Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
File:                     32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft (raw, json)
Hash identifier:          KzMTa3jaXCpGSCCWGAd8oC4NsOOj+2x/eQs3HL0A/a4=
Subject key identifier:   CC:7E:B6:01:88:8E:11:34:4B:DB:10:02:5D:2E:A8:BB:4F:D1:87:29
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Certificate issuer:       /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial:       542FB67BBEF7EE33DFE9DB70AB82E2D2D4B3B1DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
Manifest number:          04
Signing time:             Fri 31 Jan 2025 12:23:30 +0000
Manifest this update:     Fri 31 Jan 2025 12:18:29 +0000
Manifest next update:     Sat 01 Feb 2025 13:17:29 +0000
Files and hashes:         1: 323830343a363033303a3a2f33322d3438203d3e20323639313531.roa (hash: bustMz7M+5CMeM9CRQbzDoUPI+6nwA7yTMNCHpORS1E=)
                          2: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl (hash: Vzz7YiTC300/WDxRbJswnAKQFfodOmoHblvM2Es2lmY=)
                          3: 34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (hash: xKpccbO2wzlbHbDV3ZJO8ATedkukSYGdQvi151j6L2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2f:b6:7b:be:f7:ee:33:df:e9:db:70:ab:82:e2:d2:d4:b3:b1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
        Validity
            Not Before: Jan 31 12:18:29 2025 GMT
            Not After : Feb  1 13:17:29 2025 GMT
        Subject: CN=CC7EB601888E11344BDB10025D2EA8BB4FD18729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f2:ef:d8:ed:84:2f:87:7e:82:3a:52:5d:1b:
                    fe:69:6e:d4:6a:1a:40:da:fe:d7:31:26:e7:fa:38:
                    c0:62:c4:0d:80:97:94:43:86:09:2e:28:ba:3d:3f:
                    75:a2:99:f1:6e:6e:87:fc:8a:ae:2d:8a:47:a4:52:
                    81:d5:06:29:af:2f:1d:77:6e:16:20:55:a1:0f:04:
                    7f:20:aa:45:fa:02:34:8e:4c:f2:c4:c6:ac:32:b1:
                    29:75:d4:54:96:98:7b:bf:ab:3e:a5:08:9a:f6:ff:
                    dc:bf:cd:f4:12:25:bd:d3:5f:fc:8a:3e:49:44:64:
                    bb:63:28:32:27:cc:48:d7:4a:b3:ce:98:00:57:e4:
                    8e:e4:76:41:12:f5:b6:af:4c:8e:bc:5b:81:08:20:
                    d0:47:7f:6e:37:20:0a:20:f8:6d:04:9e:21:43:31:
                    3e:7e:31:4d:07:e9:8f:5f:71:5d:e2:3e:45:5c:d9:
                    ba:4f:db:e6:3a:55:a5:8c:45:eb:f6:9e:92:d2:c5:
                    30:5a:71:10:7a:9c:62:a8:e3:4e:7f:29:66:50:f1:
                    8f:b7:10:cc:af:16:d0:36:6a:14:03:69:67:eb:42:
                    43:2a:33:b5:f2:62:57:9a:e1:6d:28:84:29:47:e0:
                    3a:24:7e:ac:d2:30:8f:7d:35:20:7e:91:f3:2e:48:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7E:B6:01:88:8E:11:34:4B:DB:10:02:5D:2E:A8:BB:4F:D1:87:29
            X509v3 Authority Key Identifier:
                keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:87:32:38:66:06:e7:3e:4b:8c:11:24:55:7a:b9:85:c6:08:
         70:95:12:ad:e4:33:e5:a8:8d:96:14:c6:9e:13:7c:1e:27:33:
         cf:71:ef:f4:03:5d:e9:92:ef:93:61:91:c0:ae:87:1c:81:f5:
         52:1d:15:6b:fa:c5:ec:4a:58:32:14:bc:a7:68:d7:db:84:93:
         37:77:10:02:ab:2b:06:bd:6d:70:4c:65:4c:57:d5:d0:19:f5:
         03:76:62:59:ba:30:a5:55:e9:91:a1:d8:af:a0:4a:c1:16:c6:
         a7:2c:34:82:f3:19:41:f2:30:42:41:4f:36:4c:68:e9:bc:fa:
         31:5a:fe:2c:da:a7:56:e5:0a:d1:34:05:dd:ec:ee:7b:42:b8:
         46:26:e3:1b:5d:8a:0c:72:7a:5b:20:0e:a0:0f:ed:02:ca:11:
         c9:66:0d:1c:8e:c1:ab:b8:22:7c:87:2f:a6:ff:f3:26:0d:0e:
         db:5d:25:41:08:ca:66:dd:56:49:63:74:c2:27:a8:f7:c9:1a:
         e5:15:cd:40:10:13:85:93:ae:2e:0e:6b:12:fe:5e:e3:0f:29:
         e8:9c:46:54:85:11:b2:64:d6:30:b1:42:b8:c3:03:43:8d:3b:
         63:0a:3f:14:62:5d:c3:c0:96:fd:5c:2f:5c:9d:39:33:c9:91:
         8f:1c:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:13 2025 by rpki-client