Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
File:                     4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft (raw, json)
Hash identifier:          0dTVSLdq5h5ThV4WyKjPj8m329qlk5pM4dtggWxrni8=
Subject key identifier:   1D:C7:22:F2:17:AE:09:D5:6D:A5:2E:72:DC:38:DC:A4:93:9E:E1:0D
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       45932111300964DED1CCFC82684917DA8AD203BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 12:11:25 +0000
Manifest this update:     Fri 31 Jan 2025 12:06:25 +0000
Manifest next update:     Sat 01 Feb 2025 13:45:25 +0000
Files and hashes:         1: 323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (hash: DnufiHJs9Jkz/lU5F9Lld3LDPp9sPbSXwLkLPOSp+hs=)
                          2: 3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa (hash: QOXMbQRa1BuHD72gfU4AC4mzRnhmbn8Y5jfiL6VJsEw=)
                          3: 3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa (hash: T4e3+6z01yOWNU5xLfJLRR9Q3KGlbpi3HG5LQFGXMJg=)
                          4: 323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa (hash: b02FJq2GH8jGRP52LERnUgNKpRMO0WjsnQo4vHFTr5E=)
                          5: 4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl (hash: OjRGTyW7kIvACUhdnFQ3bjoCRIJKePtyKZlOJS6lWmc=)
                          6: 3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa (hash: 83bVdkGcwD9JnMCwOb1ynsl6A12KofNoUptWS/Trj7s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:93:21:11:30:09:64:de:d1:cc:fc:82:68:49:17:da:8a:d2:03:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Jan 31 12:06:25 2025 GMT
            Not After : Feb  1 13:45:25 2025 GMT
        Subject: CN=1DC722F217AE09D56DA52E72DC38DCA4939EE10D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:38:a4:a6:6a:1b:b5:f3:fe:a0:b9:1c:59:
                    75:f7:ad:f8:01:7e:29:03:56:c6:f8:39:c0:21:65:
                    c5:8c:57:f4:0a:74:dc:c7:ec:a1:96:c7:b5:78:09:
                    2b:37:33:0d:26:c5:bf:83:89:69:d3:bc:f6:b9:0f:
                    92:d2:73:e9:c4:12:fc:f2:8c:e9:bc:4c:c8:86:15:
                    32:ee:3c:10:de:3e:24:08:eb:49:9f:50:65:2e:4d:
                    f3:df:2a:65:be:35:1e:e2:eb:cb:d0:c3:5f:e9:cf:
                    16:61:0f:77:ae:ac:ef:d7:d9:4c:1d:4f:61:85:f9:
                    7b:8e:ff:2a:89:ae:53:28:8c:00:ba:bd:13:9e:c5:
                    3b:99:7f:d3:ee:b5:58:66:7d:59:f8:04:2f:db:aa:
                    7c:bf:76:c2:80:b1:a9:80:c1:c7:61:8a:34:33:2f:
                    70:8e:94:fb:f8:68:cc:fe:3b:b4:df:59:aa:fe:e3:
                    49:19:bd:62:5b:8a:73:8a:69:c1:f6:6c:b1:e5:6e:
                    d4:95:13:73:30:5b:1c:06:f6:37:22:16:dc:74:fb:
                    fc:19:ee:ef:da:39:81:23:17:3f:2e:42:43:59:92:
                    1e:9c:ec:f1:92:ba:72:93:3c:2e:00:34:c8:ac:ed:
                    ca:60:c7:61:c7:9d:fb:ef:4a:a6:c8:9b:d5:03:32:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:22:F2:17:AE:09:D5:6D:A5:2E:72:DC:38:DC:A4:93:9E:E1:0D
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:52:4c:51:25:8c:4f:25:83:6c:73:79:a2:ad:35:23:37:
         ab:a1:63:3b:b2:44:d0:73:2a:50:4b:68:33:c6:68:a9:bf:da:
         78:ec:60:00:51:18:c1:b3:9a:a4:bc:69:b1:13:88:88:d3:f6:
         37:fc:82:14:00:83:78:ee:7e:a8:9f:01:8f:44:05:2d:81:f1:
         23:01:fd:e6:ae:61:53:53:bb:ae:e9:65:04:ad:99:75:a4:67:
         f7:b3:7d:67:61:3f:ec:97:36:31:b5:61:d2:21:0e:76:1f:ac:
         67:f1:71:41:4f:1a:65:ba:b2:6f:c1:bd:9b:86:70:ad:3f:3a:
         91:06:be:3c:fb:ca:8c:c5:28:62:51:ac:ef:37:9c:32:f6:ba:
         3f:80:dd:15:0f:f3:6f:56:f2:8b:a8:d9:78:7e:37:92:94:05:
         df:c1:27:00:1c:3c:41:3e:1d:06:f2:e7:c8:45:e5:34:90:ca:
         20:97:e8:e4:1d:f2:3d:cd:f1:87:18:6a:c3:a6:e1:9e:96:9b:
         4e:8f:4a:8d:2e:87:68:86:da:41:a5:b9:55:d7:25:d1:07:35:
         78:b4:6e:0e:3e:01:59:11:64:11:92:5f:a7:1c:f9:5c:96:bc:
         f0:7e:3c:fd:06:7a:11:8a:02:f2:d1:be:d4:a5:9d:87:b1:b4:
         3d:fd:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:14:39 2025 by rpki-client