Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft
File:                     85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json)
Hash identifier:          iv33kY6WMo6YLBOkFP04rptLrZ6nueEsMf1khALDrAQ=
Subject key identifier:   E2:B8:CC:55:B3:E0:BB:27:CF:D5:8C:64:C0:6D:4B:4F:3F:DE:53:69
Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95
Certificate issuer:       /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
Certificate serial:       060F46381F892148951D79F547682353404A72A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 02:35:45 +0000
Manifest this update:     Fri 31 Jan 2025 02:30:45 +0000
Manifest next update:     Sat 01 Feb 2025 04:43:45 +0000
Files and hashes:         1: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: 6TxzKpX/OQsEB1b9lNMqUAGKh3jtb9Y7lBqgSwQ0/i0=)
                          2: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: JFA0ftELhKAZS1dk1+sVtK7ntqLYiUfo3yHNItv9VeQ=)
                          3: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: h32J0sbZBJaxOxvOmx3Nl/vGa3eQZCAitkc9DRDLaCE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0f:46:38:1f:89:21:48:95:1d:79:f5:47:68:23:53:40:4a:72:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
        Validity
            Not Before: Jan 31 02:30:45 2025 GMT
            Not After : Feb  1 04:43:45 2025 GMT
        Subject: CN=E2B8CC55B3E0BB27CFD58C64C06D4B4F3FDE5369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:62:8c:30:2a:b3:57:6b:70:59:4e:55:af:
                    f6:e4:a2:d6:08:e2:04:ab:5e:4e:df:00:1c:d2:6e:
                    d1:33:62:c1:66:83:9a:ce:d6:bc:33:46:77:6e:6f:
                    e3:85:59:ca:a2:d1:5a:ca:a4:74:13:f3:72:e2:d9:
                    61:70:c8:85:38:79:ea:30:71:c2:05:f1:0b:96:ad:
                    ce:dc:71:4c:e7:0e:34:4f:ae:be:2d:e6:dc:69:7f:
                    7e:0c:fe:68:83:b7:a6:1c:7f:5e:7a:50:c3:82:79:
                    1e:8c:7a:84:ea:c0:db:cc:65:18:9d:1d:17:62:1f:
                    e5:ec:e0:b7:2c:37:70:ac:9d:06:9f:34:03:f7:b3:
                    1c:86:de:52:4f:f8:c7:4f:b6:54:62:0e:45:21:b0:
                    a6:b9:6c:10:fb:b5:cf:d1:e4:6a:38:16:6c:c7:e0:
                    e7:87:bc:ff:04:24:e0:6b:b9:ab:59:75:ef:4f:74:
                    f4:cc:9c:52:68:ba:65:64:77:fc:9b:ad:e5:6a:c4:
                    8c:a0:b2:71:99:54:a5:2a:83:78:79:c3:ac:2f:c4:
                    ea:e2:fc:29:8b:c0:2f:6d:61:15:46:85:06:70:19:
                    b5:a4:ea:98:f1:cd:48:b8:98:92:7d:2a:eb:a2:8a:
                    b0:7e:2a:c8:f0:14:a5:31:05:b5:1f:23:c6:8b:a5:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B8:CC:55:B3:E0:BB:27:CF:D5:8C:64:C0:6D:4B:4F:3F:DE:53:69
            X509v3 Authority Key Identifier:
                keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:01:6a:82:05:0e:af:e4:e4:57:9c:72:d4:4c:ae:21:c6:39:
         8f:18:03:ec:8d:6d:1e:c7:bd:70:8e:55:3e:92:9c:ed:d5:4d:
         04:34:60:5c:07:04:57:da:62:c0:78:76:e6:38:df:6d:73:ff:
         4a:c9:82:8e:8d:af:63:9a:f7:da:9c:be:8b:70:85:88:e1:43:
         ed:2e:c2:61:56:34:16:32:73:44:01:4a:46:91:56:95:95:e8:
         82:b2:41:78:66:3c:1c:3a:33:56:3d:7f:93:9a:6b:8f:e3:49:
         f6:c8:09:70:10:11:48:df:36:5d:17:df:61:17:0d:d4:61:5f:
         4a:19:bf:f9:71:85:1f:50:14:1a:9c:d4:cf:b4:81:3c:fa:54:
         93:32:53:b0:55:21:45:e2:84:d8:35:0e:b6:70:5e:83:61:19:
         81:c9:9a:9e:57:df:3e:c1:0b:04:da:f7:49:17:ca:15:46:a4:
         bd:3e:2c:c2:ac:b8:7b:ed:15:b2:c3:0e:25:a2:7e:e1:d8:a6:
         53:d5:e1:e1:cf:2f:13:8b:fb:33:a8:31:32:8d:c9:5c:77:27:
         e8:8c:36:6d:5d:98:e1:ca:40:45:41:70:cb:eb:73:7e:fe:77:
         f7:20:96:4b:99:27:dd:21:12:91:4c:0d:d7:2f:6c:b5:08:ee:
         82:00:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:21 2025 by rpki-client