Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
File:                     D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json)
Hash identifier:          ygwSPpHEvDqrIPFrgAG7HSKGKHspwySTkOSYf8F6Ep8=
Subject key identifier:   FC:B9:ED:30:11:8B:E0:97:8E:48:5B:AB:CA:56:D2:CE:7F:91:52:B0
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Certificate issuer:       /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial:       260D6A4D5276A88092C6FD9BD85887D3CEF1C763
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 06:20:58 +0000
Manifest this update:     Fri 31 Jan 2025 06:15:58 +0000
Manifest next update:     Sat 01 Feb 2025 06:49:58 +0000
Files and hashes:         1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: SIADE5VKIgJ5Tpb09x2l99xnAXnj4ABM53L9kFHSjk8=)
                          2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: gQNJnCQ6eKgjrkso1IZFcqUOVGNkcqqMyyVh7TLwlbI=)
                          3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: k+m7NJ/LiD6tVxNKkdmv0eOfPgDkeNW4j/UWesy0Xj8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0d:6a:4d:52:76:a8:80:92:c6:fd:9b:d8:58:87:d3:ce:f1:c7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Validity
            Not Before: Jan 31 06:15:58 2025 GMT
            Not After : Feb  1 06:49:58 2025 GMT
        Subject: CN=FCB9ED30118BE0978E485BABCA56D2CE7F9152B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:05:8b:30:71:d8:91:74:83:5f:4a:5e:03:
                    c5:f2:8b:44:72:25:fc:50:25:0c:54:ac:4e:41:43:
                    0a:3f:45:f4:00:ca:f7:af:57:c6:27:4e:13:12:30:
                    f2:9b:a2:cf:7d:e6:6e:3e:3b:43:f1:16:e8:f3:df:
                    ea:32:c6:97:25:96:c9:78:e1:7d:00:78:10:33:24:
                    50:87:a7:ff:c1:6c:f8:7c:f0:b5:77:89:49:97:fa:
                    55:38:b6:c4:ca:06:6a:55:0b:0e:86:00:b6:d8:fe:
                    3b:f4:c8:45:82:47:1b:cf:b9:0b:29:81:18:ad:a8:
                    d1:f5:e5:df:de:ca:58:e0:80:ec:7f:0a:d4:a1:16:
                    97:f6:3c:3b:4e:8e:ac:88:00:81:a1:96:78:f3:fd:
                    c9:58:7f:8c:e5:ad:f5:53:d2:7a:13:95:0f:d1:fc:
                    02:9e:7b:b0:2a:96:23:0b:a0:8e:0c:2e:c5:ad:84:
                    d6:63:46:47:15:e8:c7:3c:67:b9:81:c0:b1:46:89:
                    8c:cc:d8:94:6a:b0:13:36:87:5f:42:35:31:f6:6d:
                    71:30:b7:64:2d:b1:58:ce:d7:b1:b4:c8:93:79:ac:
                    eb:e4:e5:5b:38:99:23:d5:bd:35:98:73:88:01:22:
                    24:b4:81:d1:30:1e:f5:70:1a:b0:f3:fe:51:96:32:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:ED:30:11:8B:E0:97:8E:48:5B:AB:CA:56:D2:CE:7F:91:52:B0
            X509v3 Authority Key Identifier:
                keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:24:e6:45:c4:4d:43:63:51:ea:c6:f2:b2:c8:15:65:1a:81:
         80:0d:74:c1:a6:36:62:94:b1:4f:6f:0c:9e:9c:ba:f5:8b:70:
         d5:a1:d0:c1:2c:c7:a5:fc:32:03:0f:95:97:66:c0:d6:ed:ac:
         92:d1:c0:49:ea:d3:fc:e1:5b:e0:9c:b5:b6:52:44:d8:48:2d:
         f2:d1:7f:2c:aa:63:52:52:87:5b:b0:5a:1b:1a:29:5f:c4:de:
         72:8e:44:37:79:72:0b:b0:bb:f6:40:52:af:df:e7:7b:c3:a1:
         9b:36:df:49:e8:c2:8a:f5:87:cb:97:66:ec:36:5c:f7:6b:9f:
         a3:ec:be:b2:0d:8a:ed:15:17:83:21:13:10:30:3b:58:84:79:
         36:44:13:65:12:8f:ba:47:f2:ed:5b:24:ec:b6:02:5e:b9:ff:
         57:72:70:7f:38:e3:a2:b2:3b:ba:b8:d9:1e:ea:db:f3:30:53:
         62:61:35:91:5f:21:b1:ab:48:05:46:32:d7:32:01:d7:b4:93:
         1a:25:7a:de:a8:04:7b:97:25:04:20:da:25:67:9a:35:7b:f1:
         c1:6a:85:16:4d:db:7c:dd:0e:96:8c:22:e1:65:25:e5:87:ee:
         d8:12:41:de:03:c9:5e:3b:04:e4:53:0b:d0:be:ba:2d:d9:44:
         a3:ca:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:24 2025 by rpki-client