Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
File:                     2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft (raw, json)
Hash identifier:          PIh8lkhEWy5v5azIVvf/OdZ2f0zhkn+qkTomDMccsl4=
Subject key identifier:   3B:5C:44:30:8E:36:91:DA:43:4C:75:68:6F:AB:F7:99:1A:D2:09:1D
Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE
Certificate issuer:       /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
Certificate serial:       789E7D58456D5CCC12A82FDDCADAF16E52370A85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 03:22:02 +0000
Manifest this update:     Fri 31 Jan 2025 03:17:02 +0000
Manifest next update:     Sat 01 Feb 2025 05:01:02 +0000
Files and hashes:         1: 34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (hash: qLf8BGnQnmLP1ng1G+n1TRhJ0GzCvhHrQ8QPAOXs7bE=)
                          2: 323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (hash: ldPvfWhqpTPoOMoyCztpRoFGb39NthFD8scUE+OBwfs=)
                          3: 2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl (hash: /5N/bqjlYv3AcKCcF8ntkvbjAZYNkQU3svFA9RHXgLA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:7d:58:45:6d:5c:cc:12:a8:2f:dd:ca:da:f1:6e:52:37:0a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
        Validity
            Not Before: Jan 31 03:17:02 2025 GMT
            Not After : Feb  1 05:01:02 2025 GMT
        Subject: CN=3B5C44308E3691DA434C75686FABF7991AD2091D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:9e:48:a9:00:0d:4d:b9:80:14:2f:29:34:
                    95:ce:39:60:6d:64:27:5a:73:fb:f0:ef:99:63:56:
                    56:06:e1:aa:4d:9f:1e:f0:8e:4a:3c:38:a0:77:40:
                    21:0c:50:ab:1e:32:97:85:08:6f:f1:15:88:5e:1d:
                    1a:29:4c:fb:4e:fc:fc:da:56:fc:64:31:28:75:b9:
                    51:8c:8e:b0:9e:79:b2:0a:d7:69:30:f6:14:86:6e:
                    34:b1:f6:57:c8:ca:64:f0:40:4d:d8:c8:24:64:d3:
                    9d:af:20:42:cd:cc:22:38:f1:5a:1d:2a:0c:e8:d1:
                    9f:e2:8c:54:2a:7b:01:1e:43:61:c2:fe:66:4c:80:
                    32:9c:b7:18:99:00:9a:0c:5f:b2:9c:ab:1a:fc:59:
                    e8:85:96:d4:5a:7a:9e:7e:e7:99:50:87:c5:2f:69:
                    14:f4:2f:a7:00:98:41:a3:1d:38:dd:f7:eb:1d:ad:
                    cb:7f:91:d9:b4:cc:0c:19:4c:be:e3:4b:e6:be:2d:
                    e5:cd:26:e0:cd:f4:11:c4:b1:6f:10:1a:e9:b8:7f:
                    12:75:20:5c:1e:21:41:ce:cb:42:62:3f:59:b3:1b:
                    b5:9e:43:9d:70:66:be:67:ef:85:97:07:00:c2:56:
                    51:a1:17:8c:f8:1c:a1:ea:0b:98:41:68:3e:92:66:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5C:44:30:8E:36:91:DA:43:4C:75:68:6F:AB:F7:99:1A:D2:09:1D
            X509v3 Authority Key Identifier:
                keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7e:32:6a:c4:31:c4:f9:cf:38:ed:0e:86:c5:1d:0a:29:d3:
         27:60:78:21:8e:b6:6e:3f:72:3c:88:19:3d:25:bc:cb:51:12:
         0a:e7:fc:b0:4a:4e:82:55:3b:a0:02:8a:e4:8e:91:2b:9d:75:
         85:29:25:cc:b8:08:63:6c:13:b7:77:c4:59:51:c2:ec:2f:d2:
         f4:c6:b3:72:f5:94:f8:d7:c7:bf:ea:9e:c8:ae:49:ea:55:b9:
         7e:73:9f:be:08:c3:77:d0:52:8b:94:2e:4f:9a:b5:86:fa:da:
         d3:ed:52:e9:a5:aa:b3:f2:d7:fb:a4:2e:4e:15:ae:e8:c6:2d:
         29:05:01:86:09:5b:8f:8f:78:3e:38:64:53:4e:a0:ff:87:61:
         95:14:33:0f:5a:55:b7:96:14:8a:e1:ba:c7:6a:ed:43:e4:7f:
         78:39:59:25:b1:18:3e:f6:d4:54:fd:ab:23:60:cd:2c:fa:b9:
         58:37:ea:80:3c:45:9f:84:d6:60:24:b1:3a:95:b3:f6:b7:ea:
         4a:20:a7:0b:e4:6f:fd:b6:76:38:b5:27:26:37:c8:40:b2:35:
         81:f5:8a:c2:17:75:e6:df:ce:8c:3e:b3:54:80:e4:79:0b:90:
         1e:64:78:9f:45:fd:e8:15:90:ce:36:14:a5:dc:61:75:fe:42:
         ad:92:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:33 2025 by rpki-client