Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
File:                     57DB3581E707C22BBA17B8AD12B81942965761D7.mft (raw, json)
Hash identifier:          Qy4TvzOvyDfAICCTcKR2WUmkg6XOJjkWEIvEANcTwA8=
Subject key identifier:   31:B6:4D:C1:80:CA:4B:1D:00:9F:B8:10:EA:C7:C0:0A:90:AE:15:09
Authority key identifier: 57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7
Certificate issuer:       /CN=57DB3581E707C22BBA17B8AD12B81942965761D7
Certificate serial:       7A803D18B3FF54F376C8B17654FDFE516D626C00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
Manifest number:          D5
Signing time:             Fri 31 Jan 2025 14:38:04 +0000
Manifest this update:     Fri 31 Jan 2025 14:33:04 +0000
Manifest next update:     Sat 01 Feb 2025 14:51:04 +0000
Files and hashes:         1: 3138362e3233332e3132382e302f32312d3234203d3e20323635393733.roa (hash: daCZVYdQlVzFzisTkWPp9UI9qDeq4t4ouQfwqecELvU=)
                          2: 57DB3581E707C22BBA17B8AD12B81942965761D7.crl (hash: j9cGV/SmtvQbc5eO+ayaW8yrVQ/I9V0OVGrQh+fCea4=)
                          3: 323830343a343061383a3a2f33322d3438203d3e20323635393733.roa (hash: EnlWsydM3BoZMPkFufOzNgjBsHv7n2sE9rgeCUC8Jmc=)
                          4: 3136342e3136332e3230342e302f32322d3234203d3e20323635393733.roa (hash: ncFtCGjYfJJWh+Z0HuVW0mHfX/zo2zmjLKMww8T7y7c=)
                          5: 3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa (hash: +IHHFyZ4zEKtkT7FWPG7jzjG+2UrhR7Tp0NCvXX6+rc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:80:3d:18:b3:ff:54:f3:76:c8:b1:76:54:fd:fe:51:6d:62:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57DB3581E707C22BBA17B8AD12B81942965761D7
        Validity
            Not Before: Jan 31 14:33:04 2025 GMT
            Not After : Feb  1 14:51:04 2025 GMT
        Subject: CN=31B64DC180CA4B1D009FB810EAC7C00A90AE1509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:9c:f3:28:4f:1b:6e:f1:20:1b:76:e1:31:
                    89:1c:16:9b:d5:59:df:f5:3b:2c:34:79:8c:49:eb:
                    4d:fb:85:70:7a:36:47:b7:54:cd:75:fe:39:8a:2d:
                    e1:50:9c:87:1b:09:dd:74:53:59:07:6f:7f:ad:ec:
                    a7:0a:b9:ab:f2:4e:6e:24:ab:27:03:ac:11:36:00:
                    91:81:b8:41:00:77:3d:2b:48:a5:ff:2b:59:9e:fd:
                    de:e4:16:b7:89:fa:0f:d8:21:8c:5c:68:e1:68:34:
                    fc:7e:2f:00:61:e8:33:cd:05:19:44:f4:56:62:0c:
                    c5:6e:c2:2c:db:6c:e3:14:2d:2e:82:62:dc:4d:4f:
                    f8:c1:0a:da:1e:95:6a:22:c4:bb:1d:2e:4c:3d:ff:
                    35:b6:d8:49:35:c5:1a:00:f0:72:10:f2:da:90:d1:
                    8e:74:57:52:3b:40:d5:02:26:f0:8f:c2:00:2a:6d:
                    0a:bc:58:45:88:c9:35:71:58:f7:ff:44:a9:98:c9:
                    4a:2a:22:ae:0a:db:fa:ed:a0:61:f3:c5:42:93:70:
                    c0:e2:5c:80:fc:3b:46:80:ac:6c:b8:51:53:87:3b:
                    5d:2c:df:e5:b5:7e:f1:86:de:0d:d6:93:e8:ef:2c:
                    fb:9a:da:c6:cf:48:35:ab:1f:98:5a:64:7a:bf:3f:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B6:4D:C1:80:CA:4B:1D:00:9F:B8:10:EA:C7:C0:0A:90:AE:15:09
            X509v3 Authority Key Identifier:
                keyid:57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:59:18:7b:9a:79:67:84:a8:0e:4a:14:61:ab:b5:9c:95:
         7d:16:a0:59:77:8e:86:e5:d3:c5:d1:61:0f:6e:d5:94:ec:8d:
         ba:3a:7a:f4:2e:2f:44:31:88:92:d6:5f:01:09:64:02:1d:d3:
         94:80:71:fe:27:43:69:ac:f4:c6:f8:ba:81:ef:72:37:d6:6a:
         9b:60:64:b3:c0:92:b3:39:3a:78:86:11:8e:5c:60:bb:1f:8b:
         98:c8:0a:57:93:9a:c4:1d:54:90:d4:63:b2:93:80:7c:ce:e7:
         e2:a3:c1:e9:07:7e:84:ff:67:80:96:58:63:81:a6:e3:9c:7c:
         e6:ea:41:e7:66:b3:81:7a:22:a8:c7:79:38:b2:c1:a6:3c:1d:
         69:52:11:e1:57:f8:19:38:4b:e6:1f:82:02:4a:d1:8d:be:29:
         90:eb:fd:b3:a5:59:ea:1a:40:ce:22:99:75:d4:78:25:17:ad:
         29:b1:cf:91:52:15:45:23:58:96:16:c5:c7:77:ab:62:58:d3:
         a0:d1:fb:a3:9c:2d:23:3d:04:16:bd:73:89:62:64:7f:71:5c:
         9b:3a:10:dd:52:f1:72:b3:0a:a4:76:ad:88:55:1f:11:69:e4:
         0a:0f:ce:4b:ca:bf:f2:70:9c:af:48:2b:97:76:5e:f1:32:f3:
         e8:7c:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:15 2025 by rpki-client