Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft
File:                     C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft (raw, json)
Hash identifier:          ZqZzN3F1lFCUwPTT8uzdoQThUP09ZEOtG0+DhSllnUs=
Subject key identifier:   C6:91:1D:F3:C3:4F:53:12:43:7B:AC:9E:D4:01:59:44:29:34:33:F8
Authority key identifier: C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C
Certificate issuer:       /CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
Certificate serial:       06B1D0A51DDEF2539A7F67056766E335B0E454B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft
Manifest number:          0106
Signing time:             Fri 31 Jan 2025 14:29:06 +0000
Manifest this update:     Fri 31 Jan 2025 14:24:06 +0000
Manifest next update:     Sat 01 Feb 2025 16:01:06 +0000
Files and hashes:         1: C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl (hash: eyHDPba3eX5KB4EelkTcAN2n6/a7IZkb2lQz+f/FMFE=)
                          2: 34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa (hash: EGUdSkeeW4oruSKdkUVwum+eVtEYgxKcLl7bgd9Gdrc=)
                          3: 323830343a363665383a3a2f33322d3334203d3e20323639353930.roa (hash: zRsSjm6zts/In3m7e0OGLniMA1IhliRdI1XgVBHyRJ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b1:d0:a5:1d:de:f2:53:9a:7f:67:05:67:66:e3:35:b0:e4:54:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
        Validity
            Not Before: Jan 31 14:24:06 2025 GMT
            Not After : Feb  1 16:01:06 2025 GMT
        Subject: CN=C6911DF3C34F5312437BAC9ED4015944293433F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:b2:1a:81:71:df:78:82:9b:96:0c:05:9b:
                    95:ba:2f:f7:fc:86:48:bd:bb:3f:73:f3:c9:7a:9a:
                    f3:a6:7d:69:3e:b2:b6:aa:71:2e:36:47:70:b0:09:
                    d6:f6:d0:07:18:49:d4:2c:eb:5a:bc:ab:40:1b:a1:
                    a3:95:b7:0b:07:95:79:e9:aa:a1:65:06:53:9f:d5:
                    d2:85:b0:37:43:51:7f:b9:d5:e2:cd:98:0a:2b:4a:
                    63:72:7b:47:61:3e:59:3a:dd:09:25:b6:95:3b:ac:
                    bd:4e:f2:01:6e:fb:19:b7:a5:38:2e:3b:e5:b8:20:
                    8f:2f:4e:70:ff:ba:fc:76:b2:d1:f1:b4:63:d7:e5:
                    e8:de:49:9b:a9:b3:c5:58:65:22:71:8c:dd:77:b5:
                    4f:42:c3:3e:97:3a:4c:c9:25:b7:5f:67:4b:44:a3:
                    57:2d:a7:5e:24:8d:08:67:c1:37:7e:28:a8:e6:5a:
                    61:3e:9c:93:65:3a:14:0a:83:8d:1e:44:8a:68:17:
                    53:24:e2:30:0b:1c:64:7c:fe:31:0c:cf:fa:fa:6a:
                    03:f3:4c:6a:25:00:f3:39:81:b7:2d:01:02:86:c6:
                    fa:8f:92:fb:2c:9e:92:4c:3a:36:46:07:f0:75:38:
                    64:d4:85:98:96:0f:69:ef:6c:f8:ce:15:6d:44:d1:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:91:1D:F3:C3:4F:53:12:43:7B:AC:9E:D4:01:59:44:29:34:33:F8
            X509v3 Authority Key Identifier:
                keyid:C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:c7:d1:d2:13:56:f4:0a:88:6d:1d:d3:4c:4a:53:ec:e0:
         17:27:23:cb:7f:20:f2:55:d7:2c:61:11:55:39:98:52:1c:83:
         c8:64:4d:01:f7:63:59:b7:91:ee:ea:a7:a6:45:b6:e8:4c:1b:
         1b:9f:6f:2e:fc:e1:22:63:0a:9b:4d:27:51:c1:59:4c:84:bb:
         9c:17:88:1c:1d:a6:5f:ac:9f:91:49:f3:82:1e:5e:15:92:b1:
         cd:fc:ae:61:85:25:75:c6:2b:dd:c8:17:75:00:c0:0b:52:15:
         85:2d:ac:a1:fb:24:8a:cf:f3:07:8c:3b:56:d4:07:b9:7c:f7:
         3a:58:10:5c:11:6f:bf:3f:65:67:c9:29:20:47:85:4e:d7:84:
         9c:fa:94:7a:05:0c:63:c6:c0:12:5e:dd:c7:a7:d1:ad:b1:ac:
         d0:aa:dd:bd:d9:11:b0:b2:79:49:49:9e:46:fb:34:bc:66:d3:
         d5:16:cb:ea:bc:d8:e8:14:f9:e1:3a:d6:ed:79:d2:49:34:be:
         e8:8c:11:6f:cb:0f:cd:98:90:fb:9b:97:82:a2:96:79:5d:36:
         e8:a8:69:ab:46:a3:e8:df:e4:88:b2:8e:ab:cf:a2:f5:9e:7d:
         c8:bf:0e:c9:83:88:ff:00:90:86:bc:3e:6f:af:22:d7:81:cb:
         bd:8e:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:15 2025 by rpki-client