Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
File:                     4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft (raw, json)
Hash identifier:          iZ0FZ58hu7lL3cW+Zxipj1EMYCEiI6GRFkaA+lK9pmg=
Subject key identifier:   2E:CE:28:9D:95:F1:4A:6B:A4:4F:D6:F3:7C:5F:E9:66:C8:E7:DD:0F
Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
Certificate issuer:       /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Certificate serial:       2DF3B2909F517E9AB3E11B06A3CE7EF47BD9E585
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 14:15:24 +0000
Manifest this update:     Fri 31 Jan 2025 14:10:24 +0000
Manifest next update:     Sat 01 Feb 2025 14:59:24 +0000
Files and hashes:         1: 4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl (hash: gW7MCbF8ed20ySqdgINO8df/73x1mkl/oz8L/Fp8mOA=)
                          2: 3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa (hash: 9Z6QhBrAwSh8fWhzdOFZoMoTMEjrj84oWnaIjsmM0mg=)
                          3: 3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa (hash: fIRHU9fX32iIKqFX92bBTGOBMn7bRahLT2dvyy32/WE=)
                          4: 323830343a6636303a3a2f33322d3438203d3e20323633353832.roa (hash: xR+Le7We2PRB5X9e6ZWYjljKGd1tF3OmLj/TxM3xDac=)
                          5: 3137392e3130392e38302e302f32312d3234203d3e20323633353832.roa (hash: o7lQKdSAJq4xEUMaQeGtSpOfHZl3qT9Fz0dtFbxcSl8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f3:b2:90:9f:51:7e:9a:b3:e1:1b:06:a3:ce:7e:f4:7b:d9:e5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
        Validity
            Not Before: Jan 31 14:10:24 2025 GMT
            Not After : Feb  1 14:59:24 2025 GMT
        Subject: CN=2ECE289D95F14A6BA44FD6F37C5FE966C8E7DD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:c7:7c:8e:36:81:51:5c:57:68:12:53:fe:
                    1f:51:05:a4:ae:f1:2f:de:2a:9f:3d:7f:71:b3:cc:
                    9d:95:a6:f4:10:7a:50:6f:b5:7b:96:2e:a3:73:b9:
                    5d:41:68:b1:07:2a:69:13:2b:3e:80:30:a8:ec:fa:
                    e5:55:70:9a:fd:31:86:a7:16:32:c5:7d:11:97:71:
                    c6:80:6f:d9:79:df:0a:31:a8:89:fc:3a:c3:ab:6b:
                    d4:8e:d0:1f:2f:ba:30:57:26:a3:16:64:e7:43:ef:
                    99:7e:03:44:1e:f9:af:5e:37:41:9d:43:ea:e6:84:
                    02:64:64:b3:9b:3b:17:29:df:10:ed:55:cd:a2:79:
                    c5:da:a5:b0:c4:af:b0:4d:04:70:e6:96:0b:5a:e0:
                    7f:71:3d:e4:7d:76:6d:f9:ea:c5:fe:6a:c4:2d:e2:
                    30:c6:6e:fa:8b:25:f2:80:7a:46:93:f0:4e:3e:b1:
                    b9:73:55:65:69:cc:4a:0a:73:1d:b8:77:5e:d1:09:
                    5c:01:c4:37:35:24:71:5b:a7:d9:ea:bf:1d:c1:c9:
                    32:66:c4:d8:23:48:7f:74:81:b4:70:9b:2c:21:28:
                    01:3b:0a:14:ef:99:7b:06:fc:07:75:4c:59:95:09:
                    1f:29:71:0f:d2:ae:b6:1b:7b:1a:75:d2:49:e2:cf:
                    5c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:28:9D:95:F1:4A:6B:A4:4F:D6:F3:7C:5F:E9:66:C8:E7:DD:0F
            X509v3 Authority Key Identifier:
                keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6f:53:d9:a7:34:45:89:16:7d:d7:de:fe:ad:20:bc:07:36:
         08:8c:55:a9:dd:30:8c:3a:b0:4e:c2:83:19:30:82:93:04:58:
         6c:d6:c6:52:72:5a:b3:bd:17:00:cd:81:ef:65:82:d4:f0:2e:
         ed:e3:58:9f:58:91:f1:51:96:56:fc:24:ff:4c:f8:9e:de:62:
         b5:ae:f1:ef:35:d2:13:fe:48:6a:ca:fb:71:9b:0e:47:06:2d:
         74:90:0a:21:90:e4:00:ed:5c:c5:13:84:ed:1f:cf:9d:84:48:
         84:ea:c8:a2:52:a8:e3:a2:fa:3a:74:8b:5d:1e:3e:11:38:9b:
         99:65:14:e4:55:bd:3f:22:be:a8:47:6a:70:6e:b6:6b:19:56:
         9b:71:97:e6:e7:fa:fc:a3:94:10:8b:b3:41:f3:9c:ef:c9:6f:
         15:d8:91:47:e9:15:86:c6:7f:67:a4:8f:44:64:69:6b:50:9a:
         ff:c8:23:92:73:df:ee:91:6b:fb:f6:de:27:5a:18:39:a5:8c:
         49:e5:63:d0:31:3d:d2:1d:f5:f0:e4:bc:95:2d:c5:12:68:48:
         f5:76:fb:05:9a:b8:53:ee:7f:ae:9c:2d:d3:69:fc:08:b6:09:
         1e:9f:0f:db:15:1e:e3:f5:ad:e4:1a:d6:7a:ec:84:f2:8f:2b:
         8c:93:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:38 2025 by rpki-client