Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
File:                     62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft (raw, json)
Hash identifier:          Wm7YOTH5vGfztEDke4NrWGv3MbxamTIagrOkMGuKnPU=
Subject key identifier:   F6:40:84:8A:DB:3D:6D:1A:46:89:52:37:83:95:97:6F:E0:7F:07:0A
Authority key identifier: 62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB
Certificate issuer:       /CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
Certificate serial:       53466F90D36BF7AD0D8B683D6727447BED7467EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft
Manifest number:          019A
Signing time:             Fri 31 Jan 2025 17:30:00 +0000
Manifest this update:     Fri 31 Jan 2025 17:25:00 +0000
Manifest next update:     Sat 01 Feb 2025 19:12:00 +0000
Files and hashes:         1: 34352e3232382e342e302f32322d3234203d3e20323637303339.roa (hash: jxRTBqIJdk2S09yETAdLWt2SjWi6krvYzOg2sl28VQg=)
                          2: 323830343a343733383a3a2f33322d3334203d3e20323637303339.roa (hash: GPnlLnefk+NuVUsROECsbXPQtB0Qzk2FUBPVcbXyNC0=)
                          3: 62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.crl (hash: ru0G5ZF/mPDr/sydAVLPtIwPZfnK7vzTGk3ctzeOy6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:46:6f:90:d3:6b:f7:ad:0d:8b:68:3d:67:27:44:7b:ed:74:67:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62595ED971A5BB40662FB52F1C40BDD69B1CD1BB
        Validity
            Not Before: Jan 31 17:25:00 2025 GMT
            Not After : Feb  1 19:12:00 2025 GMT
        Subject: CN=F640848ADB3D6D1A468952378395976FE07F070A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:ed:c2:35:f6:b3:e7:71:22:ec:11:1d:c5:
                    a5:f8:db:4c:7d:3a:0f:1b:dd:55:3b:23:8f:67:41:
                    07:d8:14:87:b2:12:b4:a6:60:e0:88:f1:57:fb:25:
                    f6:a2:87:0f:21:64:4e:87:d5:1b:4f:7f:e3:ae:61:
                    36:1e:d9:9d:93:7f:c2:6f:18:72:e8:d1:cc:7f:85:
                    26:f0:69:6d:e6:4f:1b:e5:e2:19:9b:8a:a1:12:0b:
                    5c:a1:35:f5:59:91:99:e5:2a:28:da:25:ee:5a:db:
                    ed:a1:c1:db:44:3a:bd:ef:3f:26:e5:d3:fd:51:1b:
                    73:1d:13:d3:3e:b8:61:f1:1f:4c:2b:f5:0e:65:49:
                    3f:df:67:21:83:72:c8:2f:0a:74:c1:39:06:26:a2:
                    7b:16:ce:96:92:6e:0f:9a:20:76:52:02:e0:c2:f8:
                    b9:4c:5c:cb:0f:51:be:25:17:5f:22:db:59:9a:32:
                    d2:d5:31:64:e7:b5:c1:93:44:be:1f:f5:ce:64:0f:
                    38:b6:0d:20:25:d8:58:30:4a:7e:36:a4:aa:52:9f:
                    c5:32:19:d1:5f:d6:88:9d:ed:ce:e9:13:ee:80:e5:
                    b2:d7:9a:ce:d8:df:53:4b:25:5c:6b:c4:dc:91:8c:
                    3f:4c:d9:6f:52:2d:f5:41:81:12:31:80:b3:dd:88:
                    1e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:84:8A:DB:3D:6D:1A:46:89:52:37:83:95:97:6F:E0:7F:07:0A
            X509v3 Authority Key Identifier:
                keyid:62:59:5E:D9:71:A5:BB:40:66:2F:B5:2F:1C:40:BD:D6:9B:1C:D1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wVZRjgwsh5oXeFx8byrsg7QJL7c6Qko8XQfQUeoJo94/1/62595ED971A5BB40662FB52F1C40BDD69B1CD1BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:10:d5:99:49:ac:bb:f2:86:2c:0a:95:f6:b4:c3:ca:ee:
         cb:ba:a8:d3:95:28:ad:c4:69:09:09:0d:0d:50:18:70:32:ca:
         26:47:64:ef:06:3d:7f:fb:63:fc:37:6d:6f:c2:77:49:0f:67:
         1e:21:d0:dc:96:3e:6c:bb:f8:4f:1b:5b:03:73:23:0f:01:ce:
         8d:74:cb:c9:af:c1:01:5a:2f:db:4c:af:6c:cf:a2:99:28:fc:
         54:4a:04:bd:24:0e:e6:4d:47:7f:2d:c1:7b:8f:6d:67:45:89:
         e3:00:29:62:e8:b6:0e:d5:fb:0e:e9:16:b3:e1:47:7c:50:a2:
         8b:69:ec:e3:05:01:c5:00:fa:2c:34:ab:f3:9e:eb:fb:f3:df:
         e7:31:8a:0f:d2:56:50:65:1d:a0:7f:3f:df:02:a0:f7:a2:a6:
         db:27:b8:e6:73:21:2b:33:78:1b:92:4c:b3:61:5b:a8:23:a1:
         00:5a:58:da:09:16:6b:de:99:0f:59:17:94:39:7a:e3:f8:aa:
         f5:d4:c3:e0:7a:b4:84:56:74:4a:fc:07:c8:9d:a8:ee:44:5b:
         05:ac:c6:c7:ff:53:e2:05:7e:91:87:cb:f6:b9:b4:ed:2d:82:
         84:79:d2:b4:49:f7:f2:e1:97:6b:b4:93:c6:35:2e:1e:c1:ad:
         10:3e:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:30:26 2025 by rpki-client