Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft
File:                     3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft (raw, json)
Hash identifier:          9XL41l/gouYDRepKfZmFb+yWIbcxEcV7SDPIAs5FA1I=
Subject key identifier:   E6:A5:7C:6D:90:BC:8C:9E:92:34:CC:47:E6:FB:5F:42:64:95:CC:D4
Authority key identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A
Certificate issuer:       /CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A
Certificate serial:       029BE7F0C6DFA22789B204E5A24E252414E337B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 03:51:12 +0000
Manifest this update:     Fri 31 Jan 2025 03:46:12 +0000
Manifest next update:     Sat 01 Feb 2025 05:45:12 +0000
Files and hashes:         1: 3137302e3234342e3137322e302f32322d3234203d3e20323636353032.roa (hash: IKsEBtJXKIlH+WXbtOfCdueTZ44VTrJ/0DEepffRSOI=)
                          2: 323830343a333863633a3a2f33322d3438203d3e20323636353032.roa (hash: abJFiL4xB3v7BHB7xz2v8CHFzYhOdPV/giX5ncYaEag=)
                          3: 3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.crl (hash: B9PbWy0L4TNXz6L462ebicwETvSvHNrMuzTeTq5X790=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:e7:f0:c6:df:a2:27:89:b2:04:e5:a2:4e:25:24:14:e3:37:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A
        Validity
            Not Before: Jan 31 03:46:12 2025 GMT
            Not After : Feb  1 05:45:12 2025 GMT
        Subject: CN=E6A57C6D90BC8C9E9234CC47E6FB5F426495CCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:a9:71:1e:1a:b8:f3:4c:ac:7f:14:b5:9d:
                    25:e7:cf:4f:02:37:ab:0d:b5:62:c8:21:6a:42:e2:
                    79:04:1c:30:4e:56:37:ed:5c:a6:5c:ad:14:67:bb:
                    84:6d:7d:7f:10:1d:24:9d:16:be:d1:d1:9b:7d:6e:
                    4e:50:93:dc:09:cd:94:1b:87:ae:7e:4a:a6:eb:78:
                    be:5e:9a:ac:cb:7e:77:c0:08:a3:96:28:0c:72:bb:
                    ad:36:40:b2:25:ac:72:c0:c5:ac:7c:74:79:3f:fb:
                    82:9b:4b:e7:35:7d:7b:88:53:b6:01:cf:9d:09:9e:
                    87:49:b8:06:60:4e:61:dc:19:f0:ed:21:d3:78:5f:
                    4a:32:7d:56:7a:da:10:78:55:44:6f:c6:3e:2e:75:
                    3a:58:e1:83:1f:84:d1:39:e1:06:f0:22:50:83:6d:
                    0b:a5:ac:c7:d8:37:ab:93:9f:d2:c3:e6:e9:20:ab:
                    bf:35:35:76:17:7d:61:28:38:d9:9e:b0:be:99:cb:
                    5e:dd:0a:da:82:9c:b7:15:76:50:df:6d:9b:2a:f1:
                    d9:de:b4:42:f6:e3:33:9a:dc:1e:d9:63:ad:4e:14:
                    69:52:3d:8e:e6:1f:0f:1b:eb:c7:8d:b5:80:c6:48:
                    ba:76:16:e7:0d:b4:b7:e0:28:d2:0c:54:46:d0:c4:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:7C:6D:90:BC:8C:9E:92:34:CC:47:E6:FB:5F:42:64:95:CC:D4
            X509v3 Authority Key Identifier:
                keyid:3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b7:6d:2f:bf:e6:87:c6:30:3b:e1:e9:a1:f7:78:6b:d5:be:
         31:ee:c1:2f:56:87:c4:78:f1:00:7a:ed:17:92:ed:90:d8:8c:
         22:c3:c7:83:d6:1c:8a:53:bb:3f:cf:11:71:c5:60:b3:e8:9b:
         34:3d:e9:59:06:c7:95:37:ee:50:5b:af:35:ca:84:a2:80:85:
         fc:ea:4d:43:b6:10:de:aa:34:cf:33:9e:f0:0a:0c:74:5f:ed:
         84:c3:e8:ff:b9:3b:3d:a6:55:8b:bf:d5:0e:cc:7b:a6:ea:76:
         24:34:ce:08:be:cb:15:b8:d0:01:29:b1:f9:93:a0:3c:7b:b9:
         81:6d:71:6b:36:b7:7d:80:66:da:c2:3e:4f:4a:26:10:68:5f:
         bd:6a:74:c7:ef:1b:1d:e8:c6:ec:1c:65:38:37:d5:68:ee:73:
         1e:dd:e8:e6:2e:4b:70:6d:b1:4f:98:fc:71:47:20:48:66:1b:
         04:0a:ac:84:d9:d4:f1:63:af:2d:da:09:f6:9f:50:e4:f1:bf:
         f6:d7:05:84:f7:18:0f:e7:14:6c:62:06:e7:0c:91:cc:97:82:
         8c:40:d6:87:45:83:ec:a7:4e:02:9e:c0:1a:bf:37:1b:13:aa:
         fa:2d:93:ed:7c:fa:8f:38:14:a4:c1:a3:cf:77:62:00:c0:18:
         ce:b5:f0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:33:46 2025 by rpki-client