Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft
File:                     9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json)
Hash identifier:          0CIkeVObqIbwMR/y4fN6+R0UebpAs3ZNVMgBrPdiM6A=
Subject key identifier:   63:DF:2B:CA:57:E9:DD:92:34:39:84:4A:23:E7:96:4D:33:42:BD:79
Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9
Certificate issuer:       /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
Certificate serial:       5E0E7D5D5309CAE1533474196634E3AE4495C74C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft
Manifest number:          CD
Signing time:             Fri 31 Jan 2025 16:58:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:53:50 +0000
Manifest next update:     Sat 01 Feb 2025 18:24:50 +0000
Files and hashes:         1: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: GrklC+iJFrsRI0w34SWrbnIjXmvJwXpX2cd9jvwvrmw=)
                          2: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: B6daVyJaghirt79xvfIbfN4GpwDsvjw5NaxWiYZAtfI=)
                          3: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: 8P+zwxAFJPnLOW1Vp9JGd6D+gSHj3ACNZhhQQcc548c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0e:7d:5d:53:09:ca:e1:53:34:74:19:66:34:e3:ae:44:95:c7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
        Validity
            Not Before: Jan 31 16:53:50 2025 GMT
            Not After : Feb  1 18:24:50 2025 GMT
        Subject: CN=63DF2BCA57E9DD923439844A23E7964D3342BD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:af:52:cc:d1:22:e1:3b:c2:b4:4e:d5:48:
                    41:19:45:3d:b7:2b:cf:14:f5:c0:94:45:7d:8b:16:
                    ef:90:6e:70:d0:ce:15:8d:e3:39:46:7f:14:d5:73:
                    ae:23:4c:ed:cf:15:0e:55:a2:0e:2f:45:eb:b1:b1:
                    a0:ca:ff:3e:51:5d:cc:60:13:d8:0b:45:e4:b9:3d:
                    4e:63:08:8a:02:d8:17:00:6d:69:17:67:5a:1a:2a:
                    2e:a3:3e:3b:0a:ea:ff:a1:53:f5:c5:9e:2f:cd:7f:
                    a5:8e:5e:90:97:9d:d7:5b:3f:f7:3e:97:9b:63:6d:
                    60:bb:d9:28:dd:a8:7f:2b:e4:85:81:17:cf:ca:7c:
                    ae:34:85:c1:7c:b8:e6:04:1d:73:c0:49:2a:5e:fe:
                    94:09:f9:45:02:d9:2a:bd:44:11:b8:ec:ca:bd:ba:
                    0f:d5:5b:78:35:fd:75:fc:c9:f9:dc:fb:d7:38:db:
                    ee:5f:63:09:4f:49:c2:01:46:f6:d1:99:7d:b7:b1:
                    0c:ea:25:42:49:27:54:c1:f6:6b:43:7d:16:49:78:
                    64:cd:0b:5f:f4:87:8e:2b:6e:1f:8c:af:2a:a9:6c:
                    b2:87:6d:3f:77:8f:27:f2:ad:b7:fc:d7:9c:1e:21:
                    5d:41:e6:33:e4:5e:d2:ab:9b:54:27:14:21:b1:c9:
                    17:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:2B:CA:57:E9:DD:92:34:39:84:4A:23:E7:96:4D:33:42:BD:79
            X509v3 Authority Key Identifier:
                keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:29:5a:31:e7:fb:5e:22:aa:31:22:6c:33:00:31:d0:c0:06:
         dd:ef:b7:0b:00:e0:a4:8b:99:7c:b4:1c:16:2a:36:f6:a5:1a:
         08:8c:45:39:3b:a7:9b:18:5f:32:2a:df:d4:26:88:83:1a:09:
         76:f4:b5:82:85:40:e9:cd:7b:36:03:5d:00:2b:4a:dc:bd:68:
         33:88:55:72:79:f2:ff:de:97:da:3c:8e:53:30:f6:26:fe:44:
         b3:98:bc:74:20:15:08:43:99:dc:fa:ad:f0:ca:1e:14:eb:75:
         91:a5:97:15:33:77:b1:2c:25:ee:f1:7f:a5:9f:0e:c1:86:90:
         11:ed:e7:ef:61:7b:ff:a7:2f:0d:80:2b:85:59:8a:c0:fb:f4:
         3c:65:42:76:01:9a:7f:16:bd:2e:a5:8f:8a:8c:2d:fb:8e:f0:
         10:5a:3a:11:4a:13:69:b2:80:80:40:e2:19:43:51:d5:eb:d7:
         ea:48:d2:4f:e0:16:35:10:3d:f5:c9:39:82:22:6d:21:03:2e:
         2d:2e:ab:f6:bb:5e:4e:6b:e8:2b:23:6a:6d:04:ab:d0:29:7f:
         87:98:f0:af:3c:e5:9a:b2:2b:94:0d:b4:0f:0d:57:09:bc:ff:
         2f:bc:2b:4a:46:e0:1e:12:29:38:ad:80:8d:12:a0:e4:d0:37:
         45:c8:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:42 2025 by rpki-client