24:da:75:41:be:17:0e:80:ba:d7:87:67:
                    09:fa:0b:cf:c3:e3:e2:75:b3:5a:7b:38:b3:e7:68:
                    15:f4:42:fe:6b:e8:66:d8:02:41:3a:d3:0c:4d:e5:
                    e8:b9:03:cc:aa:91:00:a6:d1:cf:73:0f:f9:71:62:
                    b4:47:2c:ac:23:ab:62:58:22:1f:bd:7c:42:85:e4:
                    a1:01:8d:45:c4:38:e6:c4:c6:8d:b1:0b:3a:d9:54:
                    21:03:3d:45:b7:bd:25:89:f7:e8:69:37:f1:09:2e:
                    73:1f:49:f9:99:6f:2a:a9:59:ae:71:60:de:de:31:
                    71:4a:cb:8d:bf:1b:d2:b6:d1:19:0b:ad:39:3d:01:
                    68:ee:b6:8a:fd:78:9a:52:75:81:3e:5b:a4:34:9b:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:1F:8C:0E:A4:FD:C5:53:0F:C7:6D:E0:B3:D5:D4:8D:E2:71:3D
            X509v3 Authority Key Identifier:
                keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:ae:b3:e8:88:c9:27:06:b8:8a:20:e4:2a:4a:83:66:ec:
         d2:30:5c:20:2a:13:10:7b:6f:56:eb:30:d7:28:6a:6a:ec:a4:
         21:f7:86:61:7d:62:eb:04:6a:72:21:fa:38:5f:6b:04:95:a4:
         41:7c:8b:fe:5b:e1:aa:cb:8c:75:85:3e:b7:6c:ad:cc:c7:48:
         b7:fa:c7:b1:3b:1c:39:fd:96:9e:a4:3b:be:40:74:1c:d2:9d:
         3b:9f:a4:a9:d4:92:6e:76:6e:a0:d4:81:3e:e6:b8:e7:e4:50:
         47:06:53:e9:7e:92:e8:0b:31:aa:84:e3:5e:d3:b0:08:02:6e:
         4f:02:ee:25:82:cb:08:da:a1:62:e2:51:32:fc:c3:77:b0:d4:
         1d:18:d5:a6:3b:c2:ae:8a:44:2e:8a:24:b5:44:14:a0:a4:10:
         25:fd:c5:1b:99:2f:90:ff:96:6b:5d:67:32:73:02:5f:ae:11:
         bd:6f:cb:ef:17:8d:49:e1:54:8a:40:ce:5a:56:92:0c:c8:62:
         a8:58:a2:79:32:41:d7:ad:52:91:97:47:e0:3a:34:32:23:cb:
         34:95:4f:42:d8:c0:c8:75:11:13:75:91:ce:8e:26:bc:a7:63:
         fe:2d:83:12:d5:9e:7f:77:2f:d9:9e:60:9b:28:c6:77:b2:01:
         81:fa:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:26:42 2025 by rpki-client