Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
File:                     43B19C9E57D3EDADD315DF0E16760E303285E640.mft (raw, json)
Hash identifier:          BILGRoOx0mA6VH6ow4iynhFZGgOATq1sNW1vkgngD8U=
Subject key identifier:   02:63:FD:6E:09:6A:83:C6:60:9A:A6:F6:30:B7:43:6D:28:7F:83:10
Authority key identifier: 43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
Certificate issuer:       /CN=43B19C9E57D3EDADD315DF0E16760E303285E640
Certificate serial:       3E89410EDC7962ABD03D78110CE4930878C2C939
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 08:41:50 +0000
Manifest this update:     Fri 31 Jan 2025 08:36:50 +0000
Manifest next update:     Sat 01 Feb 2025 09:53:50 +0000
Files and hashes:         1: 323830343a333330633a3a2f33322d3336203d3e20323635313133.roa (hash: AJN1lV6OGHgqGanDHwyEOSb/ImYoqMNVouDFgr6aH3k=)
                          2: 43B19C9E57D3EDADD315DF0E16760E303285E640.crl (hash: OYzeY8XugW/SDYqnieBZi6Oe3I9DJ5FMHedsTM9fM4M=)
                          3: 3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa (hash: UiGspnmzc4IpJQgEarPSgb2toNSnksgjBh+JN4EgY3c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:89:41:0e:dc:79:62:ab:d0:3d:78:11:0c:e4:93:08:78:c2:c9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B19C9E57D3EDADD315DF0E16760E303285E640
        Validity
            Not Before: Jan 31 08:36:50 2025 GMT
            Not After : Feb  1 09:53:50 2025 GMT
        Subject: CN=0263FD6E096A83C6609AA6F630B7436D287F8310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:a6:d3:be:b0:ea:c6:2a:16:1b:ef:96:59:
                    79:04:cf:df:d9:66:ea:c5:7c:a5:2e:aa:a8:59:15:
                    ac:cc:1e:85:5d:7e:d1:29:41:8e:71:09:9c:18:4c:
                    40:63:f5:7d:0c:59:73:9c:5b:ee:48:d5:c5:61:17:
                    8d:5b:d0:dc:64:0d:16:8b:ca:3a:55:d5:78:b7:00:
                    ee:db:b0:ba:8f:20:36:55:b3:72:db:ca:d2:8b:70:
                    21:e5:d2:50:79:05:d6:e1:dd:39:85:23:d6:cd:5a:
                    9d:2a:a3:fb:b3:af:4e:27:ba:19:bf:8b:92:fd:78:
                    c4:42:94:3f:b1:ff:d5:ef:04:86:82:45:4a:74:b2:
                    d5:3c:69:ae:e0:ae:49:55:35:c1:f6:81:a6:4b:14:
                    dc:cb:eb:c7:a2:5d:1f:85:df:ba:65:6c:c4:91:a1:
                    cc:3a:7e:af:c4:10:00:eb:43:26:41:ca:d9:4d:5b:
                    72:f7:6a:70:8d:e5:11:67:3c:24:fa:d1:57:20:c3:
                    33:5a:4e:19:57:cc:aa:f3:ca:6a:17:0e:90:08:90:
                    53:36:08:6c:03:cf:a7:9a:25:27:d3:99:16:c6:a6:
                    35:dc:78:9d:9a:bf:0e:c7:ca:f4:3f:db:fa:f7:5d:
                    57:45:2b:a1:11:fd:c5:3e:2a:e2:f3:64:37:32:b1:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:FD:6E:09:6A:83:C6:60:9A:A6:F6:30:B7:43:6D:28:7F:83:10
            X509v3 Authority Key Identifier:
                keyid:43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:45:8a:ac:87:bf:ff:2d:60:16:db:ba:6e:fc:cf:f1:f9:
         bf:f3:db:4b:9d:80:db:40:c1:ad:dc:d9:f5:c2:29:be:79:ee:
         84:fd:ec:b1:ff:ea:5c:61:6e:06:8d:d2:0f:85:7a:ec:62:45:
         cc:3e:ef:ae:74:79:3f:97:e7:23:c4:32:21:2b:7c:32:b8:46:
         52:77:24:3a:a7:51:09:18:de:71:cf:2d:ee:e5:e6:73:d4:50:
         27:ad:8a:6b:be:c0:e1:22:76:ea:f6:cc:a4:1f:d4:af:71:27:
         08:3f:ef:2e:04:cc:97:1e:48:1a:7a:27:9e:ed:45:c0:29:c7:
         a4:83:e9:17:c8:c0:11:3a:6b:b0:6d:ee:ab:66:f5:ba:8f:b1:
         6d:44:a4:4c:cd:e9:61:05:53:a3:d0:f7:76:72:15:60:91:d4:
         b5:ec:b7:b5:8f:32:e3:d3:bb:ac:9e:cc:10:ba:f7:85:63:9d:
         a0:e8:9b:84:95:82:e1:63:7e:3d:3f:27:f0:ed:f5:49:63:b9:
         2b:6b:32:82:32:58:16:ad:10:aa:f0:60:b2:7e:23:d2:49:f4:
         0d:fd:b2:a0:84:7a:a3:dd:56:c5:e7:d5:22:a4:4a:b9:ce:a6:
         16:72:84:e0:cb:51:9e:d7:62:ac:25:20:24:f9:f0:92:ca:de:
         9e:bb:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:43 2025 by rpki-client