Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.mft
File:                     111ABB8582160E8251812CE601483CCFD4E7252F.mft (raw, json)
Hash identifier:          xwG/k1aCTAaSbAgESOGzy4MKQ50nw1QCzv8qm2VywRo=
Subject key identifier:   88:BD:F5:EE:49:D4:26:95:9D:2C:98:EE:E3:EE:C5:07:3C:FE:E4:A1
Authority key identifier: 11:1A:BB:85:82:16:0E:82:51:81:2C:E6:01:48:3C:CF:D4:E7:25:2F
Certificate issuer:       /CN=111ABB8582160E8251812CE601483CCFD4E7252F
Certificate serial:       7A65A86DDB21142AE0AB087F5769C9D831B824D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111ABB8582160E8251812CE601483CCFD4E7252F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.mft
Manifest number:          0189
Signing time:             Fri 31 Jan 2025 01:04:10 +0000
Manifest this update:     Fri 31 Jan 2025 00:59:10 +0000
Manifest next update:     Sat 01 Feb 2025 04:28:10 +0000
Files and hashes:         1: 34352e3138322e3235322e302f32322d3332203d3e20323639323438.roa (hash: q0D11YdtXea5c7p870DwrMwomm3saoeEesVQ+OeRqGk=)
                          2: 111ABB8582160E8251812CE601483CCFD4E7252F.crl (hash: VlvUcqbHYSIsHWBdy7e9pRTHLXE2qnpOmmcfCUrqmY4=)
                          3: 323830343a363161383a3a2f33322d313238203d3e20323639323438.roa (hash: E8rjueNW79V9SN/j2ONJv31j36nQJnhCXLZlfZUzmPM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:65:a8:6d:db:21:14:2a:e0:ab:08:7f:57:69:c9:d8:31:b8:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111ABB8582160E8251812CE601483CCFD4E7252F
        Validity
            Not Before: Jan 31 00:59:10 2025 GMT
            Not After : Feb  1 04:28:10 2025 GMT
        Subject: CN=88BDF5EE49D426959D2C98EEE3EEC5073CFEE4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:d8:c9:f9:1a:89:ea:7c:db:ce:cd:20:50:
                    ea:ad:46:2c:44:07:3e:14:63:eb:24:ab:00:2a:1a:
                    2e:2b:59:4e:a6:d5:53:b2:1f:6f:11:3f:5a:9a:d5:
                    26:88:22:8f:6c:12:5e:7d:de:9b:be:38:00:12:f0:
                    48:65:d2:0a:54:ae:a1:ee:e0:bb:86:66:8c:bd:fe:
                    9e:3f:a8:76:bc:f4:92:7e:06:92:61:85:aa:9a:d1:
                    f7:61:46:52:13:b2:8d:bc:34:fd:5c:79:fd:97:1e:
                    6c:71:b8:41:7c:63:41:75:fb:6b:12:77:49:42:51:
                    63:1e:e9:3b:00:88:89:84:1a:43:87:8b:89:67:f0:
                    bb:c7:10:ac:d8:35:92:8e:11:1c:f2:7c:69:ad:6a:
                    68:6f:6a:fe:00:24:d2:07:6e:c8:1f:c4:ab:21:ed:
                    00:c5:44:9b:be:76:49:d6:f9:42:10:0f:e2:57:c7:
                    07:87:e0:4a:0d:6d:78:6f:8f:4b:35:2b:66:93:53:
                    90:40:fb:a3:87:b6:07:99:9e:f2:70:e7:28:f6:25:
                    3f:55:bc:5b:57:64:3b:c8:10:b1:7d:a5:3a:f2:7a:
                    3a:02:5b:3c:4f:08:a0:c3:e2:14:57:d6:eb:13:83:
                    39:12:3f:7b:15:94:27:66:7a:89:a6:53:8e:02:a2:
                    ee:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:F5:EE:49:D4:26:95:9D:2C:98:EE:E3:EE:C5:07:3C:FE:E4:A1
            X509v3 Authority Key Identifier:
                keyid:11:1A:BB:85:82:16:0E:82:51:81:2C:E6:01:48:3C:CF:D4:E7:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111ABB8582160E8251812CE601483CCFD4E7252F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:67:bf:90:7e:dd:aa:d0:a1:e0:b8:b8:7b:8e:c9:0d:7f:
         84:d7:10:9a:50:20:a3:34:73:1b:0d:2c:92:c1:89:d2:73:03:
         43:26:6b:26:a1:74:0f:5e:51:e3:7b:16:6a:30:04:04:2b:66:
         7a:0f:2d:c0:ce:6d:31:f5:7d:25:0b:91:41:c5:16:47:c4:a1:
         44:86:6c:7d:70:44:90:94:fb:0e:23:d2:f7:73:82:e7:6c:3e:
         99:ce:67:24:f4:a8:1b:d2:59:32:9e:7d:eb:eb:e5:37:9c:d5:
         89:5d:69:20:06:54:70:14:98:1a:0f:ad:34:48:a6:a6:9a:7f:
         1e:18:cd:de:b5:22:2a:77:92:26:f2:ff:f8:02:28:56:6a:ee:
         85:5f:6f:8d:81:a2:87:00:b4:27:1a:89:db:7e:99:98:aa:55:
         91:5b:b6:4e:d0:65:2b:44:e5:31:f5:14:c3:70:29:e0:54:00:
         c0:a2:00:3d:7e:08:0c:ab:e7:f5:76:ae:bb:f4:09:1b:72:f1:
         dd:7b:dd:23:65:3d:2a:0e:9a:f1:27:7d:96:26:b5:b1:4e:36:
         38:8c:ac:7b:66:39:ae:27:12:94:7c:69:24:62:d3:63:37:c3:
         a4:00:e1:2d:0c:12:69:1d:68:75:b8:be:3f:40:18:3b:67:e3:
         f4:3e:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:22:55 2025 by rpki-client