Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.mft
File:                     9F7BE7FF636315A2112430004A5ADD47912C1F17.mft (raw, json)
Hash identifier:          XcC5K1dwwPkcNX+BHooCGZCDurHmNTWj2hmPq0zZvF4=
Subject key identifier:   32:18:A2:44:75:E1:EA:9F:A8:58:B0:4A:84:7B:66:73:98:D1:86:D4
Authority key identifier: 9F:7B:E7:FF:63:63:15:A2:11:24:30:00:4A:5A:DD:47:91:2C:1F:17
Certificate issuer:       /CN=9F7BE7FF636315A2112430004A5ADD47912C1F17
Certificate serial:       3745C03D24A1ABA7C6C978481CA1BDF2285A43D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 09:28:47 +0000
Manifest this update:     Fri 31 Jan 2025 09:23:47 +0000
Manifest next update:     Sat 01 Feb 2025 12:11:47 +0000
Files and hashes:         1: 34352e3233312e3235322e302f32322d3234203d3e20323637323337.roa (hash: HlP7Yd4z7Jz5DH1pj05CJnvsm4rI3fKB6VXqIQwUh5w=)
                          2: 9F7BE7FF636315A2112430004A5ADD47912C1F17.crl (hash: P4Oup4FT7w6o/xF+QYBZe/DWeOxUGdzvDbHm/1iscXg=)
                          3: 323830343a346136343a3a2f33322d3438203d3e20323637323337.roa (hash: ZuUZKX9CKnqmfUR8rOvNgfZU5eYpFzOW+zpAC7u/ehg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:45:c0:3d:24:a1:ab:a7:c6:c9:78:48:1c:a1:bd:f2:28:5a:43:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F7BE7FF636315A2112430004A5ADD47912C1F17
        Validity
            Not Before: Jan 31 09:23:47 2025 GMT
            Not After : Feb  1 12:11:47 2025 GMT
        Subject: CN=3218A24475E1EA9FA858B04A847B667398D186D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:bb:7c:f1:65:85:d1:a1:fc:1e:cf:66:47:
                    f9:3b:f6:f8:3f:a3:d6:2c:0b:e7:ca:80:37:c5:85:
                    be:ff:a5:3d:5f:3a:9a:b0:45:ff:42:87:e2:7c:13:
                    e7:78:c2:c8:9c:04:32:67:14:50:2b:62:62:95:5c:
                    29:90:a7:c5:f0:b6:30:36:01:e7:d2:e0:76:c3:ce:
                    42:1a:c1:cf:b7:59:20:e4:30:8e:9b:18:48:87:15:
                    89:45:61:98:7c:80:bb:b7:11:79:03:1c:9c:52:6f:
                    ae:6c:71:80:f2:ef:5b:45:1e:0d:58:73:1a:cd:11:
                    23:fa:89:d0:ae:2f:b3:53:61:98:2d:df:ed:9d:e6:
                    fa:da:8e:f4:c7:73:2b:db:84:f8:e9:dc:80:4c:a9:
                    7f:e7:d7:a6:4c:15:20:b0:45:51:99:22:5e:cc:31:
                    e9:1d:8c:6a:a0:af:4f:a3:29:e0:96:4a:44:4f:4f:
                    1d:e5:b8:7e:77:11:8f:e2:50:93:1b:8a:7f:13:82:
                    fd:69:79:b3:ea:38:d9:36:b5:3b:f3:9e:70:52:98:
                    a7:1c:91:ad:e2:bd:e7:27:42:86:21:c1:e8:08:8f:
                    0d:fd:08:47:86:c6:f6:10:e2:be:64:a2:6a:a1:29:
                    38:44:e8:f5:a5:ab:29:a0:4b:e1:ac:7b:02:01:12:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:18:A2:44:75:E1:EA:9F:A8:58:B0:4A:84:7B:66:73:98:D1:86:D4
            X509v3 Authority Key Identifier:
                keyid:9F:7B:E7:FF:63:63:15:A2:11:24:30:00:4A:5A:DD:47:91:2C:1F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/1/9F7BE7FF636315A2112430004A5ADD47912C1F17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:ab:44:f1:63:47:db:5a:d1:be:cb:9c:a1:91:b5:38:d2:
         76:ea:bd:84:95:80:ee:39:7c:34:37:e4:e9:e6:a5:de:0c:2b:
         40:d6:41:85:90:57:b3:59:6c:b6:3c:52:db:8e:82:3a:59:48:
         9d:d4:90:86:b3:11:97:79:f7:5f:98:26:d6:c7:0d:f2:71:90:
         eb:c5:26:4a:4a:e1:b6:72:13:69:cb:ef:0c:2f:13:0a:61:23:
         c0:4d:6d:e8:aa:09:73:27:47:a5:ed:ef:32:5a:43:e2:eb:63:
         e9:cc:27:b9:89:4e:7e:a6:35:de:68:27:9e:c3:24:2e:0a:54:
         30:f1:90:7c:4f:75:1f:f6:c5:19:25:57:b9:2d:ac:52:dc:3f:
         a2:57:d3:e8:82:4b:90:26:50:2e:d4:46:86:00:46:4e:e8:cb:
         5f:14:1b:3a:92:d7:ed:19:f2:44:6c:82:f2:bc:b5:af:64:0f:
         d4:16:17:2a:fd:44:c5:b5:9f:4a:9d:8e:d1:e7:ae:66:d1:e6:
         ed:1a:20:f0:88:fb:0c:8e:02:db:60:1a:1f:ef:0b:b2:ba:db:
         76:b3:43:e6:02:70:3e:57:f8:1e:25:9c:f6:b3:cd:6a:89:e8:
         a9:b2:a2:d5:44:94:95:08:53:dd:cd:1b:00:cf:8e:0d:fc:07:
         f3:f6:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:18:01 2025 by rpki-client