Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
File:                     1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json)
Hash identifier:          5PIKh00RtTvE15aX4NSVRf46uwW4MosAiXn9Kmwg8Z0=
Subject key identifier:   E8:62:61:FF:43:A4:13:7E:32:3F:36:58:67:EC:40:F3:B7:70:D6:DE
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       16BEBF95A5D0AB1B6642275DA662FFDA0B477E42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 09:29:59 +0000
Manifest this update:     Fri 31 Jan 2025 09:24:59 +0000
Manifest next update:     Sat 01 Feb 2025 12:22:59 +0000
Files and hashes:         1: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: Qa5VSypv6LIVNBE4SdJKXnJFN1ru42sJm+bG+akeur4=)
                          2: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: Xek9wAOe0YuqsCtpm3fpvUJsZFd3/e1z0yuC1+TwbuY=)
                          3: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: yCUJSwqXs41QXtayuzb/b8HZocYrp3jHk4xYWSN0VC0=)
                          4: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: 1byP+ccNZltr1mTxw0d2n0+aurYvODXkQQg1aBq3dKY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:be:bf:95:a5:d0:ab:1b:66:42:27:5d:a6:62:ff:da:0b:47:7e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Jan 31 09:24:59 2025 GMT
            Not After : Feb  1 12:22:59 2025 GMT
        Subject: CN=E86261FF43A4137E323F365867EC40F3B770D6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:89:64:3e:bf:c1:6e:a9:41:2f:21:d7:60:
                    b3:59:a9:47:a9:c1:f8:98:0b:53:11:39:ef:90:fc:
                    db:3e:5d:01:29:58:80:b4:2e:1d:ce:ba:d0:80:ea:
                    1b:2d:71:93:c9:ca:24:8c:7e:26:f8:4d:c3:20:0b:
                    5d:52:46:39:1e:b0:79:71:56:22:ca:4a:45:94:ce:
                    8f:42:8f:78:1c:61:9e:b1:f5:c9:f7:2f:34:b0:76:
                    36:2b:a5:a8:da:fd:36:68:47:c9:94:ef:6e:07:03:
                    49:86:47:2a:40:b0:30:e0:38:8e:0f:df:aa:77:a9:
                    0a:24:0e:8d:6d:be:51:30:61:07:ee:04:62:50:74:
                    2c:ca:a2:72:cf:6f:54:fb:a2:07:3a:9b:83:23:45:
                    bd:2e:33:5e:17:27:be:e3:b8:3a:9a:4b:00:fa:e5:
                    ad:fe:08:a4:26:3f:39:70:b8:99:c4:9e:be:05:95:
                    bd:97:56:f1:ed:6e:ba:7f:94:cd:0d:fd:b9:8d:44:
                    62:0b:24:2c:33:54:ca:5d:15:ca:ff:86:53:ea:67:
                    64:fc:76:72:3d:b2:46:d7:16:02:33:f6:47:ce:56:
                    18:14:01:a2:a2:74:32:61:d1:ba:8b:f4:c7:0b:16:
                    72:e2:f0:48:22:09:3c:cd:a1:b5:b3:74:fd:b4:c8:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:61:FF:43:A4:13:7E:32:3F:36:58:67:EC:40:F3:B7:70:D6:DE
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:da:9e:b6:3e:52:6c:ed:65:88:e3:f8:ab:6a:6b:aa:f9:c6:
         6e:99:6f:a8:a6:32:81:05:e9:37:1a:09:68:8a:98:fc:e3:9e:
         ee:23:7b:4d:da:19:92:7a:9f:f3:a9:40:0d:54:52:5b:63:05:
         1a:43:3e:4b:da:6e:37:b5:50:95:10:b9:57:42:ae:39:6f:39:
         c1:6c:08:84:4c:d6:59:ee:74:de:ce:ba:d7:dd:cf:3e:2c:df:
         3d:70:55:b9:a3:18:ee:9e:73:89:f4:11:38:b8:ba:c0:d2:ad:
         4c:d8:5f:e2:ed:09:66:de:49:06:75:36:89:6a:da:50:ca:88:
         35:cc:a1:56:bf:1a:a4:8a:72:5c:f1:25:71:cd:84:f5:db:a3:
         a0:8e:c3:87:34:8e:bd:70:ba:89:f8:32:da:89:b4:1e:88:0d:
         2e:11:90:87:e1:d0:92:03:34:fb:8d:d8:1f:60:0f:2b:47:88:
         6c:56:ee:ec:a5:ad:dd:d4:a6:ad:58:77:eb:44:fb:50:21:e0:
         37:1a:63:f9:13:a0:88:b0:b1:2a:b4:3b:b8:92:c8:a8:41:c7:
         d8:12:2e:eb:9e:93:66:25:0c:be:f3:45:17:43:d0:99:87:36:
         c5:56:85:6e:e6:fa:45:94:40:e9:ed:60:ff:61:83:96:d0:10:
         13:c0:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:10:44 2025 by rpki-client