Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
File:                     1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft (raw, json)
Hash identifier:          ZGcqPNBewUkSK0/JcEoE1RD03WiUa8LIaorAIbO+Vjk=
Subject key identifier:   D5:7C:93:B3:CB:E7:A3:2C:9D:64:42:86:9B:F8:0E:DB:3D:05:74:A6
Authority key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Certificate issuer:       /CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Certificate serial:       1C9BD043DCFD89BB865A822C4F9E8A41D420D18D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
Manifest number:          15
Signing time:             Fri 31 Jan 2025 13:41:39 +0000
Manifest this update:     Fri 31 Jan 2025 13:36:39 +0000
Manifest next update:     Sat 01 Feb 2025 17:20:39 +0000
Files and hashes:         1: 3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa (hash: UALx+SlLdLiJL02bzgV/he33Yi01ImgRgCnvIhh97Ek=)
                          2: 323830343a333831633a3a2f33362d3336203d3e20323636343537.roa (hash: W73/WetyRo2sZQez7k02MIb9L09vnxOC/QUMREvU5vc=)
                          3: 323830343a333831633a3a2f33322d3332203d3e20323636343537.roa (hash: XOiN5TkkeJGZQdKLDundGd6354GQZjNylfmDQFwpezo=)
                          4: 1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl (hash: htzSLtFWqBGdZIFSJyGji3S+LfOyAfFfAkCj0DJlhEI=)
                          5: 323830343a333831633a3a2f34302d3430203d3e20323636343537.roa (hash: b3ejC392xyfbSJfQME99IiZ/zMqpkptQGSUSd2Csu0g=)
                          6: 3137302e38322e3230322e302f32332d3233203d3e20323636343537.roa (hash: wHzxy6w4KfogH4FMVqlWQ2zq8fpLj5hw82A65IP3eug=)
                          7: 3137302e38322e3230302e302f32322d3232203d3e20323636343537.roa (hash: p0+6tUggShg9eqcHpTQgUbvq/Ev37jqfBULQx1QgQjU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9b:d0:43:dc:fd:89:bb:86:5a:82:2c:4f:9e:8a:41:d4:20:d1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
        Validity
            Not Before: Jan 31 13:36:39 2025 GMT
            Not After : Feb  1 17:20:39 2025 GMT
        Subject: CN=D57C93B3CBE7A32C9D6442869BF80EDB3D0574A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:26:a3:88:39:46:84:60:ad:96:dd:2c:9a:
                    bb:71:66:72:b1:ba:72:5e:a3:8e:13:ed:0f:8b:b2:
                    2d:da:0a:19:b5:eb:03:32:ac:a5:f1:0b:86:b1:f5:
                    be:bc:28:d3:6d:a5:48:09:30:18:28:33:a1:83:1e:
                    9e:53:f9:64:8b:75:6c:7e:2f:45:f8:f8:94:bd:9d:
                    29:b7:fb:6c:e3:ca:62:68:2f:59:74:a2:71:61:8a:
                    f2:cc:96:35:8e:40:40:a9:67:0b:93:15:f6:f6:73:
                    d9:94:0e:99:e5:41:ec:2e:ac:b6:ed:56:48:c6:f1:
                    a6:cd:be:3a:1d:20:fe:12:ec:d5:9c:78:8c:a4:d0:
                    38:78:b4:a7:56:1f:dd:12:23:a6:59:67:8c:26:90:
                    4c:46:d9:29:a5:3d:d5:9a:56:37:a5:ea:71:cf:94:
                    dc:d3:c1:c5:30:4f:11:b3:0b:6b:bb:6d:ef:69:7b:
                    5b:d6:f0:b6:6a:35:25:d6:74:6e:01:1f:ad:0b:67:
                    65:92:5d:55:03:ae:df:88:21:d5:20:55:12:49:4a:
                    bd:ad:7e:59:78:6e:66:12:6a:61:00:b9:08:6b:61:
                    0e:ff:b7:ce:f0:31:84:32:76:a5:f6:ed:0c:57:43:
                    b3:b5:07:41:2a:d7:ac:21:f1:d4:e8:6d:66:76:40:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7C:93:B3:CB:E7:A3:2C:9D:64:42:86:9B:F8:0E:DB:3D:05:74:A6
            X509v3 Authority Key Identifier:
                keyid:1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:5b:d5:f1:12:c0:e4:b4:a7:b9:0d:9e:87:51:e1:0f:a8:
         bd:79:44:8c:5d:cc:5e:fb:e8:be:c0:fe:3d:8a:82:37:bb:a2:
         1a:7c:6f:fc:74:23:18:37:e2:bd:60:08:5b:c7:86:0d:35:cf:
         3c:69:af:e3:51:d5:44:54:43:5c:47:56:cf:77:f0:74:3f:06:
         fb:d8:9f:bc:e1:ca:c9:7d:4f:c6:1f:81:af:0a:24:45:f2:d9:
         02:81:57:69:e4:39:c1:4f:a8:bc:34:f8:68:5b:30:a0:91:8b:
         14:d9:b0:4f:0c:b9:e4:cf:cf:23:c0:64:b5:bc:61:6a:09:05:
         cf:1c:ca:48:04:87:70:4f:ea:47:d6:35:8e:9f:bd:8c:d3:03:
         cc:24:4a:8d:8e:25:19:a8:85:44:50:66:54:1f:c0:70:88:6f:
         5b:80:a7:f2:16:ab:54:0a:7a:93:ff:0a:5b:0f:c8:7d:85:4d:
         17:11:3d:ea:9f:35:39:a4:fe:77:8b:12:7b:82:63:f1:01:08:
         90:8c:45:5c:8a:43:ee:55:2a:cb:08:1e:e6:ca:8a:03:1d:64:
         01:b7:16:39:43:1e:b4:24:e9:35:c3:18:0c:45:09:9b:cc:ec:
         a7:f6:da:b5:1f:2e:59:e6:1d:50:b0:99:03:d7:11:b6:a1:e2:
         43:4d:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:50 2025 by rpki-client