Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B4DBFE65EE750F5062B29955F2B411BD46B94646.mft
File:                     B4DBFE65EE750F5062B29955F2B411BD46B94646.mft (raw, json)
Hash identifier:          3l8NDJBM4gxIuzQZXw3MOL8ngijDJlExAPYKG+F7FuU=
Subject key identifier:   1E:59:86:F4:2D:BA:C5:62:A4:D1:2C:78:A5:C0:9E:87:21:4B:B6:27
Authority key identifier: B4:DB:FE:65:EE:75:0F:50:62:B2:99:55:F2:B4:11:BD:46:B9:46:46
Certificate issuer:       /CN=B4DBFE65EE750F5062B29955F2B411BD46B94646
Certificate serial:       597B55926D52CF0C588922939F64BC175FBF31A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4DBFE65EE750F5062B29955F2B411BD46B94646.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B4DBFE65EE750F5062B29955F2B411BD46B94646.mft
Manifest number:          03
Signing time:             Fri 31 Jan 2025 14:58:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:53:38 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:38 +0000
Files and hashes:         1: 323830343a356230633a3a2f33322d3438203d3e20323638383135.roa (hash: PPbeP7gRTAtrP3Kenf4w6QP4puqv+me/1wo6MyjJ+lA=)
                          2: B4DBFE65EE750F5062B29955F2B411BD46B94646.crl (hash: ZPpZNq5MPRU7jOLuVDP/Webat+lqXsdVjKBrtc0qGBc=)
                          3: 34352e3137332e3135322e302f32322d3234203d3e20323638383135.roa (hash: uKgqcnX9of8U3C/i+XG5liT+KkjE8NCVKTG4jWLUxIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7b:55:92:6d:52:cf:0c:58:89:22:93:9f:64:bc:17:5f:bf:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DBFE65EE750F5062B29955F2B411BD46B94646
        Validity
            Not Before: Jan 31 14:53:38 2025 GMT
            Not After : Feb  1 15:00:38 2025 GMT
        Subject: CN=1E5986F42DBAC562A4D12C78A5C09E87214BB627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:7b:70:87:c1:b7:9a:41:cb:aa:7b:04:54:
                    2c:2a:50:c2:0c:33:f3:8c:f4:f9:b1:3f:ee:e3:b5:
                    2c:06:e3:a0:2a:35:16:69:ca:69:31:3d:39:68:84:
                    ea:d9:d1:3a:17:0b:ee:ce:2e:85:16:e0:9e:07:92:
                    3e:21:fb:56:97:de:57:5a:d0:02:70:09:7c:54:b5:
                    5f:1c:c8:03:fa:d9:b2:ad:d4:68:a5:4e:49:9b:7d:
                    7b:a0:62:15:b5:48:10:e0:8f:3e:25:ee:23:e4:5e:
                    11:fd:94:5f:0a:05:a7:94:5c:61:8d:60:c7:8a:12:
                    94:70:48:4a:0d:67:93:e9:e2:92:1b:92:fa:7b:9f:
                    98:17:1b:1c:b2:31:0b:69:fe:c7:1c:ca:ff:e7:3f:
                    ed:a6:8b:cf:f6:d3:e7:6b:e0:9d:c0:98:20:14:9f:
                    44:e3:f9:d1:e2:71:0f:62:f3:f7:05:cb:31:07:51:
                    69:09:f2:73:cd:4d:f1:a7:53:a8:0c:1b:77:47:93:
                    ec:ba:d0:81:d5:fa:1e:4f:42:45:1f:35:a4:59:4a:
                    8a:20:18:c3:73:93:3a:8c:f9:25:32:40:ae:e2:3b:
                    58:4c:ee:9a:0b:05:52:2f:bc:e5:ab:b4:75:d7:20:
                    d7:43:6c:f0:18:65:a0:ec:e0:ff:44:a7:97:59:6a:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:86:F4:2D:BA:C5:62:A4:D1:2C:78:A5:C0:9E:87:21:4B:B6:27
            X509v3 Authority Key Identifier:
                keyid:B4:DB:FE:65:EE:75:0F:50:62:B2:99:55:F2:B4:11:BD:46:B9:46:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B4DBFE65EE750F5062B29955F2B411BD46B94646.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4DBFE65EE750F5062B29955F2B411BD46B94646.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/B4DBFE65EE750F5062B29955F2B411BD46B94646.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:59:a1:7d:0d:15:2e:36:70:3f:8f:0d:e2:49:0d:d8:89:60:
         b7:30:1b:6b:df:84:50:74:5f:27:1a:bb:52:62:23:45:9d:19:
         3a:86:cf:74:bc:68:33:07:51:23:c9:32:e0:30:4f:d3:4f:95:
         99:c6:b6:12:79:85:5e:27:dc:21:97:af:60:eb:8f:8f:a1:6e:
         4d:b7:1e:56:15:8b:28:17:74:bc:9c:4a:99:09:37:bb:b6:99:
         63:b9:72:54:c6:59:15:21:c7:90:96:6d:bb:4b:6f:d7:95:59:
         4d:c5:f5:8f:42:9c:eb:e0:db:f8:fc:65:b0:70:be:a5:27:09:
         81:8e:17:cd:97:32:3e:cc:db:42:99:d4:ee:30:69:dc:54:5b:
         f4:ad:40:dd:82:06:90:38:b9:22:57:9f:17:e7:9c:ee:b3:51:
         bb:4a:91:36:59:65:90:2d:e7:dc:af:d5:7c:c3:72:99:f1:6c:
         d5:aa:7e:dc:14:a5:62:17:01:fc:cc:f6:00:7b:38:5e:28:f6:
         f5:a0:f9:8d:d0:be:fb:b8:71:77:58:88:21:c6:31:3b:5c:01:
         24:89:d1:c9:71:a3:11:e7:4c:26:cf:19:1a:09:82:d4:11:de:
         1e:3c:54:b0:72:18:35:ad:e8:1c:89:4c:5e:a4:96:fc:12:e1:
         c2:d7:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:19:06 2025 by rpki-client