Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
File:                     0B31CCC1E89F4389597737BE4B57373331925A2F.mft (raw, json)
Hash identifier:          lYXg3/eezfMgfAgYJH0NDUyTlsz5AF2418Y6k3gTZ3Y=
Subject key identifier:   56:A4:0D:BB:C6:30:8A:A8:62:13:2F:A8:96:E4:23:3D:F3:30:FE:7D
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       48DF3A23651ADC653ACB29277D834A4406D25AB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 11:03:19 +0000
Manifest this update:     Fri 31 Jan 2025 10:58:19 +0000
Manifest next update:     Sat 01 Feb 2025 14:24:19 +0000
Files and hashes:         1: 0B31CCC1E89F4389597737BE4B57373331925A2F.crl (hash: +aLbeSbtHu941RTkq9OztV020HhcFg9xeeTgA6HlUoo=)
                          2: 3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (hash: Cl5+d6DisGJXMVUEXBm4XXeVfUbKu9OI8jMZn7DaS8Q=)
                          3: 323830343a323262383a3a2f3332203d3e20323634313138.roa (hash: F35oR4HKO0d9SBUe8tMIRByH27AQSaQui124ViBYAuQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:df:3a:23:65:1a:dc:65:3a:cb:29:27:7d:83:4a:44:06:d2:5a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Jan 31 10:58:19 2025 GMT
            Not After : Feb  1 14:24:19 2025 GMT
        Subject: CN=56A40DBBC6308AA862132FA896E4233DF330FE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:05:e1:b2:46:fa:50:63:1b:ff:3f:a4:0a:
                    c4:57:07:d1:e7:e7:b8:46:73:0c:9b:84:4b:5f:1b:
                    a8:11:16:26:3b:d3:8d:3d:0e:42:03:8c:29:2f:a1:
                    8b:f4:a3:f3:57:08:33:8d:b2:00:61:59:45:c0:22:
                    86:03:de:12:7d:78:79:af:3f:71:5c:83:0a:7e:16:
                    c4:bb:74:18:75:25:28:99:1f:92:67:41:32:a3:f1:
                    76:c6:51:dc:ec:fe:33:fa:91:9a:83:28:a6:52:45:
                    e8:7d:c8:82:dd:62:12:ae:15:86:32:0e:59:83:4c:
                    3f:8b:aa:22:da:62:77:2a:e4:48:34:c0:7f:b1:81:
                    02:4d:70:4c:5e:df:2b:de:ec:80:23:58:ce:14:e3:
                    f3:90:8f:11:e2:9b:43:b7:1c:5a:6a:76:e6:d0:97:
                    67:46:75:3d:8a:0a:81:9e:cb:15:27:72:c4:11:4a:
                    51:f6:d5:f4:de:05:a4:49:48:bc:20:1d:95:fd:f3:
                    94:ad:35:f5:a4:fe:5a:ea:73:5a:15:21:37:dd:15:
                    f7:f4:25:d4:72:f6:b0:2d:db:3d:2f:f6:b4:74:5e:
                    76:f9:79:af:e4:d4:7c:e4:09:28:0c:1d:b7:c8:a4:
                    88:0c:1d:0d:1e:34:b8:4c:6f:fb:a7:da:2f:63:f6:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:0D:BB:C6:30:8A:A8:62:13:2F:A8:96:E4:23:3D:F3:30:FE:7D
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:41:69:67:c6:e3:a2:3b:a5:57:9c:0a:bc:22:1f:b4:d8:a6:
         e9:79:29:1c:f5:35:cc:64:6e:3d:5f:60:a9:fa:39:73:c0:b9:
         fb:2e:df:a0:8d:77:db:50:21:8e:ed:a6:56:46:70:40:7f:f0:
         75:e3:6c:fc:73:1e:de:87:3e:9f:a0:19:ac:ba:31:cf:18:96:
         3b:28:22:f4:b3:1a:69:cf:11:00:ec:15:60:21:18:3f:6c:34:
         ff:f5:bb:d3:95:71:3a:13:5c:a7:d6:d8:26:25:a8:c2:6a:1d:
         f0:eb:a2:d8:e6:29:93:1b:b5:45:ac:bd:75:3d:0e:2b:7c:45:
         92:ba:3b:2b:90:a3:00:48:6b:42:18:e2:1c:13:50:78:bb:f0:
         ba:7d:bd:da:d9:7d:77:be:ca:b0:46:13:a1:2f:99:58:dd:af:
         e7:34:15:3d:34:c8:9e:fb:14:77:03:44:28:ff:d7:9f:29:4e:
         c5:61:69:39:c2:49:dd:90:23:1b:e7:4a:67:7d:be:1d:87:a9:
         44:7b:99:e4:07:00:3d:3f:b4:6c:b5:93:44:d4:1c:c8:a4:40:
         9d:b6:2a:a1:c7:c1:5f:2f:94:74:92:df:f1:25:24:8f:2d:8b:
         51:18:6e:0a:cf:6a:05:fa:e2:23:e2:37:27:ba:3f:e8:03:ca:
         16:0b:42:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:24 2025 by rpki-client