Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
File:                     AFE965BA817F79A154F92490C65530EB3402BE56.mft (raw, json)
Hash identifier:          solMQsKhLXZyN9YFf8QF/t2mVuaD4qCDyJDQw7/QDFg=
Subject key identifier:   9A:F9:34:C9:6E:33:E0:4A:6A:E9:4E:B7:82:E1:D6:06:B2:08:12:E9
Authority key identifier: AF:E9:65:BA:81:7F:79:A1:54:F9:24:90:C6:55:30:EB:34:02:BE:56
Certificate issuer:       /CN=AFE965BA817F79A154F92490C65530EB3402BE56
Certificate serial:       59BD575AF5F9762D49FA5C29B3368846244CB735
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFE965BA817F79A154F92490C65530EB3402BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft
Manifest number:          0157
Signing time:             Fri 31 Jan 2025 07:59:13 +0000
Manifest this update:     Fri 31 Jan 2025 07:54:13 +0000
Manifest next update:     Sat 01 Feb 2025 08:38:13 +0000
Files and hashes:         1: AFE965BA817F79A154F92490C65530EB3402BE56.crl (hash: n+URXbKUgDwAHbM3ZO25gT6JQJfAdQ0hOJNyjze0W50=)
                          2: 323830343a383839383a3a2f33322d3332203d3e20323732373831.roa (hash: ogXmgsUPfn3FL9M813rY0HbnRmpgsEwlGXok8zwESAA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bd:57:5a:f5:f9:76:2d:49:fa:5c:29:b3:36:88:46:24:4c:b7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFE965BA817F79A154F92490C65530EB3402BE56
        Validity
            Not Before: Jan 31 07:54:13 2025 GMT
            Not After : Feb  1 08:38:13 2025 GMT
        Subject: CN=9AF934C96E33E04A6AE94EB782E1D606B20812E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:cf:6a:06:00:0d:44:9f:29:a4:04:3e:86:
                    45:ff:7b:9e:88:c2:83:69:70:e9:21:b3:13:d7:a4:
                    8f:5d:f1:40:bf:b8:8d:74:34:a9:b5:b6:80:e1:bb:
                    6b:ea:f6:41:10:ab:85:08:75:d9:d5:73:f7:5d:b9:
                    2a:3d:b6:f7:21:74:4a:db:0a:bf:e3:05:c5:12:ae:
                    94:46:1d:5a:94:64:8a:23:c9:92:f0:ca:3e:54:56:
                    a3:c5:6e:bd:55:64:9d:81:31:35:94:e1:fc:2d:7d:
                    8a:14:82:ee:bb:19:a4:ff:2c:42:a4:3a:c2:05:04:
                    96:5a:d8:2f:b2:04:c6:6e:df:27:b5:00:7d:ec:b3:
                    63:28:ed:fc:e8:bd:16:9e:e0:18:c1:b7:1e:fe:3b:
                    c6:bb:4b:c0:45:5a:b4:d7:dc:ac:0f:36:a4:1e:66:
                    36:4d:c8:1e:22:06:e1:b5:6c:d4:19:33:f3:b1:07:
                    dd:36:b2:86:bd:e3:b0:e4:55:9f:fa:2d:0d:d1:f1:
                    a4:30:96:46:62:cd:01:de:ca:47:61:7c:d9:f1:0d:
                    03:3e:87:6c:9e:87:5e:77:c1:b3:72:a9:35:8e:a9:
                    20:95:24:f7:a7:18:c7:7e:05:f6:28:eb:ea:1a:e9:
                    95:f6:46:60:ea:b7:7e:bf:7c:49:b9:c8:1d:97:06:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:34:C9:6E:33:E0:4A:6A:E9:4E:B7:82:E1:D6:06:B2:08:12:E9
            X509v3 Authority Key Identifier:
                keyid:AF:E9:65:BA:81:7F:79:A1:54:F9:24:90:C6:55:30:EB:34:02:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFE965BA817F79A154F92490C65530EB3402BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYtctA17Kt71sFPy9Tz5M9RDurvKjxd3abCRfbPxsv16/0/AFE965BA817F79A154F92490C65530EB3402BE56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:24:a2:5b:bc:1a:70:30:53:4e:26:69:fb:38:57:4f:7f:
         d8:27:f6:3f:15:9b:79:b7:07:c3:15:fb:b1:fd:8b:6d:30:7d:
         82:a1:66:f8:32:a4:ec:7b:a0:4e:9b:3e:b4:11:52:49:23:9a:
         3f:d5:4e:a6:09:27:99:ba:24:99:80:99:eb:7a:8b:ee:63:41:
         df:bd:d0:d5:5a:42:2e:25:ff:41:c5:2e:af:3e:90:06:b4:76:
         50:c8:cb:df:9a:b3:02:b2:e0:da:cd:46:a1:e4:2c:5c:c9:ca:
         d2:11:24:6b:33:d4:63:24:31:36:fa:07:24:37:08:21:4e:93:
         6f:6d:f3:81:50:9d:2b:9b:8a:59:7f:01:3e:0c:1b:80:da:d4:
         0f:35:ab:07:cf:a5:a4:9c:63:3d:c6:e0:ed:b7:c2:3c:d6:96:
         08:3d:91:1d:6b:03:20:5e:51:47:47:5f:2b:cf:30:57:b7:02:
         e7:70:b3:1e:23:b8:4c:a5:2b:1b:cf:d4:e2:06:c9:3c:9d:8f:
         fb:dc:87:33:5f:86:c4:04:07:c0:16:c7:f6:2d:85:89:93:f8:
         9f:63:b8:df:9c:7c:c0:5f:e4:4a:96:1a:17:09:5b:92:22:88:
         c1:4c:70:92:95:c7:74:9b:7d:09:24:0c:a0:00:36:fd:86:c9:
         98:d0:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:56:44 2025 by rpki-client