Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
File:                     AA5A260F505713B62C4766443558AE922FFFC6F7.mft (raw, json)
Hash identifier:          lXCIxKoXissg/JnAjrB8We1gcjZDxvdwoqhdDu6gjow=
Subject key identifier:   D5:1F:9C:B0:2E:0C:E6:4B:6C:33:29:4F:3F:F1:EA:78:D3:CE:C1:7E
Authority key identifier: AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7
Certificate issuer:       /CN=AA5A260F505713B62C4766443558AE922FFFC6F7
Certificate serial:       3AD2C9F0ED334692568A1A8A00B13CFBF6E8C7AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 13:41:24 +0000
Manifest this update:     Fri 31 Jan 2025 13:36:24 +0000
Manifest next update:     Sat 01 Feb 2025 15:50:24 +0000
Files and hashes:         1: AA5A260F505713B62C4766443558AE922FFFC6F7.crl (hash: VBGm4De0+uLl1bCzsbPJNF/shCZ2UK0KbTevhxYOqBw=)
                          2: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: rfSyXYV1pqmdbWKWRsWbOG/iofhi7HbJdooqPu2NGmQ=)
                          3: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: clq+1f0RQP8y7NvEEj1/a5QwZohnXm09YpyXX18f1vk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d2:c9:f0:ed:33:46:92:56:8a:1a:8a:00:b1:3c:fb:f6:e8:c7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5A260F505713B62C4766443558AE922FFFC6F7
        Validity
            Not Before: Jan 31 13:36:24 2025 GMT
            Not After : Feb  1 15:50:24 2025 GMT
        Subject: CN=D51F9CB02E0CE64B6C33294F3FF1EA78D3CEC17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:75:bc:96:0c:2d:30:78:2b:e7:50:7d:f8:
                    66:2b:3a:35:77:b9:75:bf:ae:e1:2f:fa:7f:4b:97:
                    0b:7e:9e:a1:c2:11:22:f7:cd:05:6b:1d:18:4e:17:
                    3e:fe:68:15:52:ee:03:8e:3b:a0:59:65:1b:6d:2f:
                    bb:e9:48:d7:e5:98:44:fc:63:0f:b1:eb:46:31:5c:
                    13:dc:88:ee:15:b2:8b:a8:95:57:6a:09:4a:32:6a:
                    5f:5b:e0:c3:5f:12:84:71:7f:bd:3f:9c:e7:d3:a5:
                    bd:e9:bf:cd:12:73:3c:c5:3c:f6:77:d8:7a:67:49:
                    d4:61:17:f8:d8:09:13:a5:da:23:f8:f6:25:05:e4:
                    56:bc:67:88:a9:0a:f4:45:75:c6:6c:2d:ea:c9:99:
                    f2:94:45:f6:c5:77:f3:b0:90:73:76:ba:18:83:ea:
                    60:46:67:ab:0f:21:35:86:10:08:db:0d:1b:a8:43:
                    f0:73:6c:50:b8:96:10:c4:45:c1:8a:b8:c7:81:d3:
                    ca:b9:8f:da:90:dd:b1:0f:f1:88:d2:61:9a:1d:de:
                    88:25:3d:1f:bf:fd:6c:72:b1:8b:9e:53:a6:bf:db:
                    ec:38:0a:ac:26:06:1a:24:1a:be:59:e3:52:e5:ce:
                    b4:0c:20:ea:10:5e:ea:67:c0:83:88:dc:9a:02:46:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1F:9C:B0:2E:0C:E6:4B:6C:33:29:4F:3F:F1:EA:78:D3:CE:C1:7E
            X509v3 Authority Key Identifier:
                keyid:AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:a3:4f:5d:11:86:84:ec:df:ca:16:04:35:56:f2:fd:83:
         02:eb:da:be:71:6a:4e:64:2d:ac:6a:58:21:51:72:e7:a9:c3:
         e9:62:2a:2c:2c:6a:7e:d9:bc:c4:a5:52:db:3d:96:6c:4f:93:
         d2:54:d7:be:0c:5f:50:19:57:ee:4f:e4:a6:84:cf:51:47:b8:
         af:55:4f:c6:27:a1:c5:60:4a:e4:02:c7:b0:37:b9:ab:8f:5b:
         6a:8a:92:88:8b:e8:67:64:58:e0:7b:b3:5b:2b:e3:50:e1:db:
         d6:be:40:35:a5:4c:24:1a:23:26:b1:f9:ee:73:3d:f8:7b:71:
         67:2e:99:78:96:32:96:fa:84:6c:02:ca:c5:82:6c:82:2a:8f:
         8d:a4:6b:57:c6:6a:66:fc:5a:fb:68:a9:c4:22:93:64:a2:81:
         75:3c:15:6f:ba:d5:61:ce:fe:b2:1c:18:aa:ec:d3:54:20:85:
         f6:b0:12:4d:82:df:6f:bf:40:0d:a4:90:80:37:ff:92:49:52:
         cb:93:57:9a:d8:8b:0e:1e:ca:e8:92:f4:cb:33:9c:9e:f3:be:
         a3:d3:80:c7:c0:02:ae:c5:76:6c:00:fb:6f:a1:34:5c:7f:2d:
         78:a6:86:91:18:4e:7c:65:37:ff:9a:ba:5f:18:59:e5:2e:0d:
         d9:4b:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:07:37 2025 by rpki-client