Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
File:                     F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json)
Hash identifier:          +PSn26f+kT4GD8bvQzq7lEWWj5Ks+caV4TwKPniC17A=
Subject key identifier:   2A:FA:C9:A2:5D:61:8F:40:B8:C7:8F:42:BD:23:C1:A2:14:C9:18:AE
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Certificate issuer:       /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial:       452759F9357DF4B3AACC0040EE1AE3C9640B4F58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 18:34:47 +0000
Manifest this update:     Fri 31 Jan 2025 18:29:47 +0000
Manifest next update:     Sat 01 Feb 2025 22:21:47 +0000
Files and hashes:         1: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: iLebMxqmfT+hy6rljPUl+VgOazovwP/j0/SZv28JxO8=)
                          2: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: efoCsVLcEBNsuvvQfVdRrn5K/3ED3UOFmWctW1aRHdc=)
                          3: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: ffO3gegPHrVJu8pl+HaLwZqNKtLUvCm0l/Ub88Q/XEY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:27:59:f9:35:7d:f4:b3:aa:cc:00:40:ee:1a:e3:c9:64:0b:4f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
        Validity
            Not Before: Jan 31 18:29:47 2025 GMT
            Not After : Feb  1 22:21:47 2025 GMT
        Subject: CN=2AFAC9A25D618F40B8C78F42BD23C1A214C918AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:d6:dd:79:55:5a:65:02:4c:b9:9f:71:eb:
                    08:77:ab:e8:ed:41:1e:71:c6:33:87:1e:a1:35:9b:
                    29:2c:15:a5:37:05:8f:ef:f9:e4:6e:c4:7a:ee:df:
                    5f:07:e0:f9:2e:fe:a6:97:78:72:36:16:22:52:8e:
                    a1:c2:92:0e:aa:38:b5:d1:4d:fd:46:f0:18:3f:29:
                    76:1e:0c:bf:c5:6c:1c:a4:50:7e:65:38:be:98:42:
                    b5:e1:c2:d2:ae:b2:92:26:ee:60:c6:63:f2:3c:42:
                    09:d1:83:e1:38:76:1d:db:b3:9c:29:30:0e:54:97:
                    52:af:de:2c:70:96:f1:b5:45:d4:d0:b0:e7:dc:3d:
                    7f:77:ca:88:1c:6f:96:72:35:f9:6c:aa:de:43:b0:
                    e4:8c:f0:14:11:ec:09:79:af:04:d5:7a:b7:b8:ab:
                    d3:b0:97:95:a0:3b:05:29:a4:81:28:76:cb:e1:fc:
                    88:96:42:47:da:d3:43:bb:e8:d6:dd:d1:08:27:0d:
                    d5:7c:60:3c:f9:67:05:fc:3b:22:8c:fe:fe:7a:0a:
                    e6:83:f3:cb:6c:bd:50:f1:43:1d:b2:4c:71:68:60:
                    b2:2f:c0:5f:fc:48:4a:a1:15:0e:91:e8:3e:5f:3e:
                    1e:de:e9:05:65:c6:56:ad:53:c0:a8:91:ec:86:1d:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FA:C9:A2:5D:61:8F:40:B8:C7:8F:42:BD:23:C1:A2:14:C9:18:AE
            X509v3 Authority Key Identifier:
                keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:51:39:83:93:dd:6e:a7:7f:79:e3:db:13:a9:d5:e3:4e:
         e8:eb:e5:ba:47:fc:fc:6b:0b:14:e2:24:74:1b:06:31:f0:88:
         56:b5:ce:df:96:a5:0e:3a:2f:ea:d6:67:b1:23:fd:52:47:c4:
         36:c6:8b:d0:05:31:bb:3d:1e:a9:d4:bb:5c:03:2c:b8:74:7b:
         1e:c7:7a:5b:65:ac:33:b3:62:53:d0:0d:d5:55:88:62:31:96:
         a7:b6:ff:17:d0:74:3a:5b:61:0a:b3:73:2b:1d:41:8b:29:c5:
         cb:40:4b:98:4b:b9:da:b6:ad:b7:36:4d:07:80:4e:dd:b7:e8:
         82:3d:5c:46:86:83:3f:a4:3f:a3:01:73:94:c4:b6:50:8f:46:
         7c:f2:f5:1c:76:1c:01:c9:aa:bc:2e:19:31:28:bc:17:a4:4d:
         59:53:05:44:2f:75:19:6e:95:45:01:20:9a:a1:be:28:34:3d:
         6b:6e:d2:19:59:d2:39:ef:d6:d7:7a:e8:8b:ea:ab:9c:3c:89:
         a5:e6:89:e3:e9:20:1d:cc:70:6a:4a:d4:e7:0b:50:a0:f9:be:
         1a:fc:5e:8b:86:5a:ef:d1:a3:90:f4:7d:38:af:48:a8:bf:26:
         60:a6:88:a2:43:be:eb:a2:f3:4d:ff:79:59:2c:da:fa:e6:dd:
         48:ac:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:29 2025 by rpki-client