Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
File:                     AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json)
Hash identifier:          aEy0cE0cUBOHXhZcKJw0dgcuJSd1dsz09zsOnzvWGuw=
Subject key identifier:   A8:9E:34:1C:C9:BE:95:35:2A:92:35:BA:51:B5:49:B4:A5:FA:4D:E5
Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
Certificate issuer:       /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Certificate serial:       625DE6B5BABDD30BD6B079707617908E6B6031B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 18:40:01 +0000
Manifest this update:     Fri 31 Jan 2025 18:35:01 +0000
Manifest next update:     Sat 01 Feb 2025 21:05:01 +0000
Files and hashes:         1: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: LYC7+z17tckvkl0sdj3D63Z4j5C1tJEVIPs2xZciOlk=)
                          2: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: 8lemx9M9G5d1eucSo5LqjKEd9fm8zaIvtbK0iBKMLLw=)
                          3: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: FhXs6owyMCPK+pKyYWeV+ZMD56wtHneHBN0BVLBhBDc=)
                          4: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: LPMK5ebksY/QJ1KjD1+/I37Z1JfzcirYBsFXclfnJIE=)
                          5: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: MpqkeR00QEkmxWkmp6YHHqBPxjQWu8R8My9i3sBpqs0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5d:e6:b5:ba:bd:d3:0b:d6:b0:79:70:76:17:90:8e:6b:60:31:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
        Validity
            Not Before: Jan 31 18:35:01 2025 GMT
            Not After : Feb  1 21:05:01 2025 GMT
        Subject: CN=A89E341CC9BE95352A9235BA51B549B4A5FA4DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:7d:d0:0f:6e:a0:28:0c:fe:33:b5:4c:f5:
                    95:f9:3b:97:3f:27:b7:8e:29:ac:d9:b5:3c:e7:ac:
                    34:74:8f:6b:ad:32:3c:48:d4:63:47:6c:dc:21:3c:
                    70:d0:f5:9b:ea:b5:d4:c0:16:10:e4:a4:ce:70:e0:
                    0b:0b:29:2f:96:60:5f:f1:a1:f6:c8:4f:71:af:02:
                    7e:6d:d8:be:69:b0:32:72:dd:a4:ba:33:74:21:d4:
                    ae:f2:f5:14:33:b1:f2:da:26:e0:99:b3:f4:e5:f1:
                    03:0e:3d:73:be:a0:7a:62:0e:55:e9:13:3a:77:af:
                    fa:60:43:48:eb:c1:0c:84:b5:ad:25:48:f1:90:d2:
                    12:b0:3d:b0:ad:6b:fd:cb:b3:38:e4:0e:2f:fd:8e:
                    93:ca:52:f4:88:89:34:b3:72:f0:9a:62:bd:e4:91:
                    0d:94:95:78:ce:18:89:ec:3d:2d:2f:cd:d6:c9:94:
                    fb:36:7d:7e:64:3f:11:da:66:08:ba:8c:8b:3e:59:
                    f4:72:18:17:d2:9c:06:38:82:03:1b:ff:fe:1e:bf:
                    ee:be:56:45:10:e8:92:d9:23:3d:1e:0e:81:19:a2:
                    c4:b5:a3:6a:0e:f9:27:e8:5c:5d:8d:6a:20:f0:14:
                    8d:bf:57:4f:7f:23:89:52:84:5a:4f:11:bf:fa:6d:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9E:34:1C:C9:BE:95:35:2A:92:35:BA:51:B5:49:B4:A5:FA:4D:E5
            X509v3 Authority Key Identifier:
                keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:f3:49:d6:32:76:5e:1c:16:b3:d2:a7:01:d8:b3:67:62:
         64:7b:7e:e8:bc:44:46:4c:e3:1c:f2:78:8e:aa:47:c6:1d:fa:
         f2:89:7a:67:ab:a9:1d:15:0a:aa:61:c3:3d:32:dc:62:b1:4c:
         ee:ba:42:61:4d:a2:ee:ae:85:b7:01:7d:09:8c:eb:ac:53:4b:
         8f:11:5e:9e:d8:87:e9:65:59:19:f5:a2:56:c9:6f:bb:41:3a:
         1f:56:f0:d7:88:50:23:ee:cc:3f:80:5a:69:a8:60:a4:67:04:
         53:84:e7:c4:05:28:f3:5c:d7:b6:3d:f2:5d:5b:31:c0:71:9a:
         9c:89:a4:6b:81:30:5e:46:ee:37:0e:c4:e2:19:0c:d9:6d:5c:
         4d:6c:4e:67:92:7b:d8:40:1d:3d:89:77:18:3a:2d:f3:21:a6:
         a7:98:0d:5e:1b:79:b6:f3:b7:10:b5:dc:a6:26:63:b4:ea:ad:
         b5:ae:30:a6:85:11:58:3f:e5:e5:fe:f7:23:ba:d7:26:11:13:
         7f:b3:33:3d:29:88:36:61:ba:cc:a0:d8:c7:33:52:93:3d:e5:
         25:2f:65:a2:c0:d1:27:f7:54:a2:5e:18:36:c5:c8:eb:83:f8:
         2d:cf:13:21:ea:c4:d6:b5:d6:3c:c5:30:88:87:5a:c8:df:28:
         62:f0:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:30:31 2025 by rpki-client