Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
File:                     A39AB07F573D04E5845A8A1E723EAE291A21091A.mft (raw, json)
Hash identifier:          ulIGWlBlERE0mwME4O5LNcq5V1EUOn13jvyhb5Dva/c=
Subject key identifier:   98:28:79:20:FC:AE:7C:C5:7D:66:4B:0A:8B:9C:93:1F:E7:63:A0:2E
Authority key identifier: A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A
Certificate issuer:       /CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
Certificate serial:       729FB3F5154EC6884A08933D229EC9133E2D75F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft
Manifest number:          16
Signing time:             Fri 31 Jan 2025 13:45:01 +0000
Manifest this update:     Fri 31 Jan 2025 13:40:01 +0000
Manifest next update:     Sat 01 Feb 2025 16:04:01 +0000
Files and hashes:         1: A39AB07F573D04E5845A8A1E723EAE291A21091A.crl (hash: yIRdUJYyLeGeH+ECs2qOTG1qKrdqYv6O7c9TSIzHbi8=)
                          2: 323830343a313835303a3a2f33322d3438203d3e203631393239.roa (hash: Szt9ZV9sRPtQOQKbjdxPwb0YCI6xuqfixIhwwLaGIb4=)
                          3: 3230302e392e3132342e302f32322d3234203d3e203631393239.roa (hash: aWtMNVQJI/iZDaToqXDdohB2sYEPV0dWfV9fbP4/j2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9f:b3:f5:15:4e:c6:88:4a:08:93:3d:22:9e:c9:13:3e:2d:75:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39AB07F573D04E5845A8A1E723EAE291A21091A
        Validity
            Not Before: Jan 31 13:40:01 2025 GMT
            Not After : Feb  1 16:04:01 2025 GMT
        Subject: CN=98287920FCAE7CC57D664B0A8B9C931FE763A02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:b0:f4:07:6c:1e:96:9e:8e:8b:88:97:e4:
                    25:a4:49:55:17:22:49:fc:1b:06:f1:8f:a1:be:6f:
                    50:02:cd:41:eb:15:bc:59:b1:d4:7d:27:da:f9:36:
                    1d:c4:e4:c5:a0:4d:ec:7f:4b:c5:34:a7:af:07:51:
                    e0:e9:99:4c:43:21:b6:20:e6:11:d2:ab:b5:cc:af:
                    a1:ba:18:c2:00:dd:86:77:e2:05:cd:30:7c:6a:ed:
                    07:53:65:dd:be:d0:db:72:e8:f8:1e:ff:72:96:a7:
                    84:b4:e6:99:5c:9d:e5:45:c8:6d:11:58:00:c4:ff:
                    cc:43:d7:5b:48:f3:16:67:7e:4e:81:29:0d:0c:15:
                    6f:6b:8b:87:7f:59:54:d9:f6:de:19:b8:44:aa:1f:
                    d8:b5:d3:ac:94:41:db:70:74:2c:a4:16:38:04:8c:
                    81:e6:e3:aa:62:d5:98:b1:2b:d0:17:94:81:69:4c:
                    0d:98:d4:6e:35:d5:b4:a7:e4:6e:0d:8f:b4:65:e2:
                    ca:fb:12:64:7b:bd:ba:88:03:b0:65:1e:35:ea:5e:
                    78:99:0b:b1:eb:a6:c8:19:b9:23:ba:8f:22:1e:6f:
                    64:26:df:a6:70:a7:85:ae:63:bc:4f:d9:64:ea:ba:
                    1a:05:aa:fd:74:ff:c9:e8:37:f0:ae:45:80:8e:41:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:79:20:FC:AE:7C:C5:7D:66:4B:0A:8B:9C:93:1F:E7:63:A0:2E
            X509v3 Authority Key Identifier:
                keyid:A3:9A:B0:7F:57:3D:04:E5:84:5A:8A:1E:72:3E:AE:29:1A:21:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AB07F573D04E5845A8A1E723EAE291A21091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcM4J3E3vGyd8cxGNVdyazgfAMqUek44WDbdoG1Dkvqs/0/A39AB07F573D04E5845A8A1E723EAE291A21091A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:fc:2b:f9:a2:6d:00:fa:7f:ca:c5:73:87:8e:76:88:30:
         91:bd:a1:d1:76:48:17:57:55:40:fe:37:48:c5:52:03:90:a1:
         ea:0f:9d:a1:b9:a6:bc:84:2e:db:c1:94:39:54:24:d9:f8:07:
         34:08:8c:68:fb:d7:2a:75:c8:55:9a:8f:0e:60:b0:83:5d:de:
         db:d5:31:85:9a:f8:07:f5:77:69:c9:65:34:fb:e3:4a:83:9d:
         a1:af:1d:af:aa:64:b3:e1:9d:42:2c:30:53:0b:a9:7e:67:6f:
         27:0e:ae:b1:48:a5:18:6b:49:fd:95:42:37:f9:25:25:eb:23:
         e7:b5:fa:21:f4:5d:e8:82:2e:0f:9c:85:6d:2b:22:6e:96:7c:
         ba:0c:54:65:5a:d7:61:f9:1c:8b:bd:ae:65:d7:82:11:48:f0:
         13:68:41:17:41:21:cb:4a:9b:2b:5b:62:34:ba:cf:17:21:e7:
         79:7e:2c:8c:b5:7d:55:3a:55:11:e1:b9:5d:ba:98:0a:1d:ce:
         39:21:a3:e9:f9:19:c8:38:79:b5:5f:a6:4b:cb:db:4b:ba:c9:
         e8:ed:9a:0c:2a:8d:e0:e9:c5:93:26:a0:f5:f3:c6:ea:b6:72:
         55:75:c9:2b:a2:99:bd:80:69:86:bb:f7:98:a9:db:c9:7e:66:
         a1:d9:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:56:11 2025 by rpki-client