Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
File:                     CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json)
Hash identifier:          co4BSu2sx69TcbFFoyDd/nIan+GXd1D7+0/valX4Tl8=
Subject key identifier:   A9:87:12:FF:8C:73:EC:DA:59:F9:1D:5F:F6:01:4C:82:D6:41:86:2F
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       24CBD4CDD96259E7663D3A1572048F687B899778
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 13:19:46 +0000
Manifest this update:     Fri 31 Jan 2025 13:14:46 +0000
Manifest next update:     Sat 01 Feb 2025 15:20:46 +0000
Files and hashes:         1: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: ZU0utCrRwhLf9cf3Ktz0r0JUiIjPDVqLBl0kACiWp9o=)
                          2: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: fblyxH7SzjC7YUsGNhLX52wCMjSUTwA+0xKNqzpNoNM=)
                          3: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: +vV8aFeP54KD+iFWvnQA4EpbdZm64T4O9pm1XWnDdrw=)
                          4: 3137302e3233332e3131322e302f32322d3232203d3e20323635303738.roa (hash: +dM9P1qQIorF8G+5/cwwQ/gmsTd5imaFLqsmKtI0wn8=)
                          5: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: Gw3AjsLu5bAI1a/1OZWrCv+g9eZY1UiAMipz3Fk9fHs=)
                          6: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: /MHyqXTZKLL1mIGIaBF3gRepQbrRtiJd5LJ4kXHOM8A=)
                          7: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: w/o3AdrdK4KBAOgJb8IqQrFjpO9B5pDTtzBmyubLeog=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cb:d4:cd:d9:62:59:e7:66:3d:3a:15:72:04:8f:68:7b:89:97:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Jan 31 13:14:46 2025 GMT
            Not After : Feb  1 15:20:46 2025 GMT
        Subject: CN=A98712FF8C73ECDA59F91D5FF6014C82D641862F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:e0:2d:16:8b:88:ed:d7:f9:28:35:d0:6c:
                    45:82:fb:b5:38:a1:e3:71:4c:d1:35:82:b0:c2:e4:
                    94:2c:e7:b9:bb:05:e8:d5:d7:84:7d:4a:70:fa:0f:
                    f1:3c:d3:ba:99:31:5f:a7:ad:50:83:63:d3:aa:9e:
                    2d:fb:cc:6b:28:33:b9:63:41:fb:76:6c:f3:54:8d:
                    9a:49:b7:8d:a1:2c:15:e4:3e:86:2b:80:9c:7c:8f:
                    af:15:47:ed:a6:72:20:95:1f:c2:6a:e1:47:a4:ae:
                    90:a3:9b:83:da:19:49:18:0a:1f:cd:bf:75:ee:3c:
                    82:e6:bc:64:74:93:e9:aa:cd:35:44:61:b7:0d:f0:
                    08:62:04:a2:6c:f0:02:25:55:6f:db:67:89:7c:f2:
                    f1:e3:18:a5:46:c3:3c:86:ad:78:84:55:dc:b6:3f:
                    81:80:73:06:5d:d6:b7:90:36:36:20:f8:ba:30:27:
                    43:13:e5:61:77:3a:86:a8:e6:89:5d:16:24:2f:a2:
                    0c:bd:e1:01:49:2e:62:75:89:5e:58:45:59:b3:a0:
                    d3:b1:31:c8:66:15:b1:26:8a:5d:ad:dc:e3:6c:60:
                    9d:ac:23:26:b4:bc:d3:dc:60:47:b6:b4:03:8a:bd:
                    4e:7e:e4:12:a8:24:81:8e:15:ff:3e:e0:7f:a4:94:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:12:FF:8C:73:EC:DA:59:F9:1D:5F:F6:01:4C:82:D6:41:86:2F
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:05:05:cb:43:17:21:d0:a8:8d:0c:70:82:04:7b:e2:bd:77:
         2a:d5:6b:7e:6d:f4:60:90:52:01:ef:6c:25:14:3c:a2:be:5f:
         c8:65:73:73:2c:0b:ce:61:2e:cf:73:a6:4c:a9:b3:b6:1e:59:
         69:44:a2:95:88:cc:a6:91:48:d5:44:c5:5a:5e:9d:23:1b:34:
         5b:f9:64:d9:37:db:42:7e:62:38:8c:55:e8:50:ff:6a:f0:e1:
         38:90:45:3b:d8:f3:bc:87:56:c1:9c:91:5b:6b:bf:77:86:83:
         d4:2b:31:5d:e9:c8:d3:ba:0d:7a:06:ec:5b:48:9c:c6:bf:52:
         5b:f5:68:f1:58:9c:fc:79:a1:07:69:82:33:57:5b:03:4e:ba:
         12:2e:5f:08:20:a4:45:18:e2:2e:94:c0:1f:fa:ad:bc:1d:de:
         f9:8f:5e:be:ef:00:ff:0c:e0:55:6a:d9:8b:42:3c:82:3b:a8:
         04:c8:63:db:ba:15:20:95:f1:9c:54:ca:2a:a8:f6:e3:b2:34:
         41:13:0d:d1:c2:84:8c:24:4d:a6:fc:ab:de:be:c3:33:3a:08:
         ad:a6:4f:e1:86:85:c5:bb:dd:63:0d:1a:c4:82:cf:2d:95:cd:
         04:e7:87:e1:80:4c:42:8c:f9:9e:2d:37:3a:02:a8:34:c8:be:
         ac:33:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:38 2025 by rpki-client