Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          i/m+2BVYkMqPrudXYfwfBnyWOLNMB99CL8EWE3aOznU=
Subject key identifier:   76:5A:EA:48:BE:A2:B3:25:7B:C3:7C:9C:97:B2:DE:88:08:8A:04:AB
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       4598D85922C1C9151DA0943D4020B9EAAD18FED7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          018C
Signing time:             Fri 31 Jan 2025 13:28:09 +0000
Manifest this update:     Fri 31 Jan 2025 13:23:09 +0000
Manifest next update:     Sat 01 Feb 2025 15:47:09 +0000
Files and hashes:         1: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: +9TZTGANkpW1zziKoDPvB8PlUwiUBer6OqbCHROnHSg=)
                          2: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: L/cSy8NdupdNAKpYd2hH14G1j1Jgr4H0n4wcsOk0nxI=)
                          3: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: BMSHskA7eGlgmNW1dmHOa8yr5u/ceVTURo4WIEkrUgw=)
                          4: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: RhD7JNWogcnkTENFHXtbyS5FrkdnwIw+ytvralrREaY=)
                          5: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: Fr6dHcp9+YBT/oz8zN1jDuF6f0XR0QBA08TlhB3TAVo=)
                          6: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: fmr8HWry3jZoMCHAgQTaqlIDiVjEZ/G4ajZdY0jXYt8=)
                          7: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: z39m1lqt0W7t+NFotInMsm9RjxCKfqyVnsU3OMAq/8Q=)
                          8: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: Htgmoiqd7OhnSC3CM8wKkKhJiSl43ctSd7QVkQaiGsk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:98:d8:59:22:c1:c9:15:1d:a0:94:3d:40:20:b9:ea:ad:18:fe:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Jan 31 13:23:09 2025 GMT
            Not After : Feb  1 15:47:09 2025 GMT
        Subject: CN=765AEA48BEA2B3257BC37C9C97B2DE88088A04AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:06:5d:32:6a:1d:2d:f0:a4:2f:21:33:40:
                    a1:aa:e1:9a:f1:94:ea:8b:88:50:c1:7c:78:cb:68:
                    13:19:9e:c2:34:0a:a1:d0:5a:84:9b:f1:9b:b2:1e:
                    45:01:6c:a6:b5:65:cc:a6:2b:49:43:8b:90:2d:52:
                    43:77:bf:90:75:65:73:12:1c:ae:2c:ce:04:18:e1:
                    f2:65:b4:f4:64:f5:04:1c:4e:d9:98:45:26:fc:85:
                    5e:a8:ed:50:72:99:a3:69:0a:8b:8e:04:9f:1f:f2:
                    83:a2:66:08:15:83:c1:53:3f:1c:c8:d1:b0:77:b3:
                    23:9d:e0:ee:2b:50:af:90:32:86:92:3c:b1:ee:0c:
                    a4:71:b4:1b:a4:72:28:ed:c1:db:fd:09:04:c1:0e:
                    74:69:34:21:86:0a:83:60:c2:74:14:4c:85:a6:cb:
                    17:b9:4c:ce:f9:a2:99:c8:83:dc:be:27:18:96:2b:
                    67:19:e6:3f:b2:ba:5f:16:5e:ae:30:9f:62:70:43:
                    7d:ae:42:c0:6f:63:12:62:46:09:bc:cc:8c:70:37:
                    c5:53:ea:2d:c9:72:fa:18:cf:0b:d8:04:21:2d:dd:
                    c4:2c:a6:4e:ba:19:70:3e:bc:33:3c:17:e0:5a:10:
                    74:4a:b5:72:17:b1:53:9a:52:5d:08:ef:7f:ba:49:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:EA:48:BE:A2:B3:25:7B:C3:7C:9C:97:B2:DE:88:08:8A:04:AB
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:68:0f:55:c7:ad:79:7f:10:2c:60:06:70:d3:20:22:a5:f0:
         cd:97:66:d5:0d:cc:2c:ba:68:ee:68:2e:ae:ad:e6:b0:ba:33:
         05:e8:92:f8:d2:24:3e:4b:4b:23:9e:f4:77:e6:6a:8b:e6:29:
         13:0f:bb:21:9b:e3:ef:25:2f:23:e1:97:88:af:b0:94:e6:b6:
         05:5b:64:d2:ad:ae:9f:36:53:c5:76:fa:04:4a:39:23:7f:d1:
         b1:bc:c3:48:97:cc:5d:20:67:39:3d:c5:02:13:8a:3b:af:1b:
         62:d1:2e:7b:2e:f1:d2:e1:79:54:5c:41:7d:5f:92:7e:62:8c:
         63:66:21:87:19:8d:19:3d:9e:6f:ac:4f:d3:4e:3b:81:43:34:
         d3:a8:d3:1f:59:9c:11:45:3a:1c:9d:c5:f8:a8:83:6f:63:d0:
         ef:42:19:45:98:a6:48:7e:cc:de:57:f7:e8:45:5e:c2:5c:5d:
         c5:44:7f:0e:cf:6b:6c:a2:26:47:db:ab:c9:96:8d:b8:1e:4d:
         7b:78:db:79:80:b9:37:09:ec:93:35:2b:e7:b6:c8:53:51:38:
         88:d7:8d:c0:b5:a4:b4:ba:fb:a5:5a:42:38:00:0c:d6:82:fd:
         06:b2:87:6a:bf:f1:53:74:f4:50:ff:5a:37:22:fc:45:af:09:
         d1:eb:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:56:10 2025 by rpki-client