Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
File:                     9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft (raw, json)
Hash identifier:          6rsCovuquInJ7Pw6jVae08loGg4IouMY/Uz5FYvrCA8=
Subject key identifier:   51:47:1F:B1:B3:1D:BC:FA:45:BC:5A:DC:D3:82:79:13:24:D3:1F:97
Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD
Certificate issuer:       /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
Certificate serial:       5DD55C0F7CF8211F030F61A34131175A23AB0CE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
Manifest number:          0192
Signing time:             Fri 31 Jan 2025 08:14:32 +0000
Manifest this update:     Fri 31 Jan 2025 08:09:32 +0000
Manifest next update:     Sat 01 Feb 2025 10:38:32 +0000
Files and hashes:         1: 323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (hash: aotSUuUhkkqdAKKY0yXQmcHNkA1SU1d5UCcJ60p+Pp4=)
                          2: 34352e362e3131322e302f32322d3234203d3e20323636313331.roa (hash: +2i+sXqS993y/ooJHivXhmUZPtCbM/0LymUM9rWgPUk=)
                          3: 9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl (hash: ZkVfkYtBqMQ1T+pgLyTWvQUNZW2BQ9hn8zbkQn+gYk8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d5:5c:0f:7c:f8:21:1f:03:0f:61:a3:41:31:17:5a:23:ab:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
        Validity
            Not Before: Jan 31 08:09:32 2025 GMT
            Not After : Feb  1 10:38:32 2025 GMT
        Subject: CN=51471FB1B31DBCFA45BC5ADCD382791324D31F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:88:75:bc:8e:d3:97:3c:77:fe:c2:3e:6d:1e:
                    1d:96:30:ec:e6:9c:09:d4:df:2f:a0:78:e9:09:93:
                    b2:c3:1b:a2:65:9a:62:57:4c:73:27:8d:c8:fa:c6:
                    64:3f:75:d5:e6:96:a1:02:15:11:df:84:ac:a4:ae:
                    60:c2:da:60:19:63:21:ce:81:92:bd:c7:97:c0:a2:
                    a0:6d:e1:04:a3:ad:57:49:02:76:26:36:0d:8c:d0:
                    2f:5e:fc:6d:5d:4b:56:71:95:60:6e:5f:ef:04:9b:
                    ea:cb:a5:61:4f:dd:1f:00:ba:1c:fd:c3:22:aa:db:
                    4d:1c:78:4b:94:9a:5c:bb:3a:c5:19:8f:ba:2f:8b:
                    9f:e5:5a:60:95:6f:e7:9f:07:99:aa:f7:27:1c:b9:
                    3b:f7:a0:59:bd:8e:aa:08:3b:bb:67:0d:20:cd:6b:
                    13:c8:86:2f:05:d9:42:8e:39:2d:b9:5f:7f:f1:c2:
                    52:b0:08:bd:d1:c0:be:b1:e4:92:89:79:3e:b8:d2:
                    e5:32:20:e9:59:bd:9a:96:99:20:33:b5:0a:f2:96:
                    b3:e8:5c:60:d0:e8:a6:2b:35:76:68:ad:35:69:55:
                    1e:41:a5:5b:cd:18:46:07:a5:5f:6a:a4:36:7d:34:
                    b6:e7:29:f6:8d:45:2c:3d:0a:ba:49:19:07:f5:65:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:47:1F:B1:B3:1D:BC:FA:45:BC:5A:DC:D3:82:79:13:24:D3:1F:97
            X509v3 Authority Key Identifier:
                keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:45:93:88:35:98:77:b7:c9:f1:71:bf:37:fb:cf:00:80:
         2f:a4:60:59:6f:45:6d:d9:c2:fc:a9:6e:7d:26:b9:97:f1:7c:
         64:fc:11:b9:db:13:e0:73:6c:d3:1f:c6:62:4f:ce:6c:0b:6d:
         52:ad:25:51:80:9e:bb:20:47:ed:e3:ff:ee:63:05:9c:15:0c:
         ac:6e:6c:db:40:bf:c3:a6:f8:b4:f7:d1:cc:ef:9a:48:d8:88:
         16:3e:32:92:e2:68:69:15:ae:a0:34:09:61:72:a9:03:3d:c9:
         75:37:08:9e:b0:c1:d7:14:94:d6:6f:5b:55:81:13:3d:f7:6f:
         dc:3f:30:27:47:af:5e:39:a6:fa:77:d2:aa:a4:d1:46:4e:55:
         3b:da:9f:e8:75:dc:70:bf:c2:27:b6:af:a7:d3:56:54:1e:d6:
         b8:16:eb:b9:76:97:3d:9c:e7:ba:d1:9d:ae:ce:53:eb:40:24:
         50:26:40:a3:e7:b8:c8:8d:c4:f2:23:16:09:ce:ca:1c:ca:b1:
         ec:b7:93:c1:52:89:4a:a0:3d:d8:c1:1c:a2:3b:a3:f3:de:f0:
         aa:cf:0d:60:6a:14:db:12:45:94:c9:ca:b5:10:b3:08:4d:ee:
         a0:53:90:6d:41:2c:a6:d3:0c:df:55:1e:14:1e:76:f2:89:15:
         da:93:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:58:30 2025 by rpki-client