Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          sWKZ4Hkt58u0asQIlZmLx0yvmTrhPnWtYMvOlADP6LY=
Subject key identifier:   B5:E6:79:8C:38:DD:AD:02:A2:44:30:28:53:EC:FD:68:D8:82:37:E4
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       25B8AD77CF89ADBF8A62CE01F736BF2FC1D5178D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          0191
Signing time:             Fri 31 Jan 2025 12:45:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:40:19 +0000
Manifest next update:     Sat 01 Feb 2025 13:09:19 +0000
Files and hashes:         1: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: soPTYDQFn4mlub/jAVuw1UL7njDbevb3HjyBT8XXy6U=)
                          2: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: aKY141EfAaA37XN03Q6CpU0qCMrX758xZHivfrKvhUA=)
                          3: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: WgLPUWbopOZUFs5oQLdKQnBgxB12YPbN0k2ECBWNoVc=)
                          4: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: eiw0eTzymdl+OlfR0nT8nXYGXnOGiiZX42fMdMhzxUY=)
                          5: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: dccJ0RTJgBkmoLXWoYtC/9gsEbtGwKwahHhDApG7+xY=)
                          6: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: 2dRMWOgdkymGvJa0sOGjGRDSeDaBqxH3lWLSDJ6J2kI=)
                          7: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: rEiO5pll376/CUP5vC9XaOcpXFgt2tZBdE/3k1vPRsM=)
                          8: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: TV60F90sQodx2n6kQJsN8Ms9JLOP8hQUNbiowybKdGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b8:ad:77:cf:89:ad:bf:8a:62:ce:01:f7:36:bf:2f:c1:d5:17:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Jan 31 12:40:19 2025 GMT
            Not After : Feb  1 13:09:19 2025 GMT
        Subject: CN=B5E6798C38DDAD02A244302853ECFD68D88237E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:80:85:82:82:1c:5b:2a:79:df:da:c2:e6:
                    85:68:1e:94:e2:52:bf:6b:fc:14:d9:48:3c:aa:26:
                    0c:fe:40:f5:81:7e:74:3f:0d:e4:10:a8:3d:0c:f8:
                    8d:f4:85:f4:3c:72:0f:91:73:ce:26:94:1d:d4:d3:
                    a1:8b:17:8b:f2:dd:2b:01:c4:28:78:20:af:f5:a6:
                    ee:66:66:99:96:e5:d2:1b:1d:2b:7d:da:d4:4e:5f:
                    e5:03:5c:ae:b6:00:1a:af:4d:16:67:64:56:0a:14:
                    ca:fc:a7:9c:cc:5d:bb:62:71:53:e0:d5:7d:5e:8d:
                    09:6d:26:ec:b5:d6:65:b2:58:2f:9f:08:ec:e7:d6:
                    69:92:d0:76:5b:9d:0c:86:f5:bc:c1:ab:3a:9a:c5:
                    a5:4c:e3:3f:01:80:be:30:25:1f:42:36:0f:ed:2d:
                    63:ae:96:2f:00:23:b5:5e:41:96:67:3d:f4:01:33:
                    51:ee:e8:5c:08:dc:a2:90:50:b5:17:6f:7d:30:62:
                    c2:a4:df:98:0a:4c:29:0c:ed:5d:23:e8:f7:76:1f:
                    a6:97:d9:2a:de:8a:ce:70:7e:51:5a:08:92:11:96:
                    27:79:62:bb:20:ea:e8:b0:4d:64:0d:07:ed:28:68:
                    b9:00:5d:54:85:4d:2f:ef:60:f9:67:46:f9:62:62:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:79:8C:38:DD:AD:02:A2:44:30:28:53:EC:FD:68:D8:82:37:E4
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:92:49:1a:ae:24:87:88:80:8f:c3:15:7c:bd:1f:70:40:
         e3:7d:40:9d:e4:73:04:4a:21:bc:83:e5:92:53:a2:e2:62:07:
         b6:83:13:59:a2:46:67:1f:ab:06:25:91:6b:f4:aa:b4:8b:f3:
         da:2e:a5:bb:69:6f:cf:79:de:8e:34:1d:49:2a:d3:05:b8:9d:
         ad:c9:9b:6c:2d:a7:22:2f:27:cb:1d:ce:6e:0b:0c:9a:2a:5d:
         5b:43:13:41:5b:a4:2e:49:b3:bc:85:c8:f1:f2:b9:a6:13:8d:
         57:cc:f2:ec:60:b3:57:c9:e9:44:f1:22:d2:19:dd:17:b7:d7:
         fd:9e:65:27:78:57:9b:c4:23:8b:42:55:88:af:f2:85:a8:fd:
         52:99:8e:af:3c:2c:47:6c:fb:23:58:a1:43:db:a3:96:87:e5:
         6c:ff:4d:bd:39:b3:da:2a:29:8a:f5:a3:ba:38:50:09:ae:b2:
         c7:4c:da:75:ce:1f:19:7b:47:ee:de:15:bd:bb:2e:d0:07:21:
         51:df:ee:72:7b:a3:2c:29:c3:82:b6:90:bf:0d:60:14:25:d2:
         e8:6b:54:86:e4:51:a2:65:40:30:66:c9:32:b9:79:c9:55:95:
         08:21:13:1a:c5:93:25:6d:d7:84:4b:40:40:48:2a:bf:16:30:
         5a:e6:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:55 2025 by rpki-client