Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft
File:                     7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft (raw, json)
Hash identifier:          lp1zg2OJC2etNUUTVxZx/ymUX0bQ7+aKhD/2FD2DUr0=
Subject key identifier:   25:7E:1E:84:9A:BA:28:AE:03:E5:8C:42:41:0C:8B:56:72:BA:2A:EB
Authority key identifier: 7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D
Certificate issuer:       /CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
Certificate serial:       40780B4029EF7B9564E5775776478A0194C10C0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft
Manifest number:          D5
Signing time:             Fri 31 Jan 2025 10:21:35 +0000
Manifest this update:     Fri 31 Jan 2025 10:16:35 +0000
Manifest next update:     Sat 01 Feb 2025 12:13:35 +0000
Files and hashes:         1: 7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.crl (hash: 7weXHlFuPvNjUJ+D+ji2MxAZa9cil9aoChvFZen/GtY=)
                          2: 3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa (hash: 7/m6UlyxK9DrbHmfJHtrkdpDASnpd4Rsr8MhZXcx2mI=)
                          3: 3133382e3138352e3233302e302f32342d3234203d3e203631353734.roa (hash: Jrb+gNjCCzGzdH4Rks2nT6WTILhRb3loV8VAtv0ohXs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:78:0b:40:29:ef:7b:95:64:e5:77:57:76:47:8a:01:94:c1:0c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
        Validity
            Not Before: Jan 31 10:16:35 2025 GMT
            Not After : Feb  1 12:13:35 2025 GMT
        Subject: CN=257E1E849ABA28AE03E58C42410C8B5672BA2AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:14:34:a0:7a:8d:96:45:d5:06:08:dc:2e:
                    5a:47:d0:f4:65:8e:0b:39:01:b0:83:98:64:d9:e7:
                    9c:84:31:f0:1c:6d:e3:cf:8e:fe:00:53:bc:50:c8:
                    8a:5f:8c:c1:79:04:8b:ee:ed:b6:02:4e:0d:ab:0c:
                    af:7f:1a:f2:0d:46:61:99:5b:a6:df:c1:75:7f:90:
                    87:c7:90:c7:99:79:c5:f2:5b:59:7f:ca:90:45:e9:
                    8a:6e:46:eb:f1:0e:9b:4a:cd:47:66:5d:ab:16:d6:
                    b8:2e:43:7f:88:7d:a5:b9:e0:0b:60:9f:3c:f4:e7:
                    c7:bc:8f:be:c1:7d:51:21:dd:ca:61:ee:5c:6b:d0:
                    21:58:e3:84:4d:5a:7d:f6:cc:2e:c0:82:26:86:d4:
                    c6:a0:9e:94:76:96:9b:84:68:c3:a6:ba:fc:64:d5:
                    fc:99:67:53:a5:37:f3:05:14:8a:57:47:76:d9:65:
                    d1:ba:5d:83:fb:dd:05:f4:a8:1b:c7:3a:bc:b7:e1:
                    20:df:56:69:7c:d7:b9:54:0e:c3:c1:23:25:54:7b:
                    41:cb:9c:b9:5a:24:0e:a3:a8:d6:64:a9:f4:98:fe:
                    cf:f8:52:f4:45:66:aa:21:e0:21:d6:f8:d8:c9:2b:
                    7d:2c:5c:ca:ff:b9:0c:0b:ed:1f:3d:90:19:35:f7:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7E:1E:84:9A:BA:28:AE:03:E5:8C:42:41:0C:8B:56:72:BA:2A:EB
            X509v3 Authority Key Identifier:
                keyid:7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:04:a1:fa:63:96:d2:c0:ef:9c:1f:68:3d:e5:e6:de:1c:21:
         84:7f:44:97:cd:b5:c6:3e:69:68:88:c2:3a:45:6b:17:74:d6:
         4a:81:69:24:59:2c:28:da:39:60:a3:cb:e2:f5:38:cf:f7:cb:
         ce:6f:83:4f:6e:4c:ed:c7:d0:3d:c5:1c:c9:a1:cc:cc:c6:f1:
         5f:83:de:69:bd:21:58:ed:f4:d5:e6:46:e8:c8:a0:40:b4:90:
         8c:71:9b:03:a5:17:18:e0:c5:c9:f9:48:7f:c5:5e:b3:bc:b2:
         20:59:94:9a:59:44:3f:34:19:19:a3:19:02:65:ce:72:54:43:
         7b:c9:ea:4e:b3:27:0a:be:c6:88:d2:60:a8:b7:b0:21:81:9c:
         6b:7a:63:f8:1f:ce:29:b0:54:09:c1:6b:fb:2b:a0:0e:50:7b:
         58:81:40:44:21:59:39:e1:58:6a:52:6f:23:0a:bd:61:96:0a:
         5e:c3:69:82:e7:23:d4:62:82:25:0b:b0:22:84:2a:2c:45:e0:
         ed:ad:e2:e9:9d:a5:17:ac:66:0f:b6:df:53:32:b1:11:0f:ea:
         42:ae:02:2b:21:cc:32:56:d6:f4:52:a4:70:9a:3e:db:bc:1e:
         29:b8:27:04:c4:2b:1b:54:66:70:eb:fd:51:06:ad:34:26:57:
         96:2a:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:48:15 2025 by rpki-client