Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
File:                     A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft (raw, json)
Hash identifier:          JhlEnW3d2W8msUvjhEfS/LIU9ud6+l9Kq2ogiQDNRIY=
Subject key identifier:   50:DA:31:EC:F2:D5:99:D9:6F:B8:44:A2:CF:10:1D:8D:52:79:21:F4
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       57A15CAC0DC61B4F2AE5994FB1590EC9B82FE9F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
Manifest number:          0191
Signing time:             Fri 31 Jan 2025 05:01:39 +0000
Manifest this update:     Fri 31 Jan 2025 04:56:39 +0000
Manifest next update:     Sat 01 Feb 2025 06:38:39 +0000
Files and hashes:         1: 3137302e37392e38302e302f32322d3234203d3e20323633363530.roa (hash: pi1yEYgeie+30f85R6wUGuYEk95PzbrNaUoA5vukU9M=)
                          2: 3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa (hash: bVFA2g3wM1hcWJXSG4CjdURRM4N3Q1R5K+GBwYMf6XE=)
                          3: 323830343a313063633a3a2f33322d3336203d3e20323633363530.roa (hash: d/otz70IhLkOE7qW9Hi+bmgyB60fWruIGJdapJoE85Q=)
                          4: 3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (hash: nUQzFXKDl1xujcX4Af9DGcfnUBPhgKYLK4PbMQx9GYM=)
                          5: 3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (hash: 19nPFkkYhyzcSO607f///8Jzo4IFqd+gG+1vIzy44gs=)
                          6: 3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa (hash: z6hqrhzIEQ7i/XVz4kqbq/23XZ2nChPTd9QvnZVmvns=)
                          7: A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl (hash: YVUjbzSrxOp4t4YYeHYpKXxPnqxxEwB7KXAR8+HW2V8=)
                          8: 3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa (hash: uJkw7fDYTnNjE/XjcsqyWs1QBz9ZNREGI9zTX7VEBqo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a1:5c:ac:0d:c6:1b:4f:2a:e5:99:4f:b1:59:0e:c9:b8:2f:e9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Jan 31 04:56:39 2025 GMT
            Not After : Feb  1 06:38:39 2025 GMT
        Subject: CN=50DA31ECF2D599D96FB844A2CF101D8D527921F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:31:cd:fa:d1:cb:6d:f2:18:4e:1e:b9:d9:
                    4f:85:83:6f:8e:82:d3:a5:59:e0:e1:12:43:a7:a9:
                    e2:76:f7:55:ea:9c:3e:9a:18:d2:c4:15:3c:6d:53:
                    44:55:57:09:ca:ab:05:a1:e6:60:36:18:54:93:1c:
                    0c:b0:ca:b3:a8:bf:a7:b9:b3:28:65:c3:65:af:2c:
                    e2:33:bd:9a:1c:2e:67:ce:9a:98:b7:eb:53:9c:8e:
                    73:11:2f:7b:59:c4:1f:ae:d3:e9:15:08:f8:0d:68:
                    5f:cf:54:83:97:2d:7b:85:b3:d8:f4:74:02:f1:7a:
                    99:78:d6:77:54:93:fe:77:a2:1a:d0:2e:09:7d:85:
                    da:12:01:81:7a:76:a7:fa:30:e7:5a:6a:2a:20:09:
                    3c:25:7c:d5:5c:86:bb:b3:cf:d6:c0:7e:94:f2:cc:
                    34:56:56:4a:d8:e9:98:73:fc:e6:ff:1c:af:65:62:
                    52:02:42:9e:df:8d:81:3b:22:39:8d:5f:00:95:f4:
                    df:1c:23:3a:80:93:6e:36:08:7c:88:b9:51:b5:05:
                    c8:5a:c2:9e:ea:ff:07:fd:31:92:63:97:e3:d6:c8:
                    d8:74:16:f4:46:32:b2:ef:39:92:7d:2d:c5:de:96:
                    45:7f:ed:91:b1:a5:2f:5d:5f:10:9a:e8:e9:08:42:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DA:31:EC:F2:D5:99:D9:6F:B8:44:A2:CF:10:1D:8D:52:79:21:F4
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:f3:1a:ca:08:08:65:7b:eb:10:1e:2d:27:24:ad:1f:d7:
         c4:d8:3c:91:56:28:87:fe:15:09:1f:35:ed:d9:d7:63:03:c3:
         2e:c0:ff:17:98:a1:e4:15:ee:1a:84:db:c6:fd:4e:bf:a4:7c:
         d9:7b:b8:37:66:5e:ca:4c:b1:37:4d:d1:72:b8:ed:65:04:af:
         47:bb:62:54:9b:d4:74:6d:80:35:44:09:1e:77:a9:88:ac:5a:
         2c:c2:a4:d5:46:44:47:65:e2:70:68:cb:3d:63:2a:97:e8:14:
         54:19:00:39:1e:79:cb:30:8c:7e:74:41:d0:1a:df:63:58:4d:
         65:f3:23:13:f6:71:b8:62:05:37:69:af:94:50:2a:a8:1f:01:
         26:cc:42:de:6d:39:67:a1:5e:1f:63:26:da:7e:3d:50:ec:1e:
         e1:e2:df:f5:14:07:d9:51:68:61:6b:7e:49:63:b6:85:59:21:
         df:26:19:e7:d2:81:63:cb:80:a7:70:24:74:5e:60:88:8b:39:
         50:bf:1b:de:89:96:d8:d8:4a:31:76:e6:54:8c:76:d8:04:7c:
         d7:b8:9c:9f:f2:16:fd:b6:b7:99:a2:85:5d:4f:46:e2:cb:13:
         a1:b3:fe:e6:57:af:91:f2:ae:f7:6a:02:45:09:6b:2a:fa:a7:
         0a:2a:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:06:15 2025 by rpki-client