Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft
File:                     AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft (raw, json)
Hash identifier:          jlbb5FZWgwg8gbwLWiPqvvbsCwGKXEwikC4hZNmqz+M=
Subject key identifier:   90:67:2F:59:66:AA:D1:A4:4D:69:73:0B:29:0C:37:B8:A7:4E:B4:4F
Authority key identifier: AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66
Certificate issuer:       /CN=AA75E9D7C14B8290B067D83EABF023C9B420FB66
Certificate serial:       53AA0CCD6D1692910F8DA44C508BCEAE3828FCD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 03:58:00 +0000
Manifest this update:     Fri 31 Jan 2025 03:53:00 +0000
Manifest next update:     Sat 01 Feb 2025 05:34:00 +0000
Files and hashes:         1: AA75E9D7C14B8290B067D83EABF023C9B420FB66.crl (hash: imtcluRA19+XZ+YbdKOObs3J043gaWQq2wuvSfzSmeM=)
                          2: 3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa (hash: HsbgHIjaZ+RojAAw5nn5TbHHH9NVr3T6cBFm5bCWLC0=)
                          3: 323830343a6261633a3a2f33322d3438203d3e20323632333137.roa (hash: 01WNiyN1wVJ0n2yHWgBItUDVmd46z0LFJmVb2cFClts=)
                          4: 3137372e39312e3132302e302f32312d3234203d3e20323632333137.roa (hash: yOxSYDDveEOCNuQjZv4FmaPuRvwoUXx2xlPC7Y9clMI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:aa:0c:cd:6d:16:92:91:0f:8d:a4:4c:50:8b:ce:ae:38:28:fc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA75E9D7C14B8290B067D83EABF023C9B420FB66
        Validity
            Not Before: Jan 31 03:53:00 2025 GMT
            Not After : Feb  1 05:34:00 2025 GMT
        Subject: CN=90672F5966AAD1A44D69730B290C37B8A74EB44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:ea:62:4d:ef:05:aa:a0:ef:7f:d3:61:e0:
                    9f:82:22:b4:17:36:16:15:b6:22:c3:61:88:63:a0:
                    41:7e:7c:ae:0b:b0:9b:a7:ef:58:67:52:d3:ec:e5:
                    17:4b:42:48:4d:fe:83:b1:29:cc:91:b0:b5:6d:45:
                    98:fb:53:a7:00:01:f6:7d:41:0b:c2:39:2c:7b:1c:
                    8e:d4:07:f4:24:af:9b:55:22:2f:cf:64:23:89:c5:
                    c3:a9:db:82:b0:15:64:d7:3b:84:cf:4b:50:94:b7:
                    63:2a:45:ae:8f:1b:ef:06:43:c0:1e:e5:83:00:d2:
                    ce:0e:08:3c:a8:1d:1c:1a:28:6b:7e:9a:9f:70:25:
                    61:5a:e7:fa:c9:ad:f6:3f:68:30:a1:9c:34:38:c8:
                    65:49:5e:7e:c7:72:08:3f:15:f6:89:ac:3a:1e:5c:
                    37:f6:fa:78:49:4d:46:ff:c0:0b:cb:63:f2:a9:49:
                    1b:fe:7c:45:ad:8b:63:32:9d:8a:70:a7:f5:41:54:
                    08:66:df:40:10:0c:a9:f4:fa:d7:8e:8b:19:c5:b2:
                    04:9d:d6:b3:83:64:6a:ea:ea:7c:c1:90:33:26:66:
                    59:f9:cc:c4:5c:80:84:eb:b1:55:71:be:0b:4a:c7:
                    f6:ef:5c:3b:d2:a3:f3:eb:e1:84:92:87:8a:7d:6b:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:67:2F:59:66:AA:D1:A4:4D:69:73:0B:29:0C:37:B8:A7:4E:B4:4F
            X509v3 Authority Key Identifier:
                keyid:AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:c0:28:0c:b5:bc:af:90:94:1f:e1:9e:68:ba:16:8f:79:
         0f:d3:27:70:65:e4:e7:42:08:ec:d7:a9:91:d1:59:05:be:fd:
         be:eb:fd:bd:31:30:b3:ec:5f:97:7f:df:cb:7e:4a:3d:c5:6e:
         ba:e5:63:17:57:dc:36:cd:d0:24:c5:51:10:7c:ae:25:61:92:
         01:5a:40:7a:50:ab:f9:ca:68:c9:03:32:75:2c:2b:07:7a:b2:
         bd:39:3b:b0:a0:62:29:40:52:7c:f8:34:72:db:53:46:2e:bb:
         a9:63:b5:2d:4f:4f:23:1a:b2:9c:79:a2:44:2a:8d:4b:f3:89:
         f8:d2:4a:43:36:44:0b:0f:e4:fc:a0:dd:fc:da:1d:58:65:a6:
         72:60:b0:52:aa:de:19:16:22:91:4d:af:30:91:c7:71:43:73:
         2c:69:4a:0a:c6:ba:8a:36:3e:86:4a:62:a8:38:4a:79:a3:05:
         06:54:00:55:a2:be:b2:17:a7:b9:a8:05:81:38:eb:e8:4d:20:
         7f:13:d0:4d:a6:bb:e2:58:32:70:a4:cd:82:40:c2:b9:c8:77:
         b5:4e:2e:e1:91:d1:26:e6:36:9b:b8:02:a1:53:75:eb:c0:08:
         39:f9:f6:e5:82:1c:f7:26:a7:a6:cd:60:a2:e8:1e:80:0c:7b:
         db:33:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:18:04 2025 by rpki-client