Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.mft
File:                     449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.mft (raw, json)
Hash identifier:          c+gdbhbmwaLhG7PdlJcWs2ywcitlyIFIfyn7PrS3J9Q=
Subject key identifier:   EF:4B:EF:80:B7:4B:DD:31:3F:55:6D:D3:77:DC:23:22:E3:29:B2:80
Authority key identifier: 44:9A:71:EF:24:E1:56:9D:DA:85:DB:FA:A5:78:1F:7E:E3:8F:04:A4
Certificate issuer:       /CN=449A71EF24E1569DDA85DBFAA5781F7EE38F04A4
Certificate serial:       29CB3A5F2902B1D0F6A4B81BECD9682287BD8245
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 16:58:33 +0000
Manifest this update:     Fri 31 Jan 2025 16:53:33 +0000
Manifest next update:     Sat 01 Feb 2025 18:29:33 +0000
Files and hashes:         1: 323830343a326338343a3a2f33322d3336203d3e20323635323234.roa (hash: SC51+VOyRlqQN+qMVFAcDTHyxuhdJWdHcEnTD75PKFg=)
                          2: 449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.crl (hash: HOMM0maCLQISajK5iLSCKo+W5bCDsDnw0Xpa88V5caU=)
                          3: 3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa (hash: Q0dAk4he2a8KnkOwtL0i8gjYwZsaCiG2XLM6/thMlwY=)
                          4: 3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa (hash: 9/PLsHWAvOJlpDqFdIYjhYqQGF8agY64VbiGAYwHCP8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cb:3a:5f:29:02:b1:d0:f6:a4:b8:1b:ec:d9:68:22:87:bd:82:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449A71EF24E1569DDA85DBFAA5781F7EE38F04A4
        Validity
            Not Before: Jan 31 16:53:33 2025 GMT
            Not After : Feb  1 18:29:33 2025 GMT
        Subject: CN=EF4BEF80B74BDD313F556DD377DC2322E329B280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:25:2b:f1:b6:8c:ee:00:e5:c8:d9:07:87:
                    d9:70:2c:22:02:7e:42:88:40:db:e6:8e:e2:a6:30:
                    6b:3b:05:af:db:29:0f:be:16:bf:c5:67:67:eb:81:
                    9f:c5:04:4b:6a:81:c6:ef:e6:a9:74:99:d3:24:69:
                    d1:97:dc:bd:a0:02:69:85:16:26:d4:84:08:39:f3:
                    1c:0b:7a:57:ce:60:6e:9e:bc:85:23:50:71:25:f5:
                    bf:78:7a:e6:3b:87:99:3a:3f:03:b6:10:c2:b0:2f:
                    03:8f:88:4b:b7:92:dd:c0:dd:1a:73:49:58:92:6b:
                    b7:9d:da:37:61:90:8c:16:65:c3:15:0f:41:37:65:
                    5c:29:aa:d4:53:7d:98:de:3c:6a:29:5b:2c:0c:df:
                    cb:56:89:9b:15:a4:b7:f9:04:63:2e:cf:33:41:bc:
                    31:08:1f:17:80:1a:f2:4b:fb:ca:32:96:69:3c:de:
                    5b:35:c8:23:dd:06:61:ef:c5:ce:28:56:e3:b3:01:
                    1f:f7:cd:1a:ef:c4:27:ab:a8:cb:09:f6:b7:44:63:
                    eb:67:39:9d:53:4a:8e:3c:b0:b1:d6:ee:f5:bc:76:
                    9d:6e:0a:0a:44:f3:58:18:34:be:0c:2c:54:fe:46:
                    99:82:7e:9b:a9:4b:84:5f:73:99:fb:43:7e:d0:53:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:EF:80:B7:4B:DD:31:3F:55:6D:D3:77:DC:23:22:E3:29:B2:80
            X509v3 Authority Key Identifier:
                keyid:44:9A:71:EF:24:E1:56:9D:DA:85:DB:FA:A5:78:1F:7E:E3:8F:04:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/1/449A71EF24E1569DDA85DBFAA5781F7EE38F04A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:27:6f:e1:fb:ac:ca:07:11:b1:19:a4:93:2b:a4:43:b2:ee:
         99:1e:d9:8a:a2:9b:a4:08:6d:61:03:12:c8:3f:fe:2e:48:21:
         79:dc:55:c9:41:bd:5a:34:4e:f4:df:71:92:0c:46:13:fd:e4:
         cf:8b:8c:09:0e:fa:7b:dd:8c:19:7d:78:91:9b:f6:7f:8d:fe:
         64:e3:99:3d:bc:0f:cc:26:f7:c1:b4:49:9d:5d:8a:52:6c:5d:
         7f:2b:a5:04:a8:c4:f8:2e:25:da:9d:e7:9b:0c:48:d1:c3:02:
         88:a9:74:49:75:e3:7c:f2:56:89:57:9e:2c:31:05:bf:5b:44:
         f9:8b:71:55:a6:ad:c4:ec:43:c6:de:bf:4e:36:1a:89:a4:1f:
         45:3c:7b:be:21:f4:49:5a:29:1b:92:b1:a6:0d:a2:39:ba:8c:
         8a:16:37:fb:e5:b5:19:de:e4:46:08:13:09:30:45:b7:0a:3c:
         9c:79:0e:ac:e9:7f:89:46:a4:66:28:70:9d:8b:db:3e:c4:0a:
         cd:47:07:8c:3d:ba:69:94:4d:51:6a:4b:fe:58:bf:a6:38:2a:
         a2:2e:38:aa:db:e5:74:51:ec:34:b2:7b:64:65:c8:d8:3c:b2:
         19:a3:55:30:93:af:ec:9d:41:e4:32:31:d5:1b:b0:c8:6c:8c:
         ba:b4:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:26 2025 by rpki-client