Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft
File:                     E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft (raw, json)
Hash identifier:          fbstREIst9pZHkA+12nju79BiNe64RUt69W4LORnJz8=
Subject key identifier:   F4:74:0F:26:D7:B3:3E:E6:11:F8:D9:8B:DE:D2:F8:5F:34:69:BB:4F
Authority key identifier: E4:B4:45:68:7C:5F:B9:BC:74:E7:3F:A4:32:C7:23:FE:AD:B4:1D:BE
Certificate issuer:       /CN=E4B445687C5FB9BC74E73FA432C723FEADB41DBE
Certificate serial:       1EAFFDB4EC48ECE7ED5A60DCB1563AAF2A4A48B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft
Manifest number:          BE
Signing time:             Fri 31 Jan 2025 07:40:00 +0000
Manifest this update:     Fri 31 Jan 2025 07:35:00 +0000
Manifest next update:     Sat 01 Feb 2025 11:13:00 +0000
Files and hashes:         1: E4B445687C5FB9BC74E73FA432C723FEADB41DBE.crl (hash: CxFS4ZkhKEa2qYE95Nf6hlbrYhTqUbLbFLWE1h71vkc=)
                          2: 3139312e33362e3233322e302f32322d3234203d3e20323633333434.roa (hash: DiwdcfHJ2uMSeCfeNYOukOI6wMXSkmRc1z+4xAWYLZ0=)
                          3: 323830343a313462303a3a2f33322d313238203d3e20323633333434.roa (hash: MJBNbf63+JJ9U8SSPD9PprdMJuuL7jgffvne1IfRZI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:af:fd:b4:ec:48:ec:e7:ed:5a:60:dc:b1:56:3a:af:2a:4a:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B445687C5FB9BC74E73FA432C723FEADB41DBE
        Validity
            Not Before: Jan 31 07:35:00 2025 GMT
            Not After : Feb  1 11:13:00 2025 GMT
        Subject: CN=F4740F26D7B33EE611F8D98BDED2F85F3469BB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:cb:15:ba:3b:97:83:8e:08:97:55:38:e3:
                    a8:f4:8f:11:73:c2:a3:4a:a7:aa:b2:b4:a6:0d:dc:
                    2b:64:ac:c0:26:0f:e9:21:47:69:ff:b4:dc:64:aa:
                    d2:05:1a:c4:e4:6b:f2:5d:97:d2:92:f2:48:9b:c4:
                    b6:20:e3:6b:ab:54:18:af:17:92:6c:9f:b3:5e:01:
                    37:a8:2a:de:f7:63:48:f8:a2:6a:fe:c8:ea:8c:a2:
                    b7:d2:ca:54:84:6f:6b:00:a3:d7:ae:86:73:20:34:
                    92:aa:f8:58:e7:04:d0:2d:06:e6:19:0c:83:61:e0:
                    3e:0c:5b:5f:03:bf:d4:9c:dd:44:f2:7d:6e:79:cf:
                    1d:6c:90:cd:cf:2c:f3:20:fd:2d:72:dd:bb:60:0b:
                    aa:04:e7:0e:fc:cf:19:90:ee:b7:68:6b:07:7f:e9:
                    d0:f2:50:b9:8d:65:dd:3a:41:5b:69:bd:91:65:28:
                    d9:16:a1:10:91:03:b1:bb:40:56:95:9f:b8:c9:db:
                    57:e5:08:07:20:e6:9f:5c:36:52:95:27:8d:39:73:
                    f3:90:ca:25:23:35:76:a5:2d:b3:f0:91:cf:13:76:
                    dd:1b:e2:b8:40:9b:c9:8a:dc:17:d7:d0:79:9b:75:
                    b2:f4:8d:37:fa:c8:0a:9a:59:4e:49:21:45:b2:48:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:0F:26:D7:B3:3E:E6:11:F8:D9:8B:DE:D2:F8:5F:34:69:BB:4F
            X509v3 Authority Key Identifier:
                keyid:E4:B4:45:68:7C:5F:B9:BC:74:E7:3F:A4:32:C7:23:FE:AD:B4:1D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:df:37:32:3d:bc:ed:dd:9c:0f:d5:b0:c6:67:b4:d2:55:f3:
         94:4d:98:b9:d6:b1:a1:06:1d:9d:68:30:1b:e4:d6:b6:5d:1e:
         35:d9:d1:bd:15:ac:d2:00:83:be:16:29:e4:bf:59:bc:ef:55:
         e0:de:be:63:9b:1e:91:e9:60:c4:b4:94:77:22:b5:81:76:5e:
         b4:de:f8:9e:50:a2:d4:0f:bd:85:e2:80:c8:eb:ee:16:5d:76:
         5e:60:c4:bc:52:d5:09:98:d8:34:6a:36:99:d3:cb:df:a1:df:
         40:a0:a5:ed:ad:99:c6:bb:22:dd:c7:a7:66:06:f2:b3:22:88:
         5a:0a:2f:6c:1a:e7:df:ac:1b:5f:67:01:6b:4d:57:70:59:79:
         72:42:35:97:b5:5a:55:aa:e3:1a:7d:e1:b7:83:b1:e2:92:17:
         ac:c3:2f:ec:1c:bf:a7:56:94:95:0d:5f:b4:ac:23:50:01:9f:
         1e:1e:89:91:d4:0e:0c:f2:83:9c:28:d8:16:7c:ff:91:d6:72:
         1a:48:02:11:c2:64:41:fb:04:80:81:88:99:48:62:a3:3f:a1:
         63:47:c0:55:ec:16:87:6d:37:02:53:b2:b4:51:0b:92:7b:a4:
         b6:5f:bd:ee:05:66:d5:b5:c2:01:3b:b4:48:c1:b8:29:cd:88:
         0d:56:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:17 2025 by rpki-client