Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft
File:                     5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft (raw, json)
Hash identifier:          Q1LFImm+Sbc7eICOu1BvkWGsUD48sKYHcAk72hM4lV4=
Subject key identifier:   1F:AE:BA:A8:7C:8B:FA:A4:E4:39:B8:73:90:77:17:DE:13:C9:B4:C8
Authority key identifier: 5D:8E:29:1F:C4:CF:47:86:43:AB:72:09:C8:21:07:5F:DE:56:D7:A5
Certificate issuer:       /CN=5D8E291FC4CF478643AB7209C821075FDE56D7A5
Certificate serial:       188767201411ED2DC9F1819A79487E72C3719880
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8E291FC4CF478643AB7209C821075FDE56D7A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft
Manifest number:          0111
Signing time:             Fri 31 Jan 2025 05:24:19 +0000
Manifest this update:     Fri 31 Jan 2025 05:19:19 +0000
Manifest next update:     Sat 01 Feb 2025 09:22:19 +0000
Files and hashes:         1: 5D8E291FC4CF478643AB7209C821075FDE56D7A5.crl (hash: phQjtNMPrlUI1AYOrCF9kURHJntGRPHqp/ZWlIZeM4k=)
                          2: 3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa (hash: VyufLrwNi5S8vTXDYWODyRH8w/cPl5WQXOL5srUsmYk=)
                          3: 323830343a373138383a3a2f33322d3333203d3e20323730373935.roa (hash: bqfOlusfnCqjG1TVuL190OrarEI1i3HtaRiHSEMKLwA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:87:67:20:14:11:ed:2d:c9:f1:81:9a:79:48:7e:72:c3:71:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8E291FC4CF478643AB7209C821075FDE56D7A5
        Validity
            Not Before: Jan 31 05:19:19 2025 GMT
            Not After : Feb  1 09:22:19 2025 GMT
        Subject: CN=1FAEBAA87C8BFAA4E439B873907717DE13C9B4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:4b:8b:23:d8:92:66:4a:ca:5f:95:95:11:
                    0f:8d:e6:08:1d:a5:9f:31:c3:11:84:73:7f:7a:c9:
                    da:95:81:1b:44:1b:cb:07:50:1d:70:73:62:a0:50:
                    a6:0d:04:89:2e:de:f5:f8:f5:d1:a9:7e:a7:a3:db:
                    f5:b5:88:22:d0:ec:a5:90:69:37:1a:80:03:c2:e2:
                    e6:97:f8:74:ed:cc:86:76:51:92:c0:27:42:6a:6a:
                    bb:8c:be:b3:e8:ff:44:da:9a:c0:45:60:69:39:14:
                    a6:08:ac:0a:d7:78:40:4f:d2:07:f1:d2:0b:b1:31:
                    f0:ce:20:d0:12:5c:f9:94:94:41:0e:e7:ed:a4:6c:
                    52:7b:50:34:36:44:ff:ea:10:02:f9:dc:cc:58:e5:
                    28:98:1e:0b:1f:28:3c:e3:92:cb:b8:89:99:a2:c5:
                    94:f1:26:5a:d9:c9:6a:f6:85:5d:74:0e:72:e0:70:
                    89:43:57:85:b0:0d:f3:e1:3e:8d:a4:a2:94:09:d3:
                    71:58:02:80:cf:ce:21:c9:35:46:ac:2c:f6:ef:a5:
                    e4:3a:8c:1f:70:36:33:b7:c5:d2:18:b8:fd:e9:d6:
                    82:fb:1c:06:ed:94:7b:4f:6e:a0:47:71:8d:d2:31:
                    6e:30:19:cd:bf:aa:58:7d:90:f2:be:dd:35:44:df:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AE:BA:A8:7C:8B:FA:A4:E4:39:B8:73:90:77:17:DE:13:C9:B4:C8
            X509v3 Authority Key Identifier:
                keyid:5D:8E:29:1F:C4:CF:47:86:43:AB:72:09:C8:21:07:5F:DE:56:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8E291FC4CF478643AB7209C821075FDE56D7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:53:d7:90:8c:d7:71:cb:19:60:1a:75:91:42:0c:9b:dc:
         91:4d:2b:c8:fb:6e:ae:c8:f3:47:b4:38:31:72:78:95:d0:6d:
         e2:fe:0c:85:f2:9d:25:56:99:45:57:be:46:58:63:54:57:bc:
         98:0a:1b:ed:73:e1:a7:a9:ac:6a:6d:e6:f3:6d:e9:b8:02:0a:
         71:1e:30:00:ba:a5:b9:fc:14:1f:df:d3:71:be:10:a2:c1:90:
         67:33:de:a7:96:7f:2e:86:be:1e:23:bc:2f:3e:c3:c5:d1:b4:
         69:b0:76:18:2a:e5:ca:60:b7:4e:26:6d:4c:1c:14:6d:e8:bb:
         e1:c3:82:f8:13:d1:66:56:04:d4:31:55:33:f6:86:b9:fb:b9:
         47:c6:32:f5:60:6a:20:8d:97:0d:46:cb:95:28:a6:75:64:d3:
         35:09:a4:04:82:01:56:ee:42:e4:45:12:6f:fe:08:d6:ba:3e:
         f4:b9:0c:98:49:a5:40:8a:f3:3b:f0:e5:4f:96:c7:cf:4c:e7:
         ae:d4:09:c0:f5:06:33:51:07:49:2c:d2:7d:9d:c7:b4:bb:b7:
         7b:0d:c2:9d:58:07:93:aa:4e:4c:72:37:9a:b6:1e:a4:d5:b3:
         59:a7:20:12:74:36:45:54:0a:94:e6:44:9d:55:5a:4e:75:3a:
         8e:03:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:24:11 2025 by rpki-client