Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
File:                     640539F45452C2299C340AFF511D40CB7EEAA212.mft (raw, json)
Hash identifier:          pPyOV+yVuVqAa1TP5QRT7stLrIshcbP+w8/T9LcisGM=
Subject key identifier:   B1:9C:1C:28:CB:97:D2:38:A5:7A:FA:78:9E:A9:26:4F:85:2E:CF:E8
Authority key identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12
Certificate issuer:       /CN=640539F45452C2299C340AFF511D40CB7EEAA212
Certificate serial:       57F951C27BBB53FAD292FD099E25AF9BA9F3ED75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft
Manifest number:          E5
Signing time:             Fri 31 Jan 2025 01:37:56 +0000
Manifest this update:     Fri 31 Jan 2025 01:32:56 +0000
Manifest next update:     Sat 01 Feb 2025 03:39:56 +0000
Files and hashes:         1: 323830343a3230303a3a2f33322d3438203d3e203238313837.roa (hash: TB3g/RxruL2e08w8165cbGqgcYLG+bKOkoYUs5Owj04=)
                          2: 640539F45452C2299C340AFF511D40CB7EEAA212.crl (hash: SFYxyMB6UqOSZSJ2/6ym5gnMM0ifXHVdeBinJZMGeWY=)
                          3: 3138392e38392e3230382e302f32302d3234203d3e203238313837.roa (hash: WgJ3SJzEueQ1tDadY8IjSlwQ3ZFcQiKFNAcJRAYr9zU=)
                          4: 3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa (hash: Xa9HIA8Jv/2gORSVrETuSk/Zvgj9Cd/kyjOmtJRdjsY=)
                          5: 3138372e36302e3132382e302f32302d3234203d3e203238313837.roa (hash: fZrHJen/XMgbewLibsCX4tJTjqigcW4omTCt0YEDf5I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f9:51:c2:7b:bb:53:fa:d2:92:fd:09:9e:25:af:9b:a9:f3:ed:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640539F45452C2299C340AFF511D40CB7EEAA212
        Validity
            Not Before: Jan 31 01:32:56 2025 GMT
            Not After : Feb  1 03:39:56 2025 GMT
        Subject: CN=B19C1C28CB97D238A57AFA789EA9264F852ECFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:72:12:3c:c3:48:15:1c:0e:0e:37:a0:2d:
                    98:6e:3a:97:3b:93:bd:46:48:14:01:45:59:29:2c:
                    5a:39:c1:1f:24:36:41:d9:2f:9e:8d:d0:cc:f1:f6:
                    21:b2:c7:62:57:7a:5a:e0:c5:c8:b7:0a:ba:99:e8:
                    fa:8a:de:e5:ea:87:31:83:32:1b:2d:af:14:56:d9:
                    9d:f2:f5:23:bd:5a:ab:7e:1f:59:cb:95:de:3c:00:
                    d1:45:20:0a:50:32:ef:17:98:da:5f:5c:52:1e:42:
                    78:2c:49:b7:a9:d3:f5:99:34:fa:59:94:40:33:f3:
                    fe:de:fe:58:fa:3f:b7:30:fb:2d:01:85:86:df:c3:
                    72:1d:08:4c:58:9f:bb:5e:e0:3a:b8:ec:cc:0a:cd:
                    14:52:fd:61:da:29:18:90:13:8e:bf:11:0e:11:81:
                    75:f1:c7:c9:24:c9:93:4d:4f:20:2c:11:8c:76:19:
                    c7:59:95:72:27:fc:41:53:fc:fb:21:75:ca:c9:5d:
                    78:7a:00:3d:ac:c3:d8:51:16:b9:ad:7e:ea:de:f1:
                    c1:88:73:90:70:e4:dc:31:9c:c4:aa:b6:ba:9a:b4:
                    a8:ca:9c:a0:d1:a4:70:bb:01:88:fe:6c:65:f1:1b:
                    28:9c:b8:56:98:11:27:bf:72:9e:5b:05:22:f7:a0:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:1C:28:CB:97:D2:38:A5:7A:FA:78:9E:A9:26:4F:85:2E:CF:E8
            X509v3 Authority Key Identifier:
                keyid:64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:74:8e:da:73:77:12:63:29:9d:0e:ca:70:6a:77:77:36:a7:
         43:66:b1:10:98:84:b2:97:11:d0:76:39:18:ce:75:1b:c2:db:
         66:60:f8:4d:f9:1e:c6:27:85:43:cc:36:63:d6:d8:f1:a0:32:
         0c:b7:15:f5:79:0b:8f:cf:6d:15:90:5f:80:ee:58:2a:48:01:
         6d:78:e9:8d:54:85:36:ad:36:37:99:2e:2d:5d:bb:30:59:6e:
         44:0c:08:9e:27:eb:bf:2c:e5:e4:d6:ff:20:da:93:1e:9f:7d:
         9d:3d:c2:c7:b1:05:cf:ec:c9:64:80:78:88:18:89:a8:7d:60:
         b6:29:4b:ea:71:f8:78:7a:57:cb:63:1a:1a:46:f1:11:54:1b:
         0c:43:e7:d7:2d:59:34:a1:6b:a0:61:2a:7e:f0:de:fa:fc:2c:
         4a:af:f8:a4:a3:59:7e:8d:6e:22:ac:5a:7f:c0:0b:5c:ab:c0:
         ed:b8:06:81:49:36:b8:60:ed:83:f3:4c:61:fc:a5:a3:e5:62:
         36:b4:c4:d6:69:08:70:51:48:cc:f1:39:15:1f:3e:55:eb:d5:
         c0:19:4d:b7:24:46:63:ab:9c:71:7c:b9:02:a9:19:88:be:4f:
         b0:75:f6:73:17:f4:60:af:f3:e4:bc:12:36:93:f3:11:c5:52:
         31:95:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:55 2025 by rpki-client