Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.mft
File:                     59B49535D97161F361B9B3FAA9E46A49BA2387C0.mft (raw, json)
Hash identifier:          Z1eEO+7PhVYWd4rI2/VNQQkqrjx5a0eEGV5ee14Nb/M=
Subject key identifier:   DE:1D:F8:D3:BA:70:85:01:07:D7:7E:91:45:AA:CF:29:E1:3C:2C:F0
Authority key identifier: 59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0
Certificate issuer:       /CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
Certificate serial:       3DBE00CA234E42047FAE7B275402B59D2D0D57DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 14:30:00 +0000
Manifest this update:     Fri 31 Jan 2025 14:25:00 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:00 +0000
Files and hashes:         1: 3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa (hash: 8n5/euVRweGIU2PSlfIBF6uXg0jgNeQ/6A7Wa1zs94s=)
                          2: 59B49535D97161F361B9B3FAA9E46A49BA2387C0.crl (hash: 5grUfKf4aQ8DEoYbWmxbHZouShRXxaaTALvKR8HJm+s=)
                          3: 323830343a333436383a3a2f33322d3438203d3e20323635343535.roa (hash: LEQ+631lvH1py5IrB5Ny3Y3GBda2TS7UlaOORd/C2as=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:be:00:ca:23:4e:42:04:7f:ae:7b:27:54:02:b5:9d:2d:0d:57:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B49535D97161F361B9B3FAA9E46A49BA2387C0
        Validity
            Not Before: Jan 31 14:25:00 2025 GMT
            Not After : Feb  1 16:00:00 2025 GMT
        Subject: CN=DE1DF8D3BA70850107D77E9145AACF29E13C2CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:68:4e:ff:d9:ff:ff:57:9f:88:88:12:b0:
                    7c:30:09:dc:36:49:13:eb:0b:d0:77:43:fd:df:81:
                    f3:f0:ba:b5:48:5a:e0:10:61:81:96:8e:4b:02:50:
                    9d:7c:e7:9c:85:fe:6b:cb:d0:46:44:88:7e:30:08:
                    e6:71:51:aa:6d:4d:6a:4d:e9:ac:15:fd:7f:82:92:
                    ab:25:23:80:25:7b:ac:98:23:58:dd:79:73:7e:35:
                    60:78:64:09:32:f8:6b:b6:c9:63:92:18:96:f7:ab:
                    c4:01:69:44:21:0a:70:32:1a:84:7d:29:b9:de:e8:
                    c7:52:b4:a2:5e:ea:e7:48:6d:b9:43:54:93:bd:f5:
                    22:a6:54:ed:7c:8c:1d:13:52:64:33:88:91:8a:fe:
                    97:26:49:a8:f8:4b:28:e7:a7:d6:3b:25:58:62:ce:
                    71:2f:dc:ef:ca:42:aa:0e:d8:cf:68:0a:61:d6:70:
                    d6:4d:59:77:aa:8d:e5:b2:63:c9:79:99:fd:5b:25:
                    6d:c2:fa:11:07:34:ea:a3:98:d2:64:2f:d8:d1:c9:
                    28:d0:d0:58:a6:96:6e:7f:15:9e:7b:a7:6c:89:d0:
                    97:58:fd:ad:18:bc:a2:74:1c:4c:d6:75:15:5d:c8:
                    2a:68:31:c1:98:a6:23:c2:07:6d:8a:3a:11:43:74:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1D:F8:D3:BA:70:85:01:07:D7:7E:91:45:AA:CF:29:E1:3C:2C:F0
            X509v3 Authority Key Identifier:
                keyid:59:B4:95:35:D9:71:61:F3:61:B9:B3:FA:A9:E4:6A:49:BA:23:87:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/1/59B49535D97161F361B9B3FAA9E46A49BA2387C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:57:9c:be:6f:fa:a3:74:22:7f:fa:86:e3:2d:19:57:b4:
         59:9b:79:07:c8:46:60:c5:31:08:f2:d2:e3:44:36:75:57:6b:
         2f:92:8e:23:10:e7:7e:7b:62:3e:df:8e:00:d0:d7:a3:3f:39:
         4a:5f:ed:85:12:99:a5:e7:4e:21:fd:88:93:58:cc:b7:82:68:
         03:5f:17:86:23:9c:c6:e8:e3:8a:a4:2d:ca:4d:8c:5a:bc:15:
         d1:6e:88:55:93:88:78:29:ac:40:13:a8:10:63:75:5d:66:a5:
         3b:a2:88:a9:27:4a:03:1f:54:59:79:52:88:eb:2f:37:40:4c:
         04:fd:6c:7e:27:7c:c0:f3:fc:45:cc:22:e6:e4:5e:b9:4c:ff:
         ef:ca:0b:2c:97:ab:ab:14:c2:f9:a9:f3:64:1e:65:e3:76:f0:
         af:45:d0:f3:35:ba:47:ac:9e:c9:91:40:35:a6:27:07:f0:52:
         b0:31:1a:a7:5f:1f:90:50:a9:ff:3c:76:c0:9c:04:df:47:3a:
         12:82:67:39:c5:01:5a:45:e0:c4:ac:7b:65:23:af:95:bf:05:
         87:77:e5:29:a7:e1:3f:df:79:63:b5:3e:de:a1:ee:ec:45:02:
         a1:01:66:9a:2a:9b:46:47:4d:e4:82:dd:87:1f:34:c8:86:4a:
         9e:d9:98:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----