Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
File:                     0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft (raw, json)
Hash identifier:          Mm2HG25VR/HuKmofYSWuRy3FU7XhJtm9xzbvZCsjxdY=
Subject key identifier:   6F:4A:7C:8E:AE:10:49:77:D1:AC:C3:17:3B:E6:C4:AF:AE:45:1F:4E
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       644410A14ECB61729B3FE13732518EA3D0079022
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 14:35:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:30:34 +0000
Manifest next update:     Sat 01 Feb 2025 17:25:34 +0000
Files and hashes:         1: 0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl (hash: 9V2/lqrbSBCyAyLNfyiUyydj3A4lNxOXxiUGdfrVfoM=)
                          2: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (hash: GbtBYK7tURSpirrclKHm/q3LG/8pc+6VAzL3zzPx3w4=)
                          3: 3133382e302e3131322e302f32322d3233203d3e20323634353434.roa (hash: t0HlX2PxrzIfkYvkgk3DqFDq9MqwfjNIT0gSyEmkw1A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:44:10:a1:4e:cb:61:72:9b:3f:e1:37:32:51:8e:a3:d0:07:90:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Jan 31 14:30:34 2025 GMT
            Not After : Feb  1 17:25:34 2025 GMT
        Subject: CN=6F4A7C8EAE104977D1ACC3173BE6C4AFAE451F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:ff:16:ab:04:54:a6:d4:f4:8a:bb:71:91:
                    72:2e:be:08:0b:c3:2b:28:09:b6:fe:b9:51:52:ac:
                    8d:06:7f:11:9a:8b:74:cd:c9:f7:01:96:d7:d8:93:
                    ef:03:48:40:db:e6:29:29:64:00:80:aa:4a:f0:52:
                    30:d9:3f:33:0b:2a:59:4d:f3:0d:bd:fe:67:49:ae:
                    68:5b:4f:19:80:ba:9a:34:ee:14:59:96:05:15:c4:
                    00:24:64:84:82:28:93:4a:92:ec:7e:05:2d:53:e6:
                    40:40:b5:7a:8b:0d:54:27:08:f9:46:90:84:1f:2f:
                    7e:88:34:17:ff:97:ff:57:5c:1d:f3:a7:b4:48:63:
                    1f:b9:84:14:63:a7:48:50:3d:01:12:1a:57:a4:38:
                    f7:b3:9c:88:17:99:75:bc:b8:39:9d:16:79:59:3e:
                    c7:35:65:b3:06:f6:73:69:c9:74:ba:d6:1e:f2:2b:
                    7f:f7:16:20:95:0f:81:09:38:33:74:75:56:bb:90:
                    d4:7b:6c:86:6d:8d:09:d6:d9:6e:49:ef:db:0e:b6:
                    e8:d5:5c:fb:84:17:b6:82:f8:cb:a6:70:42:b1:cf:
                    10:48:ec:b1:59:97:c0:5b:1c:97:a8:b6:3c:9a:c6:
                    8e:56:20:70:8f:9d:0c:d5:b6:62:1d:70:6d:0c:9f:
                    3a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:7C:8E:AE:10:49:77:D1:AC:C3:17:3B:E6:C4:AF:AE:45:1F:4E
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3a:66:f5:0e:90:8e:88:fa:85:bc:e2:23:0a:e1:76:75:73:
         00:fd:3a:9d:e8:18:82:58:bb:63:9f:7c:29:e7:03:0c:d6:ba:
         52:64:8f:38:23:63:48:e2:ec:f7:33:bb:75:0e:12:b9:e9:7f:
         2d:99:22:b1:41:71:99:3c:3c:e1:b6:fd:23:e4:16:f5:27:b3:
         6f:35:34:c3:cf:5c:c4:8e:90:6a:d3:e5:86:13:33:4c:ec:5d:
         0d:5b:74:e9:4e:1c:32:1d:5e:65:19:8a:b0:cb:f4:c4:9e:a0:
         02:7a:43:7d:f2:f8:57:43:98:38:3e:d1:ab:99:d5:28:42:dd:
         65:78:5e:38:05:87:3f:88:5f:9a:73:17:6d:54:bd:83:9b:34:
         9e:53:ec:20:30:d9:26:c8:60:f7:22:55:fa:da:34:60:0e:f0:
         b3:e4:d8:c5:3d:b9:e0:e0:65:8f:f2:91:f6:98:0a:d0:41:cd:
         85:f1:b1:e9:ab:d8:2e:8d:83:0b:0a:37:0d:80:60:9b:a7:67:
         37:bf:c2:08:76:dd:e0:b2:71:e6:26:9c:ce:82:31:8a:5c:87:
         69:05:29:99:0c:ba:23:ac:4e:e7:1a:c0:8b:ec:1a:7f:27:99:
         d2:87:de:ec:9e:55:fc:53:6b:c3:32:94:d4:54:06:c4:e9:a7:
         75:7b:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:06:12 2025 by rpki-client