Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
File:                     32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft (raw, json)
Hash identifier:          H/VBvTBaTH+JcS35l4wz3Fxe4S1oAiH9A6KvN8ho9hs=
Subject key identifier:   F2:1C:13:D4:14:79:D1:0C:69:FF:19:AD:62:F9:AE:CC:29:91:8F:CD
Authority key identifier: 32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Certificate issuer:       /CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Certificate serial:       5D7854C370CD6F9C1D92C0B5C348F156C4E312E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
Manifest number:          02
Signing time:             Fri 31 Jan 2025 12:34:36 +0000
Manifest this update:     Fri 31 Jan 2025 12:29:36 +0000
Manifest next update:     Sat 01 Feb 2025 12:58:36 +0000
Files and hashes:         1: 323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa (hash: oJN1Mm0+oVZUvetgFQB7RM79SeEDZgUk1cdKVVd5CIc=)
                          2: 32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl (hash: RunhM51DGQMy7bpgev5T10iQaVOqYJihSkqtX/YjLuU=)
                          3: 323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa (hash: rouJnIWoIFYaP7KwULszsMkxxfCXvzh00FR5d7b8ZrU=)
                          4: 323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa (hash: hM7RiTy/3XICUGtb8UBMEuHjxIlIoL2zo6wNbX8QPhs=)
                          5: 323830343a383333303a3a2f33342d3334203d3e20323732313832.roa (hash: OKBGqrUMOXnEbxRXfJOKCpZwVNDbPaV3RhaqWhTf/JA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:78:54:c3:70:cd:6f:9c:1d:92:c0:b5:c3:48:f1:56:c4:e3:12:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
        Validity
            Not Before: Jan 31 12:29:36 2025 GMT
            Not After : Feb  1 12:58:36 2025 GMT
        Subject: CN=F21C13D41479D10C69FF19AD62F9AECC29918FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:c0:e1:78:b2:63:c2:1f:69:41:01:6d:9a:
                    d6:5c:1d:32:d8:dd:b5:5a:5f:6b:e8:6d:87:15:2e:
                    49:38:fe:7f:3a:ed:01:d3:1a:e6:ba:1f:1a:cf:f0:
                    44:14:12:bd:e8:56:a4:5f:30:ab:0b:fb:93:59:5c:
                    09:70:aa:82:b6:ed:70:87:f4:64:5f:64:bc:a2:02:
                    c8:d9:00:c2:82:ec:78:d5:12:5e:c7:02:56:16:ea:
                    4e:31:8f:fb:04:54:5a:9c:00:3e:4e:74:98:3c:49:
                    4d:42:43:a0:8d:3f:9e:cb:fa:54:50:aa:b8:a5:b3:
                    a6:05:90:54:c8:56:06:96:26:ea:51:3b:da:c2:a2:
                    de:e8:00:93:f0:92:42:2f:46:9e:22:17:87:c9:48:
                    96:22:6b:22:ea:6f:50:03:f0:3d:19:58:d3:70:69:
                    da:b4:94:8c:2e:45:31:d2:e1:1c:6f:14:aa:ad:f0:
                    17:33:6c:e4:5c:12:8b:b1:40:8c:c6:55:09:41:8c:
                    99:f6:70:81:96:4b:8d:44:13:1f:ce:de:d0:d4:c3:
                    eb:78:9a:85:0d:09:d7:e0:57:62:7d:7e:fa:f3:e0:
                    47:ea:7b:a8:c1:92:40:08:0e:19:6f:b0:f2:82:af:
                    96:1a:aa:01:93:8a:8a:4d:87:68:19:c6:e7:06:fe:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:13:D4:14:79:D1:0C:69:FF:19:AD:62:F9:AE:CC:29:91:8F:CD
            X509v3 Authority Key Identifier:
                keyid:32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fd:be:f4:3e:6c:25:9c:38:9a:ac:03:e6:4d:71:61:92:d0:
         77:0a:d3:e3:0a:23:63:ca:63:03:c0:37:88:8f:9d:74:6f:44:
         bb:04:3b:47:bf:d1:85:d7:69:a6:ec:39:13:41:40:78:fd:9b:
         39:72:4e:7e:39:fe:64:07:a7:f8:21:39:6b:40:bc:f0:f7:3b:
         b8:d6:e9:20:92:06:9d:fc:b8:ea:19:cb:80:20:88:51:a0:35:
         4d:24:39:20:56:7c:30:49:75:a3:cb:29:bf:79:88:2d:f2:88:
         c4:28:54:fd:e7:6a:0f:5f:c6:7a:d2:04:9d:13:d1:9f:74:7b:
         23:37:39:b4:03:a7:5f:d7:9e:6a:5f:b5:e5:8e:95:75:dd:ea:
         fc:2f:98:53:44:a4:ae:7e:9f:41:67:0c:c9:f8:a6:02:4f:99:
         3f:05:23:b3:27:7b:2f:9d:aa:52:02:b7:ec:ad:78:3b:75:6d:
         be:de:54:3a:cd:db:65:e3:1a:a0:7a:5a:dd:63:e2:52:6e:ce:
         5b:38:ca:92:27:88:38:52:a8:8c:e7:4f:2c:2f:1d:0c:81:4e:
         4a:79:6c:6b:10:b8:20:91:7c:96:13:bb:55:70:81:12:34:48:
         92:ef:aa:b1:26:73:ca:06:d0:1e:09:4f:b9:1a:38:f7:1a:2e:
         67:d3:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:19:07 2025 by rpki-client