Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
File:                     4ABC2853483C8D55A291610B3C655D5FD053740E.mft (raw, json)
Hash identifier:          HbnZx9n523Rm1c0z3RdR3cFdItVTLSJplsjJeceqA2k=
Subject key identifier:   7A:12:41:AE:23:4F:99:FB:4C:8F:C3:7F:8A:D6:EE:C0:1B:63:A0:37
Authority key identifier: 4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
Certificate issuer:       /CN=4ABC2853483C8D55A291610B3C655D5FD053740E
Certificate serial:       3474465AD9CB87A51A9B1AAB0FED8515AB8E4C87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 00:54:32 +0000
Manifest this update:     Fri 31 Jan 2025 00:49:32 +0000
Manifest next update:     Sat 01 Feb 2025 03:03:32 +0000
Files and hashes:         1: 4ABC2853483C8D55A291610B3C655D5FD053740E.crl (hash: JBRUNXvxLZUM/4Vdx62yVSKqZAyURpJyGCZmy+7QbyU=)
                          2: 323830343a376332303a3a2f33322d3334203d3e20323731343737.roa (hash: KsM5DjA+LPpqSG18AKMERsHSuFRnigrcfmdp7/4Y/Sg=)
                          3: 3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa (hash: 1LDXv0zBhcADxYmwHZeK8ERsIuED0HuQvyOfe+AVLKQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:74:46:5a:d9:cb:87:a5:1a:9b:1a:ab:0f:ed:85:15:ab:8e:4c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ABC2853483C8D55A291610B3C655D5FD053740E
        Validity
            Not Before: Jan 31 00:49:32 2025 GMT
            Not After : Feb  1 03:03:32 2025 GMT
        Subject: CN=7A1241AE234F99FB4C8FC37F8AD6EEC01B63A037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:09:fc:3e:0d:bd:dc:c0:12:ae:fe:cc:83:d9:
                    16:1a:09:ca:99:67:31:e1:2e:f6:0a:29:ca:35:d3:
                    c8:28:eb:f8:81:23:1d:8d:e1:c8:ab:22:7d:67:24:
                    0e:d6:42:98:df:6b:fc:cc:fa:ca:be:98:8c:bf:d3:
                    b3:aa:02:ff:8e:ad:05:f9:e4:76:6a:85:86:fb:a8:
                    c0:af:6d:91:54:5e:10:59:a7:cb:67:3a:57:4d:21:
                    21:08:ae:55:c8:be:39:7a:68:47:23:ee:45:88:ae:
                    31:56:6d:f9:0f:98:2b:00:55:e3:2c:89:1a:93:f5:
                    4b:1f:51:9e:a5:fa:59:18:cb:7f:a5:f7:7b:e7:14:
                    8f:42:d4:44:2d:5d:56:2b:63:4d:a9:7b:5e:26:4d:
                    b6:42:5c:71:58:42:98:ef:c8:4a:3a:5e:e7:ce:a4:
                    55:54:ef:f1:8b:9d:b7:28:7c:f0:ba:cd:23:75:d6:
                    22:e3:9d:83:02:1d:12:4c:09:4f:f6:e2:f4:4b:8b:
                    14:e2:61:73:ee:d6:1c:eb:63:b3:6a:ea:e7:47:e2:
                    6e:28:58:b1:9d:d2:05:d1:a2:a6:55:5c:8c:ca:6b:
                    97:7b:7c:2d:a8:21:8a:50:89:22:da:3e:9f:b5:ae:
                    fd:b6:fa:6e:d5:4a:69:c4:3f:cd:b6:2d:b8:b3:42:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:12:41:AE:23:4F:99:FB:4C:8F:C3:7F:8A:D6:EE:C0:1B:63:A0:37
            X509v3 Authority Key Identifier:
                keyid:4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:34:cc:81:4f:9f:3a:e7:0d:e5:e6:68:54:05:76:3c:71:9d:
         16:da:77:97:73:30:5a:fd:f1:00:31:3d:6d:02:f4:40:b7:5e:
         cc:76:eb:ee:02:a5:4f:32:67:88:68:2f:d9:f9:c7:1d:b4:60:
         91:2e:62:c0:5d:e9:bd:02:49:ce:bd:95:1b:b9:8f:b2:09:04:
         ae:8c:5e:51:92:0c:92:2d:69:42:cc:9b:27:a3:97:f2:2a:95:
         86:00:53:62:68:3c:19:d9:c5:45:36:03:d9:ef:d7:19:8e:bb:
         bb:d1:17:e0:67:6b:47:e0:c2:f1:8d:c3:61:75:85:8f:47:87:
         cc:12:58:d0:44:7b:f4:43:4b:6a:e7:68:db:9e:68:db:3c:67:
         de:64:f0:25:1c:d2:f3:44:68:11:86:36:85:97:e6:aa:40:20:
         bd:43:d7:a3:88:07:03:b1:82:2c:5d:2c:1a:71:3d:59:40:da:
         c8:78:e2:f3:ed:ae:6d:a1:40:07:dc:df:a3:af:c0:97:cb:21:
         a8:05:28:d3:72:e2:c9:d3:ee:a0:5b:1e:5f:71:ed:d9:ed:23:
         e1:5d:42:3d:df:e5:50:b2:e3:38:6e:cf:02:d8:4d:a9:6e:c3:
         44:ea:0a:da:54:c1:3c:63:95:21:e5:9a:ad:b1:76:51:42:cd:
         fa:9f:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:35 2025 by rpki-client