Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.mft
File:                     C444BE84CBD5E178D6931CB6CFEF2555D45D7751.mft (raw, json)
Hash identifier:          6ySOuiWe0La5Sa5ZcL8Tl2kirUlVbmp7nGTdUuQayHo=
Subject key identifier:   02:00:37:D8:6E:5F:2D:18:B9:AA:A1:95:8F:39:D5:E7:6A:2B:7E:18
Authority key identifier: C4:44:BE:84:CB:D5:E1:78:D6:93:1C:B6:CF:EF:25:55:D4:5D:77:51
Certificate issuer:       /CN=C444BE84CBD5E178D6931CB6CFEF2555D45D7751
Certificate serial:       38E328449C0819D1A33ECBEE988592CD77E619AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.mft
Manifest number:          2A
Signing time:             Fri 31 Jan 2025 12:13:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:08:37 +0000
Manifest next update:     Sat 01 Feb 2025 13:19:37 +0000
Files and hashes:         1: 34352e3139302e302e302f32322d3234203d3e20323639363036.roa (hash: KhJEHa7D1lQto4+u9DafQ5lYvXfTddn/O3zNG0JuByM=)
                          2: C444BE84CBD5E178D6931CB6CFEF2555D45D7751.crl (hash: d+NqF5GpPFqMoT+cnnhS5rz2mnSYX7g6U7NyWjpM+0c=)
                          3: 323830343a363732343a3a2f33322d3438203d3e20323639363036.roa (hash: eKEciWjJeAGhtpiSpub5uGxNcDosk6DpM3+Fm3OKuA4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e3:28:44:9c:08:19:d1:a3:3e:cb:ee:98:85:92:cd:77:e6:19:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C444BE84CBD5E178D6931CB6CFEF2555D45D7751
        Validity
            Not Before: Jan 31 12:08:37 2025 GMT
            Not After : Feb  1 13:19:37 2025 GMT
        Subject: CN=020037D86E5F2D18B9AAA1958F39D5E76A2B7E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:a2:d1:59:ec:80:ee:51:a0:08:00:b2:82:
                    53:f4:97:d2:54:bd:bd:63:00:df:50:82:34:a8:f1:
                    f1:48:83:48:b8:c8:11:1e:30:11:48:10:ce:cf:eb:
                    59:17:6f:f3:cd:f3:f4:f9:42:66:33:87:9d:ab:00:
                    94:0b:58:0a:5e:a1:51:15:2b:f4:5e:fd:da:6b:ca:
                    0f:5c:c6:03:5e:3b:09:34:72:19:7b:a0:1e:2c:88:
                    41:43:87:32:0d:00:df:82:7a:cd:6b:5b:08:37:5f:
                    95:a9:a2:fb:e9:38:0d:45:99:6b:31:2f:e5:54:7f:
                    1c:5a:47:58:c4:27:d2:2e:f6:aa:6c:d8:a0:28:14:
                    2d:ee:85:2e:6f:3f:1b:69:82:0d:2b:b6:11:41:69:
                    90:fa:81:4d:2a:9e:6c:90:3f:6e:89:6e:0d:86:ba:
                    e8:fa:37:2c:67:14:ba:21:49:3a:8a:08:ee:3e:e3:
                    5c:2d:17:50:cb:4d:fa:d2:9c:48:9c:57:d6:6c:d2:
                    61:ea:7c:7a:c2:ad:0a:13:bd:a1:b5:0d:79:d8:c2:
                    f5:a8:e5:00:17:8c:2a:4a:d8:a0:69:40:94:84:60:
                    19:0d:ce:4f:bc:f2:d2:a7:16:ce:bb:2e:dc:29:f6:
                    aa:f2:49:ee:63:b9:ff:dd:b2:c8:86:ae:dc:8a:8f:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:00:37:D8:6E:5F:2D:18:B9:AA:A1:95:8F:39:D5:E7:6A:2B:7E:18
            X509v3 Authority Key Identifier:
                keyid:C4:44:BE:84:CB:D5:E1:78:D6:93:1C:B6:CF:EF:25:55:D4:5D:77:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1b:6b:99:18:3e:8f:8f:30:54:66:f9:7e:e5:5c:be:04:72:
         89:6a:e2:d1:a8:2d:a5:b7:ff:b0:41:83:cc:e1:8b:3a:4e:94:
         2b:04:8b:a2:ed:db:4b:1a:9f:25:de:ca:25:09:94:9e:64:e4:
         d3:e9:47:ae:b6:1f:4f:6a:f0:52:9a:59:b7:2f:51:26:d8:a2:
         74:96:ff:7e:29:4d:b6:bd:a4:92:2c:5a:d6:63:25:10:5a:40:
         e7:42:b9:84:66:5f:30:b7:b0:95:c1:13:7a:da:f0:07:3e:18:
         36:d1:7d:3f:f5:c0:69:2c:8f:3c:f1:b3:1e:14:dc:de:6b:1a:
         9b:a1:44:66:99:21:41:1f:20:16:48:2a:8d:96:d5:ef:83:a7:
         4d:a2:b5:41:6e:29:a6:4c:6c:7a:58:50:a7:8c:6e:24:eb:2d:
         fd:48:a2:2d:29:2f:4e:03:ce:60:19:5f:5a:66:49:74:bf:93:
         a8:6c:db:cf:4e:ad:8d:6f:ac:07:57:08:7e:34:16:26:c7:1f:
         64:b4:5e:07:c2:6a:1d:70:4e:f8:7f:0d:08:9c:51:d4:19:87:
         ca:56:40:89:01:dc:06:26:b5:87:60:49:07:31:46:80:51:38:
         7d:85:39:b7:5f:fc:a3:38:9d:d3:d5:04:8b:9a:92:da:4d:0d:
         32:9f:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:57:59 2025 by rpki-client