Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
File:                     37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft (raw, json)
Hash identifier:          UUTHvkeOj8q2X29Lij8p8Gajk9DHw5kdr2drndHzYQA=
Subject key identifier:   12:02:5D:F6:79:2E:AE:E9:97:CB:0B:B5:E2:A2:2C:25:85:29:11:6B
Authority key identifier: 37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
Certificate issuer:       /CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
Certificate serial:       531743A3D42BA3679BE2B77239CCC99644B3838F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 17:35:39 +0000
Manifest this update:     Fri 31 Jan 2025 17:30:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:36:39 +0000
Files and hashes:         1: 323830343a353037383a3a2f33322d313238203d3e20323638333931.roa (hash: HraH7aNiKnLYTX2YpeMox2t7JVhMh+yTGeCLndw70ek=)
                          2: 37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.crl (hash: XhiLJ0PKhvKTtXiTHCGXmvAroIP7WgmREws0IQ98z7M=)
                          3: 34352e3136302e33362e302f32322d3332203d3e20323638333931.roa (hash: HQmm5wVus3yL/gV78GFu5+ylpgNEnZKTGv7VHgf8Uy0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:17:43:a3:d4:2b:a3:67:9b:e2:b7:72:39:cc:c9:96:44:b3:83:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
        Validity
            Not Before: Jan 31 17:30:39 2025 GMT
            Not After : Feb  1 18:36:39 2025 GMT
        Subject: CN=12025DF6792EAEE997CB0BB5E2A22C258529116B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:82:a9:5d:82:0c:b5:3a:ae:91:93:8d:27:
                    f6:85:0e:4d:a5:a3:c0:a2:52:0e:1d:c0:35:82:88:
                    a5:4f:dc:eb:dd:06:a1:4d:6a:74:99:01:e4:f3:e7:
                    af:37:f7:3d:2d:9c:9d:87:84:a0:5d:a6:d4:30:f8:
                    6f:73:66:77:31:fd:3c:99:4a:11:62:0c:a5:4f:c2:
                    6f:25:ac:cc:8d:a4:7c:af:43:42:db:21:5e:75:a3:
                    b9:4a:b0:01:45:1d:36:ee:6c:71:4e:92:77:c5:6e:
                    16:66:40:39:f0:56:e3:88:b9:81:3b:61:5e:cf:74:
                    b1:d6:b2:28:b7:13:45:53:e9:4e:36:bc:23:cc:35:
                    11:d7:26:48:8f:d9:b9:8f:88:3e:b8:ab:b8:91:21:
                    e9:7f:f9:bd:7b:50:38:02:d4:5e:05:ef:18:30:a9:
                    25:3b:41:a1:cf:4a:66:c7:c8:8a:1b:9d:3e:d5:90:
                    eb:59:53:9c:f8:1b:c5:b7:e9:dc:2d:59:77:e9:8e:
                    d0:51:f7:c8:dd:dc:6e:03:34:da:07:95:a7:1f:1e:
                    d9:fc:7d:5f:93:c4:40:e8:cd:ab:32:8e:a0:33:5e:
                    9f:b2:25:7c:e3:6d:bc:c5:68:35:12:96:90:30:06:
                    8b:ba:af:d5:3c:6a:c4:d3:26:29:0c:50:d7:3f:80:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:02:5D:F6:79:2E:AE:E9:97:CB:0B:B5:E2:A2:2C:25:85:29:11:6B
            X509v3 Authority Key Identifier:
                keyid:37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:de:d1:6f:ca:b9:30:1c:b5:7c:eb:d3:10:27:cb:dc:b7:89:
         1f:25:5f:d0:07:28:17:f3:e4:f8:b2:1f:29:b3:c4:fd:d8:e3:
         6e:d6:c9:a4:28:0d:8b:d1:26:0c:b9:61:8d:b6:0a:45:35:f4:
         64:74:d0:12:36:2c:56:42:fe:7e:d4:bc:9a:fd:59:f0:50:a4:
         f0:c0:8c:77:e9:2e:5f:ef:9f:e8:1d:f9:c9:91:4b:7d:b3:fc:
         fd:2c:bd:19:4f:76:7c:dd:47:1c:3f:2d:e6:1e:54:b1:71:e2:
         f9:e8:6c:b8:70:1d:f0:af:4d:d6:e5:09:4d:64:66:e6:da:36:
         64:fe:9c:9b:78:ca:a3:d8:34:e3:5a:ec:b2:2a:2d:df:fa:3a:
         9a:e6:ab:0d:3b:3f:dd:14:02:3a:d5:cd:7b:0d:8f:8f:f5:5b:
         42:ec:1c:c9:fd:ae:80:e2:d5:02:8e:5e:90:8c:3e:be:fd:f3:
         a7:0c:36:d9:3e:bf:a4:a6:11:fe:2f:b0:73:1a:fd:dc:88:54:
         e2:89:02:f9:c6:de:ff:31:32:b7:5b:fa:f5:18:e7:e9:d6:a2:
         a0:44:03:41:64:3e:13:7b:b5:e4:37:c0:dd:61:19:df:c3:a1:
         6f:99:72:1c:a6:2f:4c:45:32:63:b9:88:5d:40:15:be:fa:2b:
         3b:1c:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:44:41 2025 by rpki-client