Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
File:                     650CDA051146F7753756149BDB6B92197765D95E.mft (raw, json)
Hash identifier:          5KeIkIlF8A/kpUVMOF//kDKwoin5xQTmvMxZhkgw3sk=
Subject key identifier:   38:1A:06:68:C4:4E:1E:96:5D:19:F3:B8:D8:87:6F:46:8A:18:6D:00
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Certificate issuer:       /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial:       3277F1184D774794C86EF575D66F431356DD0AEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 09:20:00 +0000
Manifest this update:     Fri 31 Jan 2025 09:15:00 +0000
Manifest next update:     Sat 01 Feb 2025 11:37:00 +0000
Files and hashes:         1: 323830343a363937383a3a2f33322d3438203d3e20323730323732.roa (hash: ykHJNc3cAmdB/snhutEx0+Al+xTIBQLtGMWOWMpU5Ak=)
                          2: 650CDA051146F7753756149BDB6B92197765D95E.crl (hash: IZN7DUa9VTk5lVo17e1NnWaUE9zARLScva0qFW46pR0=)
                          3: 3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa (hash: 8WhvCvtHaeIKk4pq+2vNFlcvNyWCZC1cvH3PBJDT7Og=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:77:f1:18:4d:77:47:94:c8:6e:f5:75:d6:6f:43:13:56:dd:0a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
        Validity
            Not Before: Jan 31 09:15:00 2025 GMT
            Not After : Feb  1 11:37:00 2025 GMT
        Subject: CN=381A0668C44E1E965D19F3B8D8876F468A186D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:33:a5:d9:e7:28:2e:38:90:b2:18:de:9a:
                    ec:1e:09:2e:f5:d0:6e:c9:f2:85:dc:56:75:df:d2:
                    db:90:4e:4d:8c:c0:6f:e7:e0:3e:53:e8:99:a9:26:
                    14:16:29:3d:92:23:1e:c8:3f:74:90:3a:a1:36:91:
                    8b:25:2d:6c:2a:a9:05:f9:19:1d:74:96:94:cd:1b:
                    5e:4c:29:a7:1d:09:71:5a:ba:51:42:a8:d8:f8:58:
                    87:32:ea:26:80:c5:db:cd:af:c7:94:b8:d5:73:f7:
                    d9:b2:cc:46:84:5e:bb:11:62:72:99:22:fc:e8:04:
                    11:4a:87:51:50:dc:d2:2c:a6:fe:78:47:8d:a2:7c:
                    48:dd:5b:b3:39:34:d5:56:7f:80:67:70:5c:71:c2:
                    c3:dd:32:00:49:01:57:e3:8d:71:32:a2:87:4f:b8:
                    77:a3:3f:3b:c1:51:ee:95:a8:88:ca:66:95:0c:f1:
                    66:e3:25:50:89:98:82:86:d7:d0:01:0b:14:7d:a2:
                    15:bd:a3:a3:fe:ae:ac:d5:8e:19:4f:be:39:23:c1:
                    62:ac:63:b0:a8:38:3f:7a:f5:ac:3c:29:fa:23:5b:
                    20:e8:07:37:ed:89:dd:70:20:38:e1:0e:be:6d:69:
                    a0:cb:d2:cf:d9:d5:d5:f5:91:f4:5b:2c:26:87:e0:
                    cb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:06:68:C4:4E:1E:96:5D:19:F3:B8:D8:87:6F:46:8A:18:6D:00
            X509v3 Authority Key Identifier:
                keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:55:25:41:c1:e3:2c:dd:db:46:47:b0:78:f4:9e:b3:df:
         9c:b7:73:49:26:6b:ca:a8:45:59:ad:84:6a:b4:38:3e:6a:6a:
         c8:01:13:7f:d6:59:24:7e:62:20:89:39:d7:26:64:d2:9e:89:
         f8:1c:f3:6a:e5:30:e7:74:47:04:fd:f6:92:db:df:71:e2:64:
         02:20:ed:1e:db:98:84:31:97:3c:85:bd:d1:0c:4c:63:22:70:
         d7:60:92:0a:a2:02:3e:fe:8b:b2:5e:5b:de:ae:dd:56:08:d4:
         9b:60:b7:5e:d7:fd:a4:d1:cc:ce:98:24:2f:52:a3:4b:3d:6f:
         08:34:90:d0:d4:b8:b1:09:f3:8a:e6:92:b0:ac:f5:df:d0:27:
         d8:98:b5:99:77:e8:04:6d:ac:e7:23:14:e6:d9:c6:a9:70:96:
         da:b4:35:08:7b:2e:96:3d:ce:ee:42:f9:ba:70:1f:db:44:b7:
         79:91:79:d9:c0:2d:9f:e3:a5:98:98:89:be:22:79:45:e7:b7:
         b0:50:9d:4f:28:b1:02:b3:fd:c3:8a:52:ab:aa:8f:19:5d:1f:
         85:73:ca:05:1f:20:c7:b5:b7:8b:32:7f:0e:61:55:1d:db:70:
         d6:dc:4e:51:68:e2:3a:b1:85:72:ae:bd:09:2a:07:0e:80:8b:
         19:5e:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:55 2025 by rpki-client