Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
File:                     259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft (raw, json)
Hash identifier:          RQf/1YZT0X5LM5gXRkb4zT00u5mI1y66i48ngfwr41o=
Subject key identifier:   1A:46:27:A2:CE:9F:02:BA:69:78:12:04:CD:57:B6:68:78:D3:8B:B3
Authority key identifier: 25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8
Certificate issuer:       /CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
Certificate serial:       0A5DF481F582ECBC77A5FF28A3AD5873B7355F12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft
Manifest number:          0190
Signing time:             Fri 31 Jan 2025 17:36:10 +0000
Manifest this update:     Fri 31 Jan 2025 17:31:10 +0000
Manifest next update:     Sat 01 Feb 2025 18:50:10 +0000
Files and hashes:         1: 3137392e34322e342e302f32322d3233203d3e20323731313034.roa (hash: OIWe4zjEMEVRcLVdPwmRkjjjMtKTojmN3Xo/XDVrjj4=)
                          2: 323830343a373635343a3a2f33322d3332203d3e20323731313034.roa (hash: tXf92sU1csxoG+6D5pR9BVd38DBF0c6Ja+Z0a7TV4Is=)
                          3: 259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl (hash: JnZDOpoT+uRrSQr0v7qFLhN23vY0ReMIVbXoWse9cMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5d:f4:81:f5:82:ec:bc:77:a5:ff:28:a3:ad:58:73:b7:35:5f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259DB4929D665CEEC7F02CF9D9535840B0D17DB8
        Validity
            Not Before: Jan 31 17:31:10 2025 GMT
            Not After : Feb  1 18:50:10 2025 GMT
        Subject: CN=1A4627A2CE9F02BA69781204CD57B66878D38BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:0b:d9:1b:fd:27:9d:b2:d9:11:d1:cf:71:
                    09:35:43:0b:a9:13:2f:30:fe:65:05:11:7f:e8:92:
                    8a:7f:c5:a2:57:3e:94:e0:b6:d7:35:7e:e3:f0:9a:
                    16:cc:77:df:44:95:c2:f1:fb:80:79:c8:e1:50:de:
                    a6:fe:74:99:f7:38:87:bb:f7:ee:f3:c7:6b:f3:39:
                    77:bb:ec:fc:0d:3b:d0:38:23:f6:ea:70:5c:35:d9:
                    57:13:cf:e0:cb:ff:69:cb:3a:70:be:81:5a:db:aa:
                    69:e3:47:a9:80:07:9e:29:ff:67:ab:16:f6:ac:7c:
                    3c:10:b3:99:b1:55:88:98:c1:cc:d3:40:8b:80:a5:
                    d5:de:1e:5e:04:bc:4e:17:fe:9e:90:fd:6b:67:e1:
                    7e:e8:4a:9e:f2:90:59:8a:30:7d:a8:b0:39:88:25:
                    36:36:00:02:77:88:a2:fa:bc:d9:37:c7:95:2c:d7:
                    a7:91:be:6e:07:e4:02:d2:a8:f8:b7:ef:de:be:eb:
                    f9:85:3c:76:0a:a9:ba:a3:50:f3:26:32:ab:31:7a:
                    a7:ac:16:a5:21:a5:56:38:2e:80:3d:ef:bf:ac:8a:
                    b1:d4:fe:df:37:c6:6a:ab:11:d9:c6:cd:ef:ee:1e:
                    db:be:00:8e:75:1a:31:d6:1b:0a:51:01:53:aa:ea:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:46:27:A2:CE:9F:02:BA:69:78:12:04:CD:57:B6:68:78:D3:8B:B3
            X509v3 Authority Key Identifier:
                keyid:25:9D:B4:92:9D:66:5C:EE:C7:F0:2C:F9:D9:53:58:40:B0:D1:7D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/2/259DB4929D665CEEC7F02CF9D9535840B0D17DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:e5:55:81:16:a6:4e:dc:93:47:07:a8:85:1e:fb:a3:9c:
         a1:c1:2d:15:21:25:8e:df:c4:ef:61:09:3c:6f:d6:48:ef:44:
         e3:f1:70:e6:e9:ea:1c:25:8e:16:68:63:e4:d1:76:d2:a5:02:
         d6:b4:d6:5b:90:c8:b1:3e:94:c3:ec:1a:3f:c2:de:56:02:00:
         48:36:0b:26:ab:c2:26:ec:77:95:56:bf:5e:40:f8:21:c7:92:
         af:cc:d3:ee:16:d6:b4:63:ec:a5:31:e4:04:60:ec:d7:02:a4:
         ce:2d:0f:60:37:b2:44:37:15:64:f3:3e:d8:4a:f4:24:e4:e1:
         1d:cb:99:a8:ec:38:ba:54:b6:c9:6e:c9:b3:93:cc:ec:c9:bd:
         8c:90:f9:2b:67:2c:d7:8e:e7:30:cd:81:5a:c8:c2:5d:c6:69:
         9c:a7:0c:f2:68:30:0c:b1:09:8b:ee:1c:71:b8:43:56:49:09:
         52:8f:10:c5:29:8b:ea:4c:90:1a:fe:cc:ff:90:02:ca:aa:73:
         a2:71:3a:dc:74:f6:dc:1e:16:0e:89:db:d1:0a:b5:78:dd:51:
         37:e3:2e:bd:f8:25:2c:64:e8:1e:94:57:24:c0:03:79:03:c0:
         2a:88:c9:2f:a2:05:c3:62:57:11:8e:a4:c8:26:ad:ff:5d:69:
         30:85:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:36 2025 by rpki-client