Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
File:                     D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft (raw, json)
Hash identifier:          ddiIJo0Zgj+ni8BkCIu1Wb4bMRMPAmNyIUez5nOEJVs=
Subject key identifier:   A5:D4:3B:8B:31:46:60:74:38:B0:73:EE:CF:5E:89:9A:87:27:57:AD
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       2A352081C5DF6D5FDCB7A6F33CB661EF00836A7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
Manifest number:          019E
Signing time:             Fri 31 Jan 2025 10:59:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:54:34 +0000
Manifest next update:     Sat 01 Feb 2025 13:24:34 +0000
Files and hashes:         1: 323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa (hash: pVjdYkbfOeXKElM1eDSGlFmdTQYSiNTkXdOOeJ1wb3o=)
                          2: 3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (hash: QSF8pRQsetE3tw1VRrXv2Y/TSx/Y3G1OjTgRIk8B8Q4=)
                          3: 323830343a326439343a3a2f33322d3334203d3e20323635323930.roa (hash: kWy+KFGUaAZrPS5L1uMSNk7nabZrJmPBwwbdk2M3D+k=)
                          4: 3136382e39302e3230362e302f32332d3234203d3e20323635323930.roa (hash: g4ESWvdIHtluvLAqkT8HxM4HWkEbrwhW82318VwTy4U=)
                          5: D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl (hash: GKE2jz3/xuOJMfWnAcdH3TkT7WIXWCApT+IbZt6roi0=)
                          6: 3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa (hash: 7f+1pD9LwwoC+qMLNFBEZz2hsvQhGUGXW74l1LrpdfQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:35:20:81:c5:df:6d:5f:dc:b7:a6:f3:3c:b6:61:ef:00:83:6a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Jan 31 10:54:34 2025 GMT
            Not After : Feb  1 13:24:34 2025 GMT
        Subject: CN=A5D43B8B3146607438B073EECF5E899A872757AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:1b:0e:6d:06:3e:e6:97:d9:db:38:56:b5:
                    ea:f0:8f:9c:46:34:59:a5:b2:72:fc:51:6c:2f:59:
                    37:16:db:d7:cd:f0:50:21:ce:e0:82:ad:57:9e:11:
                    a4:e5:7f:31:bf:8c:8d:2f:7f:a9:29:a1:52:39:4c:
                    c7:69:3d:99:d8:b5:d9:6d:b3:4c:f7:4d:15:3c:68:
                    23:b3:23:d1:10:7e:cf:d1:4a:ea:6c:1b:e7:ef:63:
                    34:14:4e:75:86:67:f1:65:7f:0e:77:90:5e:8b:c8:
                    27:55:df:a1:22:8f:2b:6f:35:f9:df:e0:6e:5a:75:
                    ee:14:46:c8:b9:14:2e:3b:b3:54:4c:2d:24:3e:ad:
                    03:fe:f8:d0:57:c6:95:25:e5:ee:bf:7e:9e:b5:f7:
                    9d:37:35:22:4a:93:8b:a6:f7:58:f3:04:c7:da:ad:
                    94:dd:f9:1e:d6:46:dd:1e:8b:98:a6:8c:fd:ea:7a:
                    31:b7:3b:65:35:19:62:0b:70:90:89:6e:b2:5f:08:
                    84:19:fa:01:2e:c1:fc:a2:28:2a:f2:49:95:cf:4f:
                    d1:8d:be:df:d4:e9:2c:3b:fc:09:d3:6c:73:92:3a:
                    95:92:7c:c6:09:3a:1d:24:7a:ec:4c:39:4b:f3:89:
                    7a:e4:4c:48:85:2c:fb:22:09:2e:31:f4:f2:20:cc:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:3B:8B:31:46:60:74:38:B0:73:EE:CF:5E:89:9A:87:27:57:AD
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f9:46:3a:69:16:b6:07:29:3b:31:90:8b:8e:f1:ff:bb:8e:
         47:43:91:b8:4f:21:32:14:c8:6f:2a:d8:e0:b8:7d:6b:30:09:
         5f:b9:18:b1:00:12:89:56:c5:07:99:6a:a6:18:71:fd:cd:7a:
         c5:82:1f:26:75:21:69:a4:de:48:3a:8f:ac:d7:1b:37:44:e5:
         ce:d1:ab:57:f0:02:eb:0e:95:a2:79:95:d9:19:0c:91:81:00:
         2f:cc:ac:77:89:dc:b6:d4:41:7d:92:4b:2d:e0:b8:8b:f8:9e:
         10:cf:a8:4e:0b:b3:d5:49:89:51:ad:81:8c:03:85:74:4e:8f:
         9d:2e:a5:2a:d6:3b:20:36:e4:c3:00:1c:51:53:51:5e:1e:5c:
         2a:a2:22:37:b0:b7:d1:d4:14:8b:39:7c:e8:f9:02:bb:6e:8d:
         b3:e8:16:b4:11:e0:f0:a9:5f:3f:17:96:5f:41:99:ce:3f:f5:
         1e:c3:70:26:24:73:bc:57:0f:a3:95:52:30:ad:90:17:2b:16:
         2f:df:da:14:65:b7:69:48:69:42:20:53:61:49:d3:52:e2:c8:
         1a:d1:42:e4:30:8f:46:9c:4e:3d:1a:83:3f:0f:18:6a:d3:5b:
         f7:fb:44:36:aa:0b:86:cd:e2:98:d5:91:cc:95:b8:48:68:70:
         ea:40:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:20:55 2025 by rpki-client