Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.mft
File:                     53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.mft (raw, json)
Hash identifier:          sGYFDWMKeFQcA03vxziNdhVwAh8D+miyYvH374/RG3I=
Subject key identifier:   46:5A:A4:13:4D:39:53:FD:D0:0F:18:27:3B:37:27:82:1C:A5:AD:14
Authority key identifier: 53:C6:B1:16:4D:F9:B5:BD:D6:7C:3C:D4:64:EC:ED:88:4B:C0:FB:B1
Certificate issuer:       /CN=53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1
Certificate serial:       07170D5BF021D4D5006589DB06C3DC7F13C4EE78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.mft
Manifest number:          FD
Signing time:             Fri 31 Jan 2025 14:23:59 +0000
Manifest this update:     Fri 31 Jan 2025 14:18:59 +0000
Manifest next update:     Sat 01 Feb 2025 16:16:59 +0000
Files and hashes:         1: 34352e3233342e37322e302f32322d3234203d3e20323637333634.roa (hash: v3mpLcsP/3Z6qFbH2ycSBBnEv9I9kwQQIW5f5JEBO/I=)
                          2: 53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.crl (hash: W9OYGk6BNdwAfna1Au7Hss6A4GUd2ilpD1qrzqQpqFo=)
                          3: 323830343a346335343a3a2f33322d3438203d3e20323637333634.roa (hash: UMdgdIcaJYvtWCPhmOaQL+d/3vJ055kDexgYORvqjWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:17:0d:5b:f0:21:d4:d5:00:65:89:db:06:c3:dc:7f:13:c4:ee:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1
        Validity
            Not Before: Jan 31 14:18:59 2025 GMT
            Not After : Feb  1 16:16:59 2025 GMT
        Subject: CN=465AA4134D3953FDD00F18273B3727821CA5AD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:87:81:de:f6:38:b1:dc:cc:66:88:17:00:
                    9a:54:c6:33:25:e7:56:99:10:f9:4b:72:67:84:ef:
                    a0:3b:28:5d:92:81:ec:e2:ff:69:89:40:2d:51:ad:
                    a2:cd:f1:81:e1:12:22:40:80:7f:00:d3:97:cf:50:
                    50:8d:9e:6d:43:f6:ec:93:a8:8c:39:82:69:b8:f1:
                    f0:82:69:b7:97:f6:5e:1f:7c:11:f6:16:64:73:bc:
                    cc:40:d8:f8:4b:67:29:12:c6:24:91:3e:f7:18:b1:
                    fd:86:d8:51:d7:13:b2:5d:b8:8d:a7:7f:3e:b4:92:
                    cf:b9:96:18:a7:c5:d1:89:e7:d9:88:e9:db:5a:af:
                    91:7d:fb:82:c9:0e:1e:e7:9e:cd:f3:f4:ca:94:91:
                    96:48:ab:91:34:5d:26:6d:d8:c7:02:60:18:44:12:
                    7d:26:0b:14:2f:9b:55:60:93:90:32:76:cb:2a:63:
                    12:e2:a5:f7:5f:be:54:0e:19:14:84:c2:bc:01:3d:
                    c4:4a:88:ef:f2:21:35:7f:01:6f:f2:ba:b6:6a:3a:
                    f6:5e:fd:6a:8d:48:9e:13:d1:ce:26:74:1c:6c:93:
                    47:84:7d:f6:c4:47:65:9f:8a:23:05:d3:6c:9f:18:
                    e4:b5:d4:3d:16:9e:47:cd:2e:27:1a:62:ea:d0:5c:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:A4:13:4D:39:53:FD:D0:0F:18:27:3B:37:27:82:1C:A5:AD:14
            X509v3 Authority Key Identifier:
                keyid:53:C6:B1:16:4D:F9:B5:BD:D6:7C:3C:D4:64:EC:ED:88:4B:C0:FB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:56:22:33:8b:70:d0:b9:66:e3:44:00:5e:41:4a:74:14:
         ab:ec:01:8e:bb:ff:1c:13:b4:0e:9c:f8:72:f4:22:64:25:d3:
         77:32:5f:a6:9b:81:41:ee:0d:0c:d6:0a:68:36:45:22:a7:fc:
         79:52:a7:e4:cc:31:c9:10:eb:2e:20:74:41:e3:66:b7:37:a2:
         8d:51:bc:31:8c:6c:2e:94:13:d2:6d:8f:25:c9:f8:2a:5e:25:
         b0:f8:85:59:c1:0e:53:67:01:48:28:e4:6d:85:14:21:cc:8d:
         27:31:ad:f9:91:1e:d9:29:ce:d0:37:b8:57:18:28:02:82:ca:
         28:59:70:c8:3e:7b:89:36:d4:e5:d5:7c:a6:65:b7:a6:af:6e:
         83:a8:91:94:03:9d:88:11:33:05:65:ef:8c:74:1c:e3:fb:ab:
         1e:1f:49:46:2c:0c:6e:14:d0:30:33:e1:f4:c5:44:74:7d:fc:
         97:5f:43:b8:da:e5:c5:fd:f8:7a:44:8d:b0:f2:02:13:91:92:
         d3:53:93:d2:a3:16:b7:1d:fe:2d:fc:90:d4:8a:e1:2a:cf:7d:
         7e:ab:de:d8:42:98:2c:bf:12:90:f7:7b:0c:f5:90:42:95:67:
         a5:e5:38:4c:2b:c7:1d:fb:82:25:21:c5:9b:df:a1:6d:2a:aa:
         19:11:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:16:17 2025 by rpki-client