Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft
File:                     5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft (raw, json)
Hash identifier:          0WBYsBc+nmD3yy/nC8LFd99pmQvuVq2+Wv4XJXoBIy4=
Subject key identifier:   80:96:76:80:7F:1A:15:90:ED:07:56:F4:15:D0:8D:4E:D7:FD:1D:F9
Authority key identifier: 5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23
Certificate issuer:       /CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523
Certificate serial:       69FFFBBCCAD82F92D695136A49A96B35989A4D30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 11:57:42 +0000
Manifest this update:     Fri 31 Jan 2025 11:52:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:28:42 +0000
Files and hashes:         1: 3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (hash: KbyKYnwFaKcJ4Ls0PitMev5/jpR4OT8qY4Lv9T69kNM=)
                          2: 3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (hash: QT1fGAGGmmB2QBh/rKsFfteNriykRfPVlu8PDz9jS3s=)
                          3: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl (hash: eZF9Vqcf2R84hFV2kFbfCxysfiWpJnPgmyHL6pVfAz0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ff:fb:bc:ca:d8:2f:92:d6:95:13:6a:49:a9:6b:35:98:9a:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523
        Validity
            Not Before: Jan 31 11:52:42 2025 GMT
            Not After : Feb  1 14:28:42 2025 GMT
        Subject: CN=809676807F1A1590ED0756F415D08D4ED7FD1DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:b1:25:11:2f:6d:53:80:1d:15:50:13:33:
                    fd:62:c0:cf:7e:6a:c9:32:d5:ac:c5:a3:fb:8e:52:
                    b5:11:bb:08:bc:94:d4:5d:8a:be:57:0f:78:1e:13:
                    1e:3c:2b:9a:d0:17:18:01:b9:05:a2:13:ab:cd:fa:
                    b0:74:f3:ad:57:35:e6:0c:92:83:5e:c5:ff:0f:33:
                    66:1d:df:05:22:bf:46:ae:3b:62:1d:6f:a7:c4:e6:
                    41:5e:cf:54:cc:45:c4:2e:1e:da:f0:70:d0:b7:69:
                    da:82:26:17:3c:56:c0:d7:9f:e7:7c:01:e3:b6:c2:
                    b8:fd:64:2d:4a:50:bf:2c:ec:b2:68:2b:4e:6c:35:
                    9c:fd:04:cc:5f:f9:38:70:b9:36:74:3a:ae:3f:25:
                    61:7a:3d:71:7b:38:83:63:b0:1d:4a:20:e6:6d:c2:
                    3c:89:5e:0c:83:7d:b4:b0:aa:99:e2:93:db:28:e2:
                    87:9e:29:75:4b:15:aa:25:73:58:55:f6:da:a1:bd:
                    ac:3d:b0:ff:59:cf:d6:69:75:e8:64:58:60:d1:df:
                    9a:04:7d:28:32:24:ec:df:d6:39:1d:67:2c:09:19:
                    92:bc:ed:b0:62:54:e9:16:13:39:6d:92:62:f1:7d:
                    05:46:1e:77:a2:30:2c:8b:81:6e:ee:f0:2f:1b:c0:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:96:76:80:7F:1A:15:90:ED:07:56:F4:15:D0:8D:4E:D7:FD:1D:F9
            X509v3 Authority Key Identifier:
                keyid:5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:f7:e7:b2:4e:36:e2:10:56:5c:20:a1:d7:4e:c8:47:9f:
         4f:a5:a3:a5:95:ee:cb:cb:2f:ed:16:bc:b7:68:5e:de:39:2e:
         0d:1a:7b:b9:d5:5d:a0:7e:f0:a4:2a:78:59:76:16:58:43:f9:
         c4:a0:02:ad:cf:05:1a:5e:31:e2:a4:d7:ed:58:45:d2:0b:16:
         c2:d4:de:8a:12:bb:7c:a7:51:d6:a0:17:c3:30:f5:d7:8e:d2:
         23:88:c7:a8:e7:fa:73:5e:19:f8:33:72:42:67:d1:f3:09:91:
         41:46:c8:e8:af:fc:61:5b:cc:09:e8:c4:5a:a4:30:50:f4:6a:
         ee:0d:05:d5:eb:2e:00:4c:e2:1f:d6:e2:4a:f9:05:b8:81:d3:
         51:42:c0:bb:be:3b:5d:e0:84:f9:51:90:8a:d7:9c:b1:70:41:
         8c:d6:c4:31:a3:cc:07:d8:2e:f5:4c:d8:89:3a:ab:af:e2:3e:
         aa:d5:b8:5b:d3:0d:c7:d7:59:7b:5e:cb:bb:51:d5:0f:73:af:
         ba:e7:2b:5b:4d:8c:9a:be:22:77:f0:fb:34:4f:7d:9b:6b:cd:
         53:29:a9:42:f5:16:84:fa:fb:1b:88:cf:90:67:9a:a9:8f:cf:
         38:5d:6d:c0:d9:71:64:58:44:63:f7:21:a4:05:9c:c3:b4:23:
         0f:f3:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:48:48 2025 by rpki-client