Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
File:                     4AB66EE372C17AF7E98850BE54F8A77444900F94.mft (raw, json)
Hash identifier:          gcuU6jtQW5z7oXDM+fb0FVdtaO7A1bZSDexqiOHUYSI=
Subject key identifier:   2D:E2:A9:30:43:BC:C5:36:24:99:72:3A:AF:C3:9E:8F:1C:20:B7:C2
Authority key identifier: 4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
Certificate issuer:       /CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Certificate serial:       7327AA6A283BAF431B707545014F39BE4A98DA0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft
Manifest number:          0159
Signing time:             Fri 31 Jan 2025 18:18:49 +0000
Manifest this update:     Fri 31 Jan 2025 18:13:49 +0000
Manifest next update:     Sat 01 Feb 2025 20:22:49 +0000
Files and hashes:         1: 3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa (hash: 7elPngKyEAhGV190pnoqE6UrOH+vNllvq5yLcMXSS3g=)
                          2: 3133312e3139362e35312e302f32342d3234203d3e20323635383934.roa (hash: GjoaDEyEmd1q5bBz3tzQqsd8JmOropd7/gc0QbqKGP0=)
                          3: 4AB66EE372C17AF7E98850BE54F8A77444900F94.crl (hash: BVoGYzJIekvSja6ruWKeEPe3kq46eVpFH6e/SdW2RTU=)
                          4: 3133312e3139362e34382e302f32322d3232203d3e20323635383934.roa (hash: P9bYz9vwMiW25Q5vx+LQHLWj5CYAB5F/Hc1lXuKFpPw=)
                          5: 323830343a336637383a3a2f33322d3334203d3e20323635383934.roa (hash: L35ZBUpJee7y0an8UOVvVEFYhh9tw1griW5lXEx673Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:27:aa:6a:28:3b:af:43:1b:70:75:45:01:4f:39:be:4a:98:da:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
        Validity
            Not Before: Jan 31 18:13:49 2025 GMT
            Not After : Feb  1 20:22:49 2025 GMT
        Subject: CN=2DE2A93043BCC5362499723AAFC39E8F1C20B7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:86:88:d6:a1:60:5b:2f:3d:ea:cf:a8:5e:
                    99:ec:32:0b:00:d7:44:b3:4f:5f:85:a3:ed:96:37:
                    0e:95:5a:32:e3:50:2a:60:b8:21:c4:63:d0:b3:fd:
                    ac:b1:4b:10:5e:b6:40:80:27:5a:14:a2:18:97:2a:
                    4d:cb:84:5f:e6:ed:4c:e8:52:e2:ef:86:fe:63:67:
                    1d:77:c9:a6:e5:a7:23:6a:47:2a:df:d7:b8:ad:b2:
                    e4:55:2c:bb:e7:e1:fd:7a:42:76:ee:8d:66:af:f1:
                    e5:eb:aa:81:12:ad:8c:18:4c:33:37:24:90:2e:cb:
                    a1:64:37:22:fe:59:50:18:2b:4e:36:64:d7:dc:93:
                    97:45:5e:e8:6d:96:14:55:6d:e3:48:1b:2b:dc:f9:
                    a5:be:53:b1:c2:c7:da:85:8a:73:20:79:7f:eb:3a:
                    87:0b:8e:98:4b:49:c9:ee:22:54:3a:54:87:a4:15:
                    fe:35:5c:ec:72:87:6a:ea:ca:4f:f4:1a:ac:04:00:
                    7c:73:a7:68:e4:b4:53:53:61:12:fe:36:c1:5d:6a:
                    4e:aa:64:7c:e6:bd:41:8b:3e:16:06:4e:93:7e:79:
                    ef:5b:96:7a:1f:50:93:5e:bb:10:8f:90:a8:ae:e9:
                    a7:37:3f:5d:d2:c8:1b:0e:df:79:99:3f:c0:f0:ff:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E2:A9:30:43:BC:C5:36:24:99:72:3A:AF:C3:9E:8F:1C:20:B7:C2
            X509v3 Authority Key Identifier:
                keyid:4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:98:38:1c:48:c1:94:93:9f:ce:4e:f0:86:df:0b:f6:af:
         41:fc:aa:66:8f:ae:a5:3b:ad:07:36:15:d7:dc:75:32:d2:50:
         a8:2f:6d:22:8f:fd:09:e9:32:34:47:bc:6b:28:dc:87:0f:2d:
         c3:ff:a1:5e:1d:7e:fc:0a:bb:b6:c8:2f:c8:85:08:2c:bd:26:
         65:1d:34:d8:1f:59:83:52:2e:03:21:36:a1:23:1c:a7:03:34:
         08:f2:7b:3d:43:f2:08:50:0e:14:7f:6f:2e:56:4e:a6:f3:18:
         a8:32:45:d0:7c:d6:3c:82:a0:aa:38:77:21:07:7b:88:d4:4f:
         5c:6b:cd:bd:0c:a8:52:d9:20:97:51:f2:02:a0:3c:59:d8:a4:
         e2:c9:03:80:51:60:a2:a3:3c:c2:44:60:79:3f:66:22:50:9f:
         e6:21:0e:42:f2:43:eb:30:de:b7:cb:22:ac:53:9b:65:24:59:
         f7:72:3e:94:44:f7:5f:21:66:73:53:94:4c:b4:85:ad:c4:e5:
         39:93:cf:f4:d3:90:1b:bc:b1:e1:6f:37:1d:84:06:be:68:a2:
         54:40:a0:76:b1:b2:38:b2:61:d0:15:89:ab:8c:8e:39:24:e9:
         02:5a:a0:66:51:ca:3f:27:83:57:16:1c:88:b0:15:ab:73:6c:
         8e:1e:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:18 2025 by rpki-client