Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
File:                     B22E94C68C47105DBC96228B65437C19A68102C7.mft (raw, json)
Hash identifier:          u+Pnjtl6AnQNhUnx1XvaTcOppGXfl46T4V1Ww/Cim9k=
Subject key identifier:   57:5D:B6:5A:16:30:97:62:B3:AA:0F:1F:CF:D7:5B:82:26:BF:A1:17
Authority key identifier: B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7
Certificate issuer:       /CN=B22E94C68C47105DBC96228B65437C19A68102C7
Certificate serial:       686887C5FBB36777FAA4D2EDC4445191167F54C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 13:50:01 +0000
Manifest this update:     Fri 31 Jan 2025 13:45:01 +0000
Manifest next update:     Sat 01 Feb 2025 16:11:01 +0000
Files and hashes:         1: 34352e3136342e3136342e302f32322d3232203d3e20323638363237.roa (hash: bs7jsNRjDx3sEX1eHs4CM1wRZJHzmFxcZApG/Ssd6ms=)
                          2: 34352e3136342e3136352e302f32342d3234203d3e20323638363237.roa (hash: /9OqlJbdPk/6j0wTUFRb4HuGVQ9Unk+iK+xPuR+IWH0=)
                          3: B22E94C68C47105DBC96228B65437C19A68102C7.crl (hash: bu0ChHn8Xr2sPeTF5BFF7ulEpFD/WMHJZOPxcbqEKBo=)
                          4: 34352e3136342e3136372e302f32342d3234203d3e20323638363237.roa (hash: e+7Sbfub0Hc6SUyH9NYyaVmN32bGit8zwMUGxyJgsKY=)
                          5: 34352e3136342e3136342e302f32342d3234203d3e20323638363237.roa (hash: QpwcERGraiYb2p1B1fnT6kZY9k7zo+7HU1VsCL7gRW8=)
                          6: 34352e3136342e3136362e302f32342d3234203d3e20323638363237.roa (hash: kalZ5pzgAsnHHO6/9ItBAH+aGEg/4Ty18SSTm0H+cas=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:68:87:c5:fb:b3:67:77:fa:a4:d2:ed:c4:44:51:91:16:7f:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B22E94C68C47105DBC96228B65437C19A68102C7
        Validity
            Not Before: Jan 31 13:45:01 2025 GMT
            Not After : Feb  1 16:11:01 2025 GMT
        Subject: CN=575DB65A16309762B3AA0F1FCFD75B8226BFA117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:3e:5d:66:b6:0c:6f:d4:37:01:6c:86:dc:
                    01:77:90:cc:28:55:c7:0d:b0:fb:a0:2b:e0:98:f5:
                    e2:64:e8:af:0c:bb:f6:03:63:b2:93:5d:13:c0:d2:
                    6a:ba:9d:8e:0b:3c:84:86:f1:0f:86:9f:d2:f6:46:
                    91:37:c0:11:09:a1:1c:7c:b1:67:5f:0b:bc:3b:72:
                    0f:72:50:d7:96:61:4d:c0:ec:59:36:64:58:c2:e0:
                    71:77:ee:0c:03:22:3b:94:f9:bf:e9:c5:f4:4a:77:
                    8e:8a:3d:52:3c:59:a3:c1:86:46:18:08:11:42:21:
                    b5:ce:95:29:f5:5d:b1:01:e8:54:d5:81:cb:0a:8b:
                    05:a7:35:42:8e:99:d3:86:d7:77:68:12:24:89:05:
                    f2:9d:0e:19:a4:54:b7:36:8b:15:0c:6e:16:ea:b5:
                    66:7a:03:8c:30:23:cb:ee:a1:b9:a5:f6:20:6b:11:
                    8a:c0:36:fb:4c:78:f6:96:94:46:83:a8:5b:96:4e:
                    c3:10:b6:a9:29:9d:ae:90:8c:1e:17:f6:3f:a4:4d:
                    54:07:c3:b1:9b:b5:96:a8:69:a8:b5:cd:19:86:93:
                    f0:33:f9:27:57:79:88:c1:8f:11:38:43:af:e0:1f:
                    c3:f9:71:53:24:49:06:f6:9f:10:fe:67:49:81:a1:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5D:B6:5A:16:30:97:62:B3:AA:0F:1F:CF:D7:5B:82:26:BF:A1:17
            X509v3 Authority Key Identifier:
                keyid:B2:2E:94:C6:8C:47:10:5D:BC:96:22:8B:65:43:7C:19:A6:81:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B22E94C68C47105DBC96228B65437C19A68102C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/1/B22E94C68C47105DBC96228B65437C19A68102C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c6:d0:6b:4d:90:9b:89:51:4f:f1:a4:71:60:d6:20:8e:3c:
         29:35:73:6f:74:df:77:f0:14:ab:6a:44:3d:c9:a9:75:48:ad:
         a7:e9:a9:6f:d2:2c:33:4d:e6:1d:71:cf:99:60:57:47:5a:12:
         f9:d3:82:40:04:7d:4e:b6:10:8b:53:e4:15:30:51:f9:81:eb:
         4d:fd:98:93:68:cb:cd:71:96:e1:44:fb:62:3a:9d:0b:54:ca:
         37:1a:54:6d:07:27:1b:65:46:81:34:1e:8d:ec:25:f5:1d:c1:
         53:30:a3:28:f1:52:f0:f8:cf:a0:dd:7e:9b:a7:5e:c0:6a:90:
         bc:f0:c8:6d:54:a2:4e:e8:a8:65:b8:a1:25:7a:ef:60:ba:f8:
         cf:40:21:8e:d0:c8:32:34:50:bf:8a:83:09:bd:f3:b5:cd:93:
         6f:7f:10:f4:7c:70:0d:80:ce:d8:b3:98:9f:9b:0f:b6:f4:95:
         f7:f7:e7:5e:f2:ed:c3:0b:81:48:9e:57:f2:e4:3e:bc:81:de:
         51:fc:06:d3:3e:ef:de:78:e8:85:05:2e:9c:2b:bd:76:08:c0:
         ce:17:27:50:de:6e:a8:d2:76:4d:c6:95:f6:38:23:41:21:35:
         e6:7e:85:03:0c:b2:78:83:8b:f8:68:a3:7b:7c:b6:e5:ad:87:
         8e:44:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:26 2025 by rpki-client