Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft
File:                     502D57718548660D155175A249B0597C56E1D390.mft (raw, json)
Hash identifier:          2f+wWYucFTx5Z3FMGGyZBDZ4+9cNk/1vKFomx7hH/XA=
Subject key identifier:   77:73:1A:40:20:0B:F3:66:CD:1A:7D:62:7B:D7:57:B3:FF:76:25:43
Authority key identifier: 50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90
Certificate issuer:       /CN=502D57718548660D155175A249B0597C56E1D390
Certificate serial:       3030CE7C82D82BED3832FAD6FAA0E38E50DBFE8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502D57718548660D155175A249B0597C56E1D390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft
Manifest number:          25
Signing time:             Fri 31 Jan 2025 16:49:17 +0000
Manifest this update:     Fri 31 Jan 2025 16:44:17 +0000
Manifest next update:     Sat 01 Feb 2025 18:48:17 +0000
Files and hashes:         1: 323830343a333339303a3a2f33322d313238203d3e20323635343034.roa (hash: 2uQ5+LaOkoRWYWsJbv8N+61d31ijLIMWqkPF1el7zRo=)
                          2: 502D57718548660D155175A249B0597C56E1D390.crl (hash: 358Hl8h8FV9vWxNQcZFmnD7JJPgTChHLT1X0t80ZV1o=)
                          3: 3136382e3139342e3132382e302f32322d3234203d3e20323635343034.roa (hash: MpSUAEuosZsDHKLJxaP8SCr4OX2wtQSTZZ6zatS0ZNA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:30:ce:7c:82:d8:2b:ed:38:32:fa:d6:fa:a0:e3:8e:50:db:fe:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502D57718548660D155175A249B0597C56E1D390
        Validity
            Not Before: Jan 31 16:44:17 2025 GMT
            Not After : Feb  1 18:48:17 2025 GMT
        Subject: CN=77731A40200BF366CD1A7D627BD757B3FF762543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:4f:d3:d2:d0:ef:b0:ad:86:6f:a3:5a:e3:
                    50:c4:e0:e7:7d:9a:c6:04:e8:11:97:19:5f:79:40:
                    70:31:6c:46:c3:2b:f1:d1:1c:e9:77:aa:62:2e:47:
                    ad:c3:c1:7a:34:06:92:bb:1a:01:0d:31:4b:06:c4:
                    09:f7:5a:80:ea:56:4d:99:1c:a4:97:25:a1:c4:bb:
                    a1:ea:20:f7:45:71:06:af:80:86:61:32:29:0f:08:
                    9c:1e:7a:b3:02:30:9f:04:48:73:66:c9:db:a4:a4:
                    fb:0e:e7:1c:4c:f1:4e:81:3f:ed:c3:d8:ad:01:39:
                    2b:2f:7e:fe:f1:59:90:6e:e0:8c:6c:1d:b3:5f:20:
                    e4:9e:6d:0a:95:f3:29:f5:da:a4:51:92:24:a7:a0:
                    4f:88:ce:18:4c:8a:7a:4f:cc:5e:45:46:17:dc:ee:
                    d4:a8:72:88:03:1b:50:3a:c8:ed:fd:44:e6:fc:c7:
                    75:9a:f9:d9:cb:cf:0e:b0:45:24:df:bb:62:68:82:
                    a3:28:71:75:f4:5d:9e:b4:b2:ac:b1:4f:c2:35:ad:
                    c9:86:f5:8a:ee:0a:34:7c:5a:d9:3e:1a:0b:8c:82:
                    b5:ab:ed:c4:5c:67:87:b7:46:62:1f:8b:11:7f:ee:
                    20:6e:20:58:45:de:84:04:e2:f9:13:3c:2a:4b:a5:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:73:1A:40:20:0B:F3:66:CD:1A:7D:62:7B:D7:57:B3:FF:76:25:43
            X509v3 Authority Key Identifier:
                keyid:50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502D57718548660D155175A249B0597C56E1D390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6c:cf:2c:04:b7:c9:b9:a8:37:14:11:80:f3:93:60:79:f4:
         d6:0a:06:b0:09:7a:c8:60:9f:e5:e5:fe:b0:32:96:84:4b:81:
         06:9a:e0:39:7f:41:89:33:36:74:59:a0:30:2c:d2:8b:19:8a:
         8d:4f:c2:10:f1:a4:fe:71:f1:ed:a3:a6:a7:b0:4b:5e:cd:da:
         16:70:49:71:bd:50:98:5d:dc:d2:7d:48:b0:76:53:74:88:a5:
         48:e3:d8:96:be:74:a1:d0:45:79:4e:e4:a0:6c:7b:07:42:0f:
         da:9f:ce:ad:b7:53:1e:61:7a:23:c8:b4:04:b9:90:1c:a8:27:
         1b:e9:82:c0:03:64:0f:52:19:c5:17:6e:b4:03:af:ea:88:e2:
         55:0c:50:c1:ea:dd:fc:9b:b1:84:49:e2:e5:0e:be:d6:89:79:
         79:f8:bb:5a:05:30:51:69:13:6d:3d:79:af:92:3c:2f:9f:13:
         57:18:9b:71:06:04:28:11:cf:ee:e3:22:cf:16:f3:b3:eb:2a:
         92:8b:f8:17:9c:00:62:f6:64:2d:bc:6c:97:91:c9:8d:98:3a:
         c9:5a:c7:03:0e:d7:c6:0d:b2:15:52:99:11:be:f9:ca:85:31:
         c5:e2:62:f8:cc:49:a1:67:4e:7a:67:90:f1:4a:c0:79:06:43:
         6a:f4:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:03:12 2025 by rpki-client