Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
File:                     CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json)
Hash identifier:          GHdYVzGDpwZ8gpwxTMyc2ilHR1cswI5SJzYNwtbOxqE=
Subject key identifier:   45:13:39:13:8D:84:46:E7:8A:6D:63:9C:02:BA:FE:65:6B:4A:EE:98
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Certificate issuer:       /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial:       3A6CFA9B67477FF0F2196CC7A2D73CB4737156E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
Manifest number:          0193
Signing time:             Thu 30 Jan 2025 23:11:22 +0000
Manifest this update:     Thu 30 Jan 2025 23:06:22 +0000
Manifest next update:     Sat 01 Feb 2025 01:37:22 +0000
Files and hashes:         1: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: kq/HX3k6b6WaEThMV1388G0kWOBc4/0JaiTbaDOSypg=)
                          2: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: OEDkI7iYch27ebFKXcX1Y6hwT5GM+gHLceXFC1bjRic=)
                          3: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: +l/joDpHYELi3VAVYF2MeVXhyrJfJF1f0F1PJnvckvw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6c:fa:9b:67:47:7f:f0:f2:19:6c:c7:a2:d7:3c:b4:73:71:56:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
        Validity
            Not Before: Jan 30 23:06:22 2025 GMT
            Not After : Feb  1 01:37:22 2025 GMT
        Subject: CN=451339138D8446E78A6D639C02BAFE656B4AEE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:78:97:4d:a5:d7:a1:0c:72:9b:6a:15:63:
                    87:ac:4a:27:af:80:ef:ce:dd:c3:c5:c9:fd:43:9b:
                    17:b8:31:6a:56:af:d8:e9:4c:02:76:35:e9:60:ea:
                    5e:7f:58:c1:0d:14:6e:9f:c4:44:d9:61:14:c2:dc:
                    6c:e4:a2:74:40:3f:47:ba:ef:49:94:03:b7:b2:74:
                    58:14:84:4f:42:3f:b2:55:83:4a:0c:44:7f:ac:4d:
                    4b:b0:15:6b:35:1e:8c:b0:6c:12:7d:14:c9:f3:4e:
                    b1:f9:5d:35:de:43:a7:b1:46:b6:68:67:b4:25:e5:
                    96:54:83:ce:03:80:13:19:54:b8:e9:78:9f:cc:c6:
                    9d:d6:86:7d:01:dd:d5:de:4d:14:00:46:73:0c:8c:
                    cb:8b:84:19:c6:f6:d0:16:f6:fe:c3:d6:3e:59:36:
                    51:be:d8:36:76:0d:ff:f3:8d:aa:4f:fc:c4:ed:8f:
                    d9:24:75:cf:a0:56:08:42:97:37:94:73:a9:84:de:
                    50:97:4c:84:9f:bf:30:f6:7c:74:3b:69:31:cd:11:
                    33:4b:97:26:6f:18:6a:52:ec:ae:59:bb:ed:59:2c:
                    28:ee:c0:56:a7:f8:30:80:80:e8:29:e7:a8:b3:13:
                    8b:a4:85:0d:64:89:d2:7f:ca:42:7c:7b:5b:91:93:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:13:39:13:8D:84:46:E7:8A:6D:63:9C:02:BA:FE:65:6B:4A:EE:98
            X509v3 Authority Key Identifier:
                keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:46:54:c1:14:89:12:cf:ff:5c:1d:3f:20:9b:00:94:42:
         15:7a:f8:eb:89:40:f8:94:f6:c3:21:e6:88:a5:fa:41:4b:52:
         27:3d:ec:2e:4b:b1:1e:46:2c:9a:78:e4:6c:3d:69:0f:31:29:
         e4:41:81:b0:af:01:45:c4:a0:af:c5:f6:1e:87:48:ed:b8:0b:
         af:21:f4:a5:12:76:92:36:0d:1c:9d:05:2a:79:de:35:b8:36:
         1b:2d:80:2a:c1:a3:fe:15:a4:58:ec:1f:de:5c:cd:5d:68:1e:
         26:a7:a9:87:d0:8f:64:7a:e5:57:c6:30:19:4c:85:12:a2:77:
         cb:d5:c8:81:ca:a7:df:e6:fc:25:46:5c:aa:9a:5a:20:20:11:
         73:51:77:40:92:57:3e:14:48:8f:37:19:e0:5a:f7:4b:32:c1:
         a6:0e:a9:bb:97:f2:57:78:c4:4a:56:ce:05:ef:19:ec:fa:b9:
         09:09:a2:cf:99:e0:c2:f8:75:8e:80:32:6c:e2:87:9c:cf:c9:
         d6:45:18:f4:b1:50:42:69:50:d1:9b:a8:14:9e:71:78:24:72:
         8b:fc:dd:5f:4f:12:11:01:4a:df:0d:b4:5e:a7:d2:32:37:48:
         a0:b2:de:7e:7d:1d:4c:f4:4c:0c:d5:50:aa:6a:ec:de:e7:cb:
         b4:06:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:52:24 2025 by rpki-client