Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft
File:                     98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft (raw, json)
Hash identifier:          TTC5s2QBYDJXKMyVFYAQbrfmGorBBA3AjAy5iX7lQ8M=
Subject key identifier:   5E:8D:D7:56:79:52:88:B0:C8:1E:DC:E0:C4:94:91:5E:5B:D8:43:3B
Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2
Certificate issuer:       /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
Certificate serial:       2B54FB135666E3B75A144C326660258819B438C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft
Manifest number:          49
Signing time:             Fri 31 Jan 2025 08:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 07:55:45 +0000
Manifest next update:     Sat 01 Feb 2025 10:46:45 +0000
Files and hashes:         1: 98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl (hash: nLGYNVG7o5VqUqEi+QnvRxafZIxladASusaf7182fs8=)
                          2: 34352e3137332e3131362e302f32322d3234203d3e20323638383130.roa (hash: JNyxID+gpuiIJFxC2JoVZpDW5lJY/bY+ID0T+4W/0SU=)
                          3: 323830343a356166383a3a2f33322d3438203d3e20323638383130.roa (hash: m8yM79Ui0jUcrLIMqQSDhUwukcLiQdHQnioL1vHdmkw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:54:fb:13:56:66:e3:b7:5a:14:4c:32:66:60:25:88:19:b4:38:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2
        Validity
            Not Before: Jan 31 07:55:45 2025 GMT
            Not After : Feb  1 10:46:45 2025 GMT
        Subject: CN=5E8DD756795288B0C81EDCE0C494915E5BD8433B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:9c:1a:b2:1d:70:71:46:58:97:82:7d:dd:
                    e8:dc:28:90:31:13:ec:56:f9:50:a6:1a:d8:94:22:
                    39:dc:10:ec:de:b6:40:0d:00:b8:82:c3:dc:13:13:
                    f4:47:f2:69:d8:13:63:c8:ae:de:db:a2:e8:a4:ce:
                    d5:ce:b4:86:e1:e1:98:3f:55:06:12:94:99:12:98:
                    8b:c4:be:81:0a:35:6e:56:4a:aa:e0:ac:bd:18:58:
                    6f:9e:af:6b:50:23:eb:58:4e:65:6f:eb:df:42:2b:
                    4f:b7:62:15:82:60:a6:bd:2c:2e:39:a4:d0:c6:ae:
                    47:c5:b8:53:bd:13:cb:b2:a8:79:0b:7f:12:13:5c:
                    72:84:f0:f2:50:8d:7f:79:fa:c5:f4:ef:70:7b:f5:
                    80:af:73:70:16:c0:7c:73:b4:4a:60:ad:b0:64:49:
                    72:ba:f9:f5:f3:9f:6a:66:f2:12:72:72:65:c0:52:
                    10:30:37:d9:03:83:d3:67:02:b3:0c:8d:d9:91:d8:
                    bb:89:b8:99:00:35:b3:08:c8:da:18:16:89:b7:de:
                    78:00:27:5b:3f:32:a8:08:e9:15:f0:a1:0c:17:e5:
                    99:bc:f4:80:c6:c8:6e:e2:10:cc:b1:8f:33:44:35:
                    7a:c3:61:a5:d5:e6:12:2b:e6:3f:59:fa:3a:a6:8c:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8D:D7:56:79:52:88:B0:C8:1E:DC:E0:C4:94:91:5E:5B:D8:43:3B
            X509v3 Authority Key Identifier:
                keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:96:47:2c:8d:36:00:4b:b8:9d:12:2b:17:ec:f2:40:05:72:
         a5:ba:dc:37:e0:e2:12:39:8e:a5:29:a4:b5:45:e6:15:51:ca:
         b8:6b:ca:53:e9:6f:4f:98:27:75:39:a6:96:6f:39:88:fc:88:
         41:ee:c6:03:87:f9:b9:be:77:e9:5a:75:74:35:18:55:42:19:
         99:0f:e2:29:d4:78:fb:7d:44:b4:5e:4d:4b:73:6a:1c:cb:8c:
         2c:04:4a:18:90:25:9a:cd:a4:a6:d7:68:09:d1:79:1a:72:04:
         05:7a:4d:c3:eb:82:37:96:51:23:1a:ef:c2:90:5a:19:f3:3f:
         05:4a:a3:64:de:11:06:28:c7:83:b3:05:18:28:12:bf:cc:56:
         a6:7c:71:5f:99:ec:bd:da:00:c8:6c:08:e7:6f:ce:c4:2f:92:
         92:b4:05:fa:7d:87:32:42:bd:8c:39:41:f8:9a:e6:89:19:d1:
         3e:fa:56:ea:8d:4d:b3:fe:9a:03:eb:62:db:f0:12:5a:bd:ef:
         f2:1a:77:7d:21:5d:22:1b:7b:1d:0b:57:51:99:92:5e:1a:22:
         b2:ba:6a:fa:d9:18:80:10:6e:15:36:a7:f9:e7:08:cb:55:25:
         cc:03:1b:44:8c:51:75:b1:18:11:ff:3e:ac:e3:f9:a1:ce:46:
         0d:b0:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:30 2025 by rpki-client