Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft
File:                     A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft (raw, json)
Hash identifier:          63WuOzClwr8aaQbkVXxLW5hJlj2XIu9rpBX8judJEKg=
Subject key identifier:   56:DC:05:E4:7F:D4:3E:32:2F:9E:F7:F0:76:D9:76:6B:90:73:F3:3C
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       76AF6EE3AAD661BDACBC578B28F61A42BA61E22C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft
Manifest number:          0192
Signing time:             Fri 31 Jan 2025 04:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 03:55:53 +0000
Manifest next update:     Sat 01 Feb 2025 06:12:53 +0000
Files and hashes:         1: A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl (hash: 2I+694W/iGlWBfBW0zwbTtvFCMiTu6nOFto+kfhbA9w=)
                          2: 34352e3232362e39322e302f32322d3234203d3e20323636393932.roa (hash: Z1r8kkaLaUmL+yvmGkHP+Ns8GPrPuGvVThoKvT0Ic94=)
                          3: 323830343a343637633a3a2f33322d3438203d3e20323636393932.roa (hash: 821W2LCNXVN/lOG41Rq8QjUVJM6cnj4zLl84JbXg+MI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:af:6e:e3:aa:d6:61:bd:ac:bc:57:8b:28:f6:1a:42:ba:61:e2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: Jan 31 03:55:53 2025 GMT
            Not After : Feb  1 06:12:53 2025 GMT
        Subject: CN=56DC05E47FD43E322F9EF7F076D9766B9073F33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:94:cc:21:cb:b1:72:85:c7:0f:f3:2b:c1:
                    c0:80:38:ee:09:f6:7f:7f:8a:a6:9b:1f:83:01:ba:
                    66:16:99:f1:ff:f0:98:ab:63:9a:83:cb:54:5a:db:
                    57:9a:f0:2c:e8:7e:1d:d8:62:e1:f5:dd:cf:b5:29:
                    94:04:76:72:39:4a:80:02:8f:cd:e9:57:3a:fd:a1:
                    cb:0d:0b:7d:e1:9e:28:5c:fe:f9:a0:e6:7a:6b:47:
                    28:a9:bf:74:72:5b:c5:47:bd:f3:62:94:b6:b3:0e:
                    76:be:c8:99:c1:a3:79:da:b3:54:96:94:ee:a8:16:
                    30:b6:b2:e9:91:c3:ff:84:2f:7f:89:7d:f0:95:ce:
                    30:91:76:0a:ce:fa:4b:cc:53:85:e1:33:18:21:fa:
                    ab:69:67:b9:52:8f:75:5e:b3:93:ee:8e:0b:3d:64:
                    08:52:f4:60:58:72:60:3f:a0:95:20:cd:e7:8c:fe:
                    30:dc:43:7f:52:bc:28:e3:c0:57:5e:9e:90:53:54:
                    37:5e:d7:6d:25:79:09:d8:b5:a5:d0:35:2b:bc:d5:
                    d3:b1:f0:ae:aa:0a:88:f5:4a:6d:7e:cd:dd:50:95:
                    44:34:5a:cc:8f:c6:39:7d:34:87:4a:04:e9:45:79:
                    21:65:7e:76:66:de:8b:f0:6f:4d:61:e0:b3:46:d5:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DC:05:E4:7F:D4:3E:32:2F:9E:F7:F0:76:D9:76:6B:90:73:F3:3C
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:08:0a:b8:bb:6d:68:6b:89:12:e0:4f:77:6d:29:39:b3:96:
         74:b8:79:4f:6a:a8:94:18:80:20:58:e9:89:24:70:db:2b:7a:
         0c:b5:93:78:aa:40:11:56:ec:b2:3d:01:fc:60:39:15:78:4f:
         a3:37:92:6a:8c:58:01:b1:2a:e9:2a:f7:6c:71:b2:7c:12:4f:
         ab:c1:74:97:e0:6b:ae:34:1c:d6:d2:2a:7e:65:84:ea:56:48:
         db:ee:bb:39:ac:09:34:ce:e1:9d:91:f3:82:b4:95:01:b3:85:
         af:5b:80:71:f4:e6:bb:10:94:50:93:cf:87:be:f4:91:2c:09:
         3c:23:b5:45:d3:b3:73:5f:f8:d7:1b:78:8b:b6:f2:cb:39:29:
         fd:4f:92:44:59:7e:ec:f1:db:75:b0:82:75:1e:02:0e:2e:cb:
         54:18:15:b3:ca:5b:d8:2d:f4:80:d7:e9:8b:6e:30:4c:e3:66:
         cd:4b:c8:61:76:36:b4:9e:60:7c:81:10:8f:58:9b:89:df:4b:
         a0:1b:0e:cd:c1:72:5e:02:a7:3b:3f:e0:33:18:94:7f:be:93:
         a2:93:13:0d:b0:ca:7d:7a:92:3b:61:d0:1f:cd:e7:f9:fe:b5:
         1d:9b:03:f2:f9:f4:07:22:16:d6:14:56:dd:a6:e1:a0:51:07:
         cc:3c:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:20:11 2025 by rpki-client