Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
File:                     A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft (raw, json)
Hash identifier:          gpuMoVxwBH3q3VmkUEX0o0kcEQRpdCtQ5F9KuFhOAfU=
Subject key identifier:   19:FF:4C:33:1B:1D:8E:EB:9E:2C:C3:CB:45:69:62:E6:39:82:F3:38
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       07A855238AFAE9FA1A86C0A9F0DCAB0A2A6F1363
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
Manifest number:          01C8
Signing time:             Fri 31 Jan 2025 11:00:00 +0000
Manifest this update:     Fri 31 Jan 2025 10:55:00 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:00 +0000
Files and hashes:         1: 34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (hash: 1p8EYIUrg4rYFRbHXIdsfQKXkG04K2ajGR3ibC7Yrbw=)
                          2: A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl (hash: hZU0POLvlqOqdAHcR0g/fMaasEXjDIaQ2ThvrPKFfJw=)
                          3: 34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (hash: 3uxnDUUud752OAZCXRygyf9u1Tq2+GSlwY3et1slej8=)
                          4: 34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (hash: nXi8OoHMPpyFB+67hPFkFTlFGufuJoFfSDpD5UuOY2M=)
                          5: 34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (hash: cXW4ZIThqJ99BalAPUrMqV09s/zQPg4v7SKH+rBPY8s=)
                          6: 323830343a343566383a3a2f33322d3332203d3e20323636393538.roa (hash: 8rGsVOYQkCbDD20iYN2cIfFq3izHbW6jD6f2MbSdKek=)
                          7: 34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (hash: sfxzbw10ksmYRVMNZz/D6uJGWOkKMOPNhlMmKnyJIiI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a8:55:23:8a:fa:e9:fa:1a:86:c0:a9:f0:dc:ab:0a:2a:6f:13:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Jan 31 10:55:00 2025 GMT
            Not After : Feb  1 11:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c7:35:a5:24:7e:e1:90:d8:ef:fd:4f:2c:9d:
                    63:a7:61:f8:1c:4f:00:84:e2:88:01:f8:b0:ca:18:
                    11:91:f7:f3:95:74:70:0b:85:62:0c:8e:15:9c:2d:
                    41:85:f0:bc:ff:6e:de:cd:7b:d1:ee:7e:16:71:96:
                    2d:bd:d3:c7:dc:ee:95:06:13:48:a2:29:92:0d:2b:
                    2b:0e:9b:7a:07:39:34:d7:9c:37:6a:36:cc:7f:8c:
                    ba:e9:d7:17:8a:04:f2:ab:7f:5a:39:7f:55:cd:08:
                    9d:db:fc:9d:69:01:e3:bb:40:c4:91:c1:0a:06:5d:
                    95:c3:45:2c:9f:c0:a4:30:46:db:0f:df:f6:ee:c1:
                    39:4f:2f:b4:17:aa:09:ea:26:d2:41:7f:6e:b0:2e:
                    c7:41:a3:f1:05:2e:a6:35:e1:e6:6f:cb:ac:56:8c:
                    71:09:7e:0e:19:b3:02:27:f5:7a:0d:60:ab:a4:64:
                    9f:fc:23:94:66:f4:8e:14:29:8e:14:86:9c:7f:9f:
                    6d:37:5e:32:56:25:3b:fb:33:2c:45:a5:09:47:91:
                    82:34:4b:ce:0c:bd:0c:39:b0:10:7a:df:48:ed:67:
                    ac:c9:6a:49:37:0f:0b:31:94:cc:c2:39:28:49:7e:
                    80:69:c8:c1:d5:c3:a3:cc:50:85:50:1c:38:c5:c8:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FF:4C:33:1B:1D:8E:EB:9E:2C:C3:CB:45:69:62:E6:39:82:F3:38
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:e3:63:9c:cf:20:b8:a8:3a:23:1e:ea:dd:7b:0d:eb:96:
         c4:fe:9a:85:06:05:72:a5:be:b2:c1:ce:65:c6:ff:1d:bb:67:
         49:d2:3c:0c:00:0d:d5:be:31:1d:0a:4b:79:ae:be:fb:a1:95:
         5f:2f:62:75:a9:63:94:fe:a4:31:23:08:52:b8:d7:83:fd:35:
         fc:af:e5:7a:3d:cc:b4:a9:5f:9b:39:fb:2d:7d:96:bb:68:d1:
         1d:bd:42:2b:1f:d6:1b:e5:5e:dd:fc:fe:eb:62:3a:cf:85:44:
         15:ba:45:d6:f7:dc:34:fd:10:41:4d:62:ce:d0:a3:f9:5e:27:
         ab:dd:7a:ce:bc:8f:7f:3c:bd:b6:2d:b8:37:f0:aa:1f:a3:c5:
         20:70:05:8e:37:04:6d:50:b5:ea:ca:9f:0a:5f:5a:df:76:74:
         d7:92:e1:3d:1a:1d:e6:06:49:56:9b:9a:55:6d:3e:e4:47:0d:
         d4:8a:5d:25:3f:0d:9d:d7:af:a6:ed:e1:88:87:06:07:70:6b:
         ac:33:91:46:e7:81:90:0c:f3:17:0c:21:3d:da:d3:af:42:0f:
         3a:0e:b0:ec:13:5a:7d:d5:f7:71:9f:30:b8:f9:c3:b0:ee:91:
         e4:1b:b5:9d:65:5e:44:3b:69:97:86:49:4f:e8:4d:03:7f:74:
         d4:56:18:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:05:51 2025 by rpki-client