Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft
File:                     5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft (raw, json)
Hash identifier:          BqVuplWVGcZ8SY2m0anSU/puFt9ABLPw0cHGKc3FWUo=
Subject key identifier:   D0:22:25:9A:35:AE:AC:0D:AF:80:90:06:09:99:3D:F3:6E:27:01:8B
Authority key identifier: 5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA
Certificate issuer:       /CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA
Certificate serial:       6AB331D755F3E9DC21405101A43785134E78272F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft
Manifest number:          56
Signing time:             Fri 31 Jan 2025 02:49:25 +0000
Manifest this update:     Fri 31 Jan 2025 02:44:25 +0000
Manifest next update:     Sat 01 Feb 2025 06:48:25 +0000
Files and hashes:         1: 34352e37302e342e302f32332d3332203d3e20323637353537.roa (hash: hzk5pfVMKmSnXgCqrrAiLUBnOlh6sxuIzaAEK/dnhbc=)
                          2: 5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl (hash: xKMXBdTCoFkEF77XyWpzm0qj4OrWHkfVLms/X+QMSws=)
                          3: 323830343a343333633a3a2f33322d313238203d3e20323637353537.roa (hash: igHOZQrkWxwvNldBx/c85GMsgvPl1O5uxDTE8MWmIzo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b3:31:d7:55:f3:e9:dc:21:40:51:01:a4:37:85:13:4e:78:27:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA
        Validity
            Not Before: Jan 31 02:44:25 2025 GMT
            Not After : Feb  1 06:48:25 2025 GMT
        Subject: CN=D022259A35AEAC0DAF80900609993DF36E27018B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:22:d7:9f:5c:12:e3:8b:30:17:fb:c5:88:
                    f2:54:e6:9f:75:01:ef:7e:fb:57:c5:9e:10:73:e3:
                    f2:07:d9:97:42:f8:bc:5f:de:e7:f2:44:38:67:72:
                    ca:f8:be:4c:04:ca:79:c9:2f:8a:be:10:f5:81:07:
                    6b:e5:42:aa:89:ab:2d:df:dd:e8:d8:16:26:51:9d:
                    44:4f:a0:55:10:66:ae:11:72:0d:0e:fe:c5:b9:86:
                    fc:96:74:04:90:f2:f3:f1:0e:04:e5:4b:80:e5:9b:
                    ba:d1:ee:09:7f:38:06:ee:d4:a3:30:67:e8:0f:be:
                    60:c9:44:86:31:18:4f:ca:8f:65:b1:8b:21:bf:c2:
                    32:46:9a:37:91:91:2e:e5:d2:2b:02:c3:9a:78:96:
                    29:09:bd:7b:9c:91:ef:cd:46:da:ff:7d:8f:24:34:
                    a9:98:0b:c7:c8:cc:7c:30:86:76:74:37:1e:25:af:
                    19:a2:51:3f:15:72:5d:02:93:ae:9d:72:04:1e:12:
                    c7:50:ca:5c:b7:04:8f:cf:da:1e:96:50:fe:60:25:
                    30:71:38:18:0d:0f:49:de:d1:0f:51:69:32:91:27:
                    dd:00:3a:8b:d1:a1:a0:dd:a7:3a:3d:2d:bf:30:8f:
                    4a:04:56:61:a8:5a:62:7c:be:81:e9:f1:7b:b5:99:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:25:9A:35:AE:AC:0D:AF:80:90:06:09:99:3D:F3:6E:27:01:8B
            X509v3 Authority Key Identifier:
                keyid:5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:07:ff:61:6c:60:be:0d:5d:2c:27:de:21:55:f8:b3:74:b6:
         0a:23:ac:86:2c:3b:2d:07:5d:16:bc:16:a4:eb:f0:4f:4f:cf:
         d2:2b:d8:70:70:43:14:05:60:e5:34:8b:ac:3f:93:d1:4e:48:
         61:6a:16:3c:26:05:84:e8:59:33:6c:55:71:63:92:91:3f:c2:
         56:45:af:d8:92:9b:22:8b:3e:73:67:f4:e5:dc:45:20:5e:e2:
         e1:92:18:ba:4a:23:df:10:73:b4:2c:36:85:18:f2:ab:c7:0b:
         8c:ea:ee:71:c2:4d:d2:79:74:ba:04:b3:af:49:81:88:68:66:
         a9:b8:e9:bf:4b:e4:2b:c6:2e:cd:f0:9a:e2:68:16:cf:24:bf:
         ba:00:f3:07:db:77:b7:50:3a:ac:bc:2b:9b:71:64:40:e4:e5:
         c4:3e:e3:e4:ef:30:61:dc:c3:be:76:80:d3:d1:a1:ba:d3:4c:
         88:bf:8f:d7:d9:4a:e5:91:3c:07:1f:6c:38:5c:06:00:2a:b1:
         1f:bd:99:2f:70:13:31:9c:f2:69:c5:94:a5:a3:73:56:f7:7c:
         2e:ab:20:94:e7:57:cb:54:64:97:ca:41:dc:09:51:fa:d8:07:
         06:2a:e2:68:bf:0e:70:11:8a:6c:ea:b1:dd:b2:ef:6a:8f:fe:
         74:e2:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:20 2025 by rpki-client