Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
File:                     F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft (raw, json)
Hash identifier:          X/3zr6RU5ZqFACIanpurf/x+wzLCq3WoEA9XQZec66E=
Subject key identifier:   90:1A:59:C7:36:B6:9E:93:4B:3C:D0:44:C7:72:09:A7:BE:7F:44:91
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       370E93CD57E7AC058E52CA1AB2B804AAD49D85AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
Manifest number:          0151
Signing time:             Fri 31 Jan 2025 08:51:30 +0000
Manifest this update:     Fri 31 Jan 2025 08:46:30 +0000
Manifest next update:     Sat 01 Feb 2025 12:50:30 +0000
Files and hashes:         1: F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl (hash: 49ZPkIRZRSB4WHwSaKyks+MAH4l8lz24DEW2P6cXV40=)
                          2: 323830343a346663383a3a2f33322d313238203d3e20323638333439.roa (hash: H0G6E+Oyk0nrg2pDokEEY576NnluN6/oiKBPPQyo4LY=)
                          3: 34352e3233392e342e302f32322d3332203d3e20323638333439.roa (hash: ifQgeiVZ9gvlOrdXWZoIzrjtiNZvnQ5/vtXHOrHuIUA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0e:93:cd:57:e7:ac:05:8e:52:ca:1a:b2:b8:04:aa:d4:9d:85:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: Jan 31 08:46:30 2025 GMT
            Not After : Feb  1 12:50:30 2025 GMT
        Subject: CN=901A59C736B69E934B3CD044C77209A7BE7F4491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:86:7c:e0:03:07:b6:57:bd:ec:8f:1a:ec:
                    f7:c8:fa:4d:d0:36:14:b4:f1:3d:e6:d0:32:b8:49:
                    96:7b:c0:f1:4e:8f:31:b3:b6:1d:be:6e:d1:b4:d3:
                    36:37:05:f6:1c:d6:c7:a9:a9:c2:b7:00:fb:97:87:
                    99:b5:45:a3:fd:fc:30:28:0f:2e:8b:dc:f7:84:fa:
                    fa:0f:c0:b4:03:1f:86:36:6b:41:4a:48:5e:a9:c4:
                    f7:b0:66:b1:45:ec:f1:7c:94:77:cc:04:01:de:11:
                    34:8e:94:80:8f:36:42:19:7d:8a:5e:5c:e8:e1:38:
                    5a:e7:9e:9d:de:2b:41:02:c0:9f:e7:5f:14:21:96:
                    15:05:fc:81:f3:a3:b3:04:4f:d0:a0:97:8e:6e:0e:
                    f6:46:6b:13:5b:e1:f7:d9:c8:c0:06:9f:b5:d4:5c:
                    e0:d5:e0:43:a2:6e:f6:ee:88:55:c1:38:23:84:80:
                    17:ac:b6:d2:b5:bc:91:8d:b4:ca:a9:e7:7d:42:72:
                    3a:56:a7:24:18:9d:38:87:0a:2c:39:77:c4:f1:c2:
                    18:53:32:f6:b5:eb:1e:9a:b0:95:12:00:8f:2e:c2:
                    63:d3:4f:9f:e8:08:f9:21:a7:7a:ec:aa:05:54:ba:
                    4c:ce:3c:8e:57:c4:34:3b:da:ed:af:a3:31:bf:ea:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:59:C7:36:B6:9E:93:4B:3C:D0:44:C7:72:09:A7:BE:7F:44:91
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b1:b6:64:3b:f0:23:01:ee:76:a5:d4:04:09:1d:67:57:70:
         e6:11:4e:d7:7e:d1:f1:e6:bc:eb:62:56:37:d8:42:02:55:b2:
         81:2f:80:3e:37:0d:c2:00:8a:86:39:d0:dd:1e:2c:eb:ed:50:
         31:6b:b7:c7:ca:9e:da:11:e3:60:aa:63:a9:8a:07:13:d8:d5:
         24:18:81:5d:6b:7c:aa:f3:31:5f:5f:4b:9e:4c:de:de:1b:6f:
         84:12:12:5f:bb:e0:19:c9:4f:e7:fe:a3:e9:f6:f5:7d:c4:70:
         d2:84:c7:db:45:42:70:e0:99:d1:8b:f3:8a:f5:d5:70:44:92:
         72:c2:f6:00:86:90:b3:ff:57:13:09:76:e0:f5:e3:49:40:34:
         9f:75:66:1c:8b:68:4f:3d:ab:e9:11:33:3f:8d:ad:49:5e:57:
         be:e8:a7:26:f3:1d:db:7d:7d:79:86:b6:8b:a3:b7:be:6d:e7:
         d0:c8:f6:8e:06:b9:00:0b:8c:58:60:ac:90:f2:13:52:66:0a:
         6d:06:1f:25:d4:c1:d0:9a:94:7a:9e:a6:d0:75:68:86:db:13:
         08:03:c6:2f:a3:43:ee:60:77:d1:9e:19:ae:17:ed:02:97:ab:
         be:ca:36:31:11:35:c7:53:d5:2b:ed:a0:6d:5d:41:de:a5:49:
         bc:77:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:57 2025 by rpki-client