Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.mft
File:                     0098226F0372C9E599CF2BD5642AFEAFCFB872A1.mft (raw, json)
Hash identifier:          GnAhkNZk6uM0nP9q9JIm15fh8avN6+olfI0l9AvMWxM=
Subject key identifier:   45:17:24:FE:11:94:E9:9E:FF:C6:C6:71:37:E4:B1:A8:78:C8:C2:64
Authority key identifier: 00:98:22:6F:03:72:C9:E5:99:CF:2B:D5:64:2A:FE:AF:CF:B8:72:A1
Certificate issuer:       /CN=0098226F0372C9E599CF2BD5642AFEAFCFB872A1
Certificate serial:       26469A2D354629615FC18198904F59E071C4EA44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.mft
Manifest number:          24
Signing time:             Fri 31 Jan 2025 18:11:03 +0000
Manifest this update:     Fri 31 Jan 2025 18:06:03 +0000
Manifest next update:     Sat 01 Feb 2025 20:28:03 +0000
Files and hashes:         1: 3134332e3235352e35322e302f32322d3234203d3e20323635313339.roa (hash: 9sx6wC5OdE/p6rj68V2QoqbFmhOs8qq8a8g/Zk3floA=)
                          2: 323830343a326232633a3a2f33322d3332203d3e20323635313339.roa (hash: DZEEcHNQI5YOV0FWE+5yPgmbW5mWmJExAS2/O2HL+5c=)
                          3: 0098226F0372C9E599CF2BD5642AFEAFCFB872A1.crl (hash: 61W0nAwwWwM26Eyh/zTOpWJF9bub94rOFIAdyOOCD74=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:46:9a:2d:35:46:29:61:5f:c1:81:98:90:4f:59:e0:71:c4:ea:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0098226F0372C9E599CF2BD5642AFEAFCFB872A1
        Validity
            Not Before: Jan 31 18:06:03 2025 GMT
            Not After : Feb  1 20:28:03 2025 GMT
        Subject: CN=451724FE1194E99EFFC6C67137E4B1A878C8C264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:3f:3e:21:2f:b6:80:f2:bf:ae:7e:00:4e:
                    cb:5c:fd:7e:06:1c:d8:0e:b5:30:37:f5:80:63:0f:
                    52:1c:a4:c8:80:86:13:f9:52:b3:a3:df:af:25:67:
                    26:87:e9:81:e4:25:bf:92:15:9f:8a:66:b7:7d:ad:
                    c5:05:42:de:01:bb:e6:e7:42:5b:f2:53:8a:a9:81:
                    8c:13:00:99:e3:cb:00:b7:27:7e:4d:4b:80:f6:54:
                    5b:a1:06:76:5d:bc:8f:83:dd:5d:5e:1e:88:63:63:
                    7a:42:50:7e:02:56:73:a7:57:2f:a6:63:cd:ee:67:
                    a7:f3:e3:54:3e:c1:f2:63:5d:1f:7f:90:1d:57:09:
                    f3:2e:62:28:ad:0f:7e:b4:e5:f6:fa:80:64:30:56:
                    62:b3:18:0a:75:ca:2a:e1:db:41:45:ef:a7:72:64:
                    f6:5e:3f:5d:38:c0:4e:90:ef:f0:27:03:94:fd:7f:
                    d7:a3:e4:59:b1:7f:5a:f3:be:61:f8:4f:81:1e:11:
                    4c:a6:4a:58:09:f6:00:94:af:2e:1a:8a:9a:8e:61:
                    bb:df:84:aa:5d:80:fe:c8:38:d5:ca:58:d6:2e:05:
                    18:3c:b6:9c:c3:81:fb:ba:83:17:75:bc:b3:8d:d8:
                    0e:fa:7d:03:00:83:16:ae:99:b1:70:a6:6c:c7:a2:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:24:FE:11:94:E9:9E:FF:C6:C6:71:37:E4:B1:A8:78:C8:C2:64
            X509v3 Authority Key Identifier:
                keyid:00:98:22:6F:03:72:C9:E5:99:CF:2B:D5:64:2A:FE:AF:CF:B8:72:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/0098226F0372C9E599CF2BD5642AFEAFCFB872A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:92:f8:fa:ad:ae:0e:d9:f8:c5:a8:8f:55:01:7c:e3:87:d2:
         43:25:a6:a3:ed:77:20:8b:65:93:2c:4b:df:ff:07:9a:f5:38:
         c6:73:fb:ad:4d:fd:11:18:dc:7f:47:aa:04:26:15:0c:72:f4:
         f1:41:ac:fc:ed:12:40:0f:fb:15:6e:5e:cd:5f:19:10:41:eb:
         3a:23:03:80:7e:2c:5b:9a:bf:51:df:5c:8a:ec:31:07:86:09:
         e7:28:26:02:80:a8:78:49:42:f5:f8:07:c0:10:ff:18:37:fa:
         e1:7e:03:fe:b1:d6:c8:4f:e6:61:7a:06:3e:88:80:71:fc:cc:
         52:bc:aa:d7:e6:d8:c9:e0:a1:3a:15:62:13:42:84:ea:05:af:
         43:8f:72:ac:6f:16:71:06:8e:57:3f:75:5c:d4:f8:d3:01:05:
         00:ad:79:88:17:c0:40:90:92:2b:40:77:cf:e5:8f:0f:fb:82:
         cf:00:1d:95:79:2e:f4:0b:d5:8f:35:76:16:58:6a:07:c4:3d:
         ed:43:1f:b8:44:55:ed:57:10:65:08:50:fa:e3:1e:95:de:9b:
         35:8b:8a:69:dd:9c:13:9d:b4:ab:2a:75:a4:14:ad:c5:5a:f8:
         fe:3b:93:50:f7:cd:2c:16:75:ad:c2:bb:dc:af:9a:6d:1a:2e:
         b1:a6:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:05 2025 by rpki-client