Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
File:                     1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft (raw, json)
Hash identifier:          ImvUm0gznOA63IWKBqRbOIIGf8u6SRdYvOMKtKCgFec=
Subject key identifier:   3A:AE:90:79:09:02:4E:CF:94:6B:42:01:B2:45:CC:A1:3D:82:C6:6D
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       50182B1236794ED9EC54A7692C104F67A5D5862E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
Manifest number:          01A4
Signing time:             Fri 31 Jan 2025 16:08:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:03:30 +0000
Manifest next update:     Sat 01 Feb 2025 17:36:30 +0000
Files and hashes:         1: 1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl (hash: HvKieUKfpdAIOpMsi4mBt5zk+5Uyg57CeES/8gEfJwg=)
                          2: 323830343a363538303a3a2f33322d313238203d3e20323639343935.roa (hash: 58fbosYwJlPoxzdFWTlydzCcBZDcp02f7aWo5YcMLgY=)
                          3: 34352e3138372e3134342e302f32322d3332203d3e20323639343935.roa (hash: c9pmOSd5YgM4yOIr8wl2MJW/OxqiWWAnV/YQNyWCK1Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:2b:12:36:79:4e:d9:ec:54:a7:69:2c:10:4f:67:a5:d5:86:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Jan 31 16:03:30 2025 GMT
            Not After : Feb  1 17:36:30 2025 GMT
        Subject: CN=3AAE907909024ECF946B4201B245CCA13D82C66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:7a:1e:28:10:e5:3b:6d:5e:c3:7b:a8:df:
                    47:83:98:0e:ad:02:39:d1:08:a2:a6:7c:09:2a:c1:
                    55:4c:2e:e7:93:72:13:a4:ab:5e:4c:45:cf:58:71:
                    b8:91:d2:ae:ca:fd:17:e3:9b:7f:58:2c:9e:f1:99:
                    7a:d2:eb:a4:43:a1:ee:e4:18:e0:a7:6f:aa:0a:e7:
                    5c:82:8f:71:a2:25:6b:4c:0a:af:74:be:9a:cd:fb:
                    9b:2f:76:3a:3a:85:a5:22:2b:53:59:4e:2c:f1:e0:
                    8c:af:3e:b1:ec:ad:3b:86:20:9d:ad:9c:f7:98:a1:
                    1a:ea:e2:80:bf:c4:3a:c6:c4:a8:9e:af:5d:61:b1:
                    2c:91:eb:55:2d:67:23:57:65:6c:a7:bb:10:14:2c:
                    15:93:75:be:6c:22:f0:63:28:f5:5a:21:12:cf:b7:
                    7b:a6:8a:78:05:18:12:9e:c0:69:87:e5:87:a5:6c:
                    7c:4d:38:9f:8d:fc:90:cb:ec:ba:35:4c:d8:34:6d:
                    4e:39:7a:5c:6f:60:1d:b1:90:15:55:a3:b7:0c:a5:
                    57:e3:67:52:8d:5f:8f:e3:e4:e0:f8:76:69:d7:6a:
                    fc:58:f3:10:17:ab:76:43:5b:74:8a:38:17:aa:35:
                    ba:82:47:15:2b:9f:92:57:da:5c:30:ed:45:bc:0a:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:90:79:09:02:4E:CF:94:6B:42:01:B2:45:CC:A1:3D:82:C6:6D
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:00:eb:c1:26:2d:71:2e:3a:36:63:55:b0:c7:7f:ce:bf:28:
         52:61:a0:7c:4e:a7:6a:32:bf:89:55:82:3d:01:a7:df:23:35:
         d8:4b:37:c8:6a:0f:46:d2:f7:3d:8a:c6:4b:af:e2:ad:60:a6:
         82:ee:4a:dc:e6:58:c1:d1:d3:58:eb:fc:4b:d3:48:6b:a3:b7:
         dd:bf:10:d7:01:1b:77:0f:14:41:8b:b7:7d:b8:b3:14:e6:19:
         04:c9:77:aa:ee:63:7d:b2:cc:05:db:5a:c4:42:54:f9:3c:98:
         23:ab:f4:b5:99:1a:d0:5b:d6:a4:13:d3:fd:86:54:d8:93:4f:
         1f:03:26:0c:5e:a8:21:f4:56:f8:b5:64:88:61:fd:ca:57:bf:
         10:e1:33:01:bd:f7:c8:20:ce:c5:bc:06:3c:71:b4:87:e5:93:
         b1:e0:e1:00:d7:d7:37:7d:6a:8f:69:d5:31:b2:5d:fd:6a:d6:
         78:58:3e:f3:ec:4f:c8:78:d3:f7:22:99:bc:17:e2:6a:5a:a8:
         11:8e:b3:3f:0a:90:ae:f0:43:ce:74:9d:55:46:1b:5f:3a:15:
         07:b4:22:54:f6:86:94:5d:1c:fb:d6:79:1d:41:c1:9c:97:07:
         07:22:d7:69:e9:39:5f:05:0b:ae:43:3c:df:53:0e:37:be:03:
         99:ef:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:53 2025 by rpki-client