Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.mft (raw, json)
Hash identifier:          4p6ZCJb/CicPCJP+2dc9rUiWv9f2JcxlIvf2d11USn0=
Subject key identifier:   FD:02:A4:97:56:B5:A3:3C:F5:66:94:E6:24:4D:97:D5:4E:C8:ED:C0
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       522EDA2547C47B311B90F204FE91194C47267EA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
Manifest number:          30
Signing time:             Fri 31 Jan 2025 14:23:16 +0000
Manifest this update:     Fri 31 Jan 2025 14:18:16 +0000
Manifest next update:     Sat 01 Feb 2025 14:47:16 +0000
Files and hashes:         1: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (hash: tRP99msVkW4x5i6Uy0O0k8TB+1CHSJFMroGWXc0LjX4=)
                          2: BFB590FA7A04C15A07E802593C4472D77FAB7820.crl (hash: hfKICMC7Fn2djFDD1pxgTP9dX9Oe7m77kE37AXqVCNA=)
                          3: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: hYhI8DrxJwx77ijyfRSEPiOMYTfIUK0ZFXqFZI1FTPU=)
                          4: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (hash: nLiE6yi8v2swM0N2WR++xc99oe2em4lVBJ/aphER4g0=)
                          5: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (hash: M8QdCmCZ2nO+QaOKL/SmyLoTX8bAHqo9M9egvScytuw=)
                          6: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: tsOYH76BfqT8mY4MadK531UC5ikBGOXeTaV5dqn1iMM=)
                          7: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (hash: o2AWkGLSZ5uTr9uUvc/qL3QyFADL0DLPLW60o2iQcfM=)
                          8: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (hash: TWk0qbr98hdZcik90dFhM/vWCOrd/lQB5+fTAQwFpUg=)
                          9: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (hash: skQOzkPTQZFZec1K7wXdytKDapP/Rl8ttG0KuDQZl8g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2e:da:25:47:c4:7b:31:1b:90:f2:04:fe:91:19:4c:47:26:7e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Jan 31 14:18:16 2025 GMT
            Not After : Feb  1 14:47:16 2025 GMT
        Subject: CN=FD02A49756B5A33CF56694E6244D97D54EC8EDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:81:c5:1b:42:fd:92:b1:35:18:33:b0:20:
                    4a:73:5d:f6:8f:5a:cd:7e:0a:62:3d:b4:43:e3:aa:
                    38:e2:25:70:83:cb:e3:be:c8:40:5e:ca:de:47:49:
                    50:4c:e6:5e:f5:bd:8a:af:ca:93:bb:a0:28:5f:86:
                    98:90:c9:55:a8:94:5f:89:14:ad:9c:81:79:6e:75:
                    2a:80:9a:84:e2:0c:ce:e8:db:2c:e7:0e:59:7f:c6:
                    5c:a1:42:55:50:44:17:0a:21:b1:0e:47:ef:6b:30:
                    c1:f9:be:44:c8:11:60:41:91:16:6f:73:b7:38:91:
                    99:b4:48:a2:1f:30:86:8c:7c:12:1e:0d:60:70:ab:
                    da:1c:4f:7e:ed:5f:c1:df:de:ba:9b:70:30:cd:d0:
                    25:c5:50:ac:e0:01:7d:76:57:fe:65:7e:16:e5:b1:
                    2a:03:b7:af:8a:38:14:74:81:31:d2:2b:5d:01:2e:
                    e1:af:bc:f2:83:88:3a:44:e0:23:b9:2f:84:79:eb:
                    78:d9:f8:d3:e7:fd:d6:ff:dd:e4:22:03:94:aa:9c:
                    f9:a5:39:fb:62:55:8e:c5:47:8c:b7:72:22:1b:f7:
                    2d:ce:98:c8:e5:8a:f7:50:7f:b1:c9:49:ae:fb:f1:
                    a1:ae:6d:e1:1f:5d:02:11:84:d1:17:30:f0:b7:f7:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:02:A4:97:56:B5:A3:3C:F5:66:94:E6:24:4D:97:D5:4E:C8:ED:C0
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:d3:9b:03:66:6d:e0:fa:da:05:17:37:8d:2c:e3:dc:09:
         a4:ba:3d:c7:80:b7:60:35:e4:19:9b:ac:f4:a3:3a:00:e9:2a:
         72:51:6e:af:40:a1:d1:57:42:3b:3f:69:2f:fd:6e:d7:a0:ec:
         40:0b:a4:91:f6:0f:98:ca:73:be:14:85:fc:88:80:dc:f7:1a:
         9b:97:a1:61:fa:76:0c:ea:63:e4:02:6d:56:2e:59:76:fd:98:
         96:61:f7:02:c3:c6:24:85:33:ae:d8:1e:fd:2c:0b:d3:5f:35:
         af:5d:70:91:7f:78:c3:54:66:3b:f6:e7:8a:30:64:9c:92:03:
         ef:a5:c4:8e:66:70:9a:ae:ef:51:20:af:15:6c:ed:56:a1:35:
         a0:7b:37:1c:63:2c:0c:8a:58:91:36:44:28:43:e7:07:7a:05:
         46:63:82:8f:08:43:1f:ed:12:9f:18:04:0a:5f:46:f8:9e:4d:
         00:a9:12:49:1f:dc:11:6f:9f:af:c3:6f:fb:a1:db:f1:cf:e9:
         3e:d2:72:1c:ff:fa:f2:f7:15:22:b2:54:00:a4:40:f7:41:25:
         ea:32:75:07:94:07:bf:10:dd:69:55:24:4f:19:96:27:09:52:
         af:6c:73:1d:b8:b5:3e:de:8b:99:54:4e:51:a0:9e:8d:43:31:
         fb:53:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:38:07 2025 by rpki-client