Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
File:                     A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft (raw, json)
Hash identifier:          ONo6jYuRsn3k1aKQWaibAfjZu50rZ4UQZc+eDppghXY=
Subject key identifier:   AF:22:C3:26:83:CD:24:E3:CF:68:FD:84:84:15:47:3F:38:1F:7E:B2
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       4FF39E1B274FAA1CB02F4589E4C5B22809826B26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 16:05:36 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 18:28:36 +0000
Files and hashes:         1: A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl (hash: +kUGJPe3hXd2T0pvcbATe4eiJCusLwX40CLcTlDqioY=)
                          2: 323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (hash: 07LxCY4RP+dgXtSWb3UlLzYruLlQOXWvgD3VUPbtVeU=)
                          3: 3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa (hash: YH72k/QxuheBCgdjU+s21PdbAKz2JNFIC0hQBapRFmw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f3:9e:1b:27:4f:aa:1c:b0:2f:45:89:e4:c5:b2:28:09:82:6b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: Jan 31 16:00:36 2025 GMT
            Not After : Feb  1 18:28:36 2025 GMT
        Subject: CN=AF22C32683CD24E3CF68FD848415473F381F7EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:15:44:f0:e2:eb:01:3d:4f:ec:43:67:cb:e1:
                    c1:b3:01:2b:d1:5c:cc:65:7c:6a:2b:ac:10:dd:2e:
                    d1:2d:ad:5e:33:7a:24:ed:1e:91:5a:b9:83:87:c9:
                    92:01:d7:ef:79:af:47:c5:b8:cc:85:c6:ca:84:6d:
                    43:84:b9:d0:81:a8:c6:6a:03:ba:ec:9b:0a:8c:5d:
                    c0:48:52:92:34:25:49:c4:3a:4c:77:dd:dc:10:0c:
                    6c:3f:b4:2c:fa:66:20:e4:77:73:41:6f:24:5b:69:
                    7e:27:8b:b7:6d:c7:58:84:ec:79:76:8e:dd:29:f1:
                    93:de:8a:e3:82:e6:a8:d9:9e:aa:38:70:62:5c:2b:
                    de:f3:f1:48:f6:95:42:1f:2d:3b:4e:d3:a0:f3:c8:
                    75:1a:c3:a0:6d:17:f4:3e:94:11:a1:f7:ac:a8:ce:
                    07:2b:74:67:98:b7:91:cc:df:c4:8d:01:f3:51:33:
                    15:bd:55:98:2e:33:be:8e:6b:ea:72:3c:71:a5:49:
                    03:9a:3d:87:52:00:37:c3:f6:bf:18:17:0f:e6:1a:
                    cb:c0:2f:c1:82:a9:32:83:e9:fb:a7:48:d2:25:61:
                    4c:a9:12:eb:29:8a:19:79:f5:66:45:ea:37:cf:95:
                    c5:b7:7a:87:ce:28:00:4e:33:7e:f0:cd:56:91:d1:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:22:C3:26:83:CD:24:E3:CF:68:FD:84:84:15:47:3F:38:1F:7E:B2
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:39:48:2c:c4:a2:16:5e:c1:9b:3e:98:a2:d9:fc:f2:5a:a6:
         64:32:25:e3:60:a4:61:e7:24:0f:c8:8f:cc:cb:ea:f6:6e:62:
         3c:95:25:ad:c7:fd:95:e2:e8:b9:c0:56:cd:df:1f:f0:62:cc:
         e6:55:4f:cc:9e:31:24:fc:9b:0c:14:29:e6:bf:92:14:6e:c4:
         47:68:f6:3b:b5:3e:1e:21:2f:f2:4a:ab:40:f0:14:85:64:a9:
         b2:8a:df:78:9c:e7:99:32:7a:a0:64:0d:32:3e:26:71:b6:7f:
         98:86:f1:78:d3:7f:dd:32:75:ef:7f:19:34:24:00:04:9a:63:
         19:23:97:c3:6e:fb:fd:a7:65:a1:28:3c:26:ad:4c:f4:bd:e7:
         38:dd:b9:1a:84:77:61:5a:77:93:90:8e:e9:ac:65:da:8b:5c:
         47:f8:50:1d:83:c4:79:19:f3:c7:5f:0d:72:b6:ac:2a:86:c9:
         52:70:58:d9:98:4a:1d:2b:c5:6d:c2:b5:1f:21:9b:54:dd:ec:
         48:6d:a0:07:57:a5:23:a2:18:27:aa:65:d6:66:8e:9f:2c:88:
         68:6a:18:e6:fc:fc:48:15:35:f3:0c:4c:d8:66:c6:83:08:69:
         60:c8:a2:22:cd:cf:aa:d8:0e:bf:0c:b1:7e:7a:81:d8:5e:f2:
         23:54:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:18:55 2025 by rpki-client