Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
File:                     D293EBE899975158DDB35D74133FF1297A6D6E38.mft (raw, json)
Hash identifier:          8dMqyeBwAcoB14p3S1KEv0Er3ENmcYTFToL+mZEdY28=
Subject key identifier:   81:C6:17:C0:54:6C:91:D2:13:DF:6E:68:02:AB:3B:FC:31:20:A9:49
Authority key identifier: D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38
Certificate issuer:       /CN=D293EBE899975158DDB35D74133FF1297A6D6E38
Certificate serial:       63C6F42CFC0C345E5D82C5010926FD479972CF26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 12:07:11 +0000
Manifest this update:     Fri 31 Jan 2025 12:02:11 +0000
Manifest next update:     Sat 01 Feb 2025 13:20:11 +0000
Files and hashes:         1: D293EBE899975158DDB35D74133FF1297A6D6E38.crl (hash: ppuYFoMkRHyH19tFQQueThgANL0t/3VJp9qVNvXT0s4=)
                          2: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: sMXvXVDurTJe/M0ogoSx+Aq+esq88Z/etQFT+VHw8E8=)
                          3: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: FA4HmMXZLEI1h0ksLxh/sIAWwQNJ9sx6ieK7xSYBFms=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c6:f4:2c:fc:0c:34:5e:5d:82:c5:01:09:26:fd:47:99:72:cf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D293EBE899975158DDB35D74133FF1297A6D6E38
        Validity
            Not Before: Jan 31 12:02:11 2025 GMT
            Not After : Feb  1 13:20:11 2025 GMT
        Subject: CN=81C617C0546C91D213DF6E6802AB3BFC3120A949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:0c:27:88:38:ee:0b:2a:6b:d8:3b:09:6d:
                    54:39:d8:b5:5d:44:1a:f8:bb:89:6b:be:a4:ec:ec:
                    3b:22:b9:3c:a0:89:f5:fb:c0:cb:8d:66:b5:71:22:
                    9b:af:69:d9:ac:55:51:fc:3f:12:55:e0:1b:38:d5:
                    8c:c4:ce:db:94:3f:cc:3e:6f:5d:2e:91:3d:17:7f:
                    80:53:d8:39:62:07:f4:9f:6c:bf:7d:e7:3e:14:84:
                    64:da:c0:3a:d8:ca:ab:ba:da:67:ab:90:36:0e:da:
                    c3:1c:0b:aa:a8:f7:d3:d9:c3:50:62:0a:b8:a7:9f:
                    16:a5:42:16:27:98:f4:69:ce:ed:bd:e4:c9:cc:9e:
                    f5:73:6c:83:00:a3:74:21:a3:06:ed:82:71:a2:c9:
                    71:cf:28:bb:b7:d2:b6:cc:5e:cd:27:1c:f3:eb:f7:
                    df:28:7e:cf:aa:26:cd:ca:9a:b4:e8:00:5d:b0:7b:
                    1b:ca:41:e3:59:21:4a:49:5b:54:36:2b:59:71:5b:
                    2f:cb:65:01:f0:34:1c:d1:5e:b4:fe:56:c4:13:7a:
                    c8:f7:14:5a:b0:28:b0:64:02:a3:47:8f:93:b3:d8:
                    c7:72:c5:7a:b1:db:c7:34:5d:34:c8:34:7c:bd:77:
                    98:2c:33:41:7e:0c:e6:1f:dd:ee:d8:61:fb:25:41:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:17:C0:54:6C:91:D2:13:DF:6E:68:02:AB:3B:FC:31:20:A9:49
            X509v3 Authority Key Identifier:
                keyid:D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:67:e2:bc:00:92:86:e8:a9:f3:46:40:bb:b2:40:56:1a:
         cc:7c:0a:fb:0b:98:4e:18:3e:78:5e:55:5d:02:cf:dd:42:3c:
         66:03:66:d4:c4:3c:6c:5a:f2:1d:98:9c:cf:63:ea:75:f8:1d:
         3b:2e:70:a5:e6:d6:e6:f5:01:bb:b4:77:e5:38:e2:2d:88:17:
         eb:ba:a6:80:99:74:dd:c6:71:1b:9a:26:86:13:42:ab:17:39:
         10:fd:cf:5d:db:74:d4:8c:e1:9b:74:b4:f8:e0:41:a1:bc:93:
         50:19:8d:95:b4:da:58:29:f7:d6:c8:8e:a4:3e:5c:85:52:99:
         4e:58:82:f5:62:63:f1:32:4f:ec:34:09:8a:47:c9:a5:af:c1:
         28:55:53:eb:15:d0:ea:e6:98:ed:3b:d7:ad:a5:5c:db:c6:c4:
         09:a2:2f:75:43:97:d8:80:8d:b4:4b:e9:6a:30:bb:62:21:e4:
         f5:bf:50:aa:07:d2:31:55:cd:34:a7:b6:8b:9f:9b:64:0c:bd:
         4c:79:df:23:27:5b:b1:7e:d5:d6:23:2d:f6:af:0b:80:c4:eb:
         45:d5:bd:7d:d3:a7:09:21:2a:f4:58:3c:45:40:93:ca:a1:1d:
         03:13:fd:4d:54:d9:db:9c:c2:14:e0:15:aa:1b:b6:31:ab:a4:
         44:de:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:51 2025 by rpki-client