Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft
File:                     32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft (raw, json)
Hash identifier:          Z0sjLwzB3YJ+kp+i1871bt61VRMJJ3U3p1nvO7Fcb24=
Subject key identifier:   3D:F5:DB:C8:D4:60:D4:25:4C:25:21:8C:00:73:A9:01:D0:44:F4:B5
Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
Certificate issuer:       /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Certificate serial:       925DB39889F031D6B94130978A6E89DF452D98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 17:06:42 +0000
Manifest this update:     Fri 31 Jan 2025 17:01:42 +0000
Manifest next update:     Sat 01 Feb 2025 20:45:42 +0000
Files and hashes:         1: 32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl (hash: +XlFR3kous5OUJ9qWun3ievSFsiRhYuZcfnZyCdYwJc=)
                          2: 323830343a336435633a3a2f33322d3336203d3e20323636353236.roa (hash: OfzyWDXhuzG5uUADTwn4BprZyf07423h7tSBlNp+59k=)
                          3: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (hash: 9n1lDBo1FXRI+JzSvsWz1BWeJxc6LfXeT6LkBIHHQC0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            92:5d:b3:98:89:f0:31:d6:b9:41:30:97:8a:6e:89:df:45:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
        Validity
            Not Before: Jan 31 17:01:42 2025 GMT
            Not After : Feb  1 20:45:42 2025 GMT
        Subject: CN=3DF5DBC8D460D4254C25218C0073A901D044F4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:89:da:35:7f:ce:23:f9:6e:27:e6:cc:a9:
                    d1:d6:84:cd:ff:a1:a7:a2:bc:a3:90:86:51:0c:b7:
                    6e:1d:74:ec:5c:78:8a:fe:40:10:18:23:8f:be:70:
                    e7:d0:7b:e6:86:85:b1:83:c7:86:3f:8e:14:d6:c1:
                    8e:56:03:25:cd:50:57:3f:7f:83:f5:f9:c1:93:9c:
                    38:29:7a:30:d0:85:c8:e9:8f:63:47:11:38:06:9a:
                    5d:45:ba:8a:62:73:b3:df:bf:44:8f:ac:a4:e9:0f:
                    28:94:6f:e2:34:e8:d9:f1:18:61:05:91:6a:06:0c:
                    f8:c9:c4:56:33:82:f0:1d:29:78:61:b7:49:72:40:
                    3b:71:12:80:93:a8:6f:e4:a1:d5:a3:b3:b1:eb:2f:
                    b9:3e:8f:78:d1:fc:88:ec:05:8b:12:64:6e:ac:fc:
                    4e:c9:ea:ae:39:92:bd:ca:f2:86:df:92:7e:71:84:
                    d3:65:8a:aa:4e:fc:6e:ea:04:7e:8a:e0:96:7f:8a:
                    4e:94:39:fb:a5:32:1b:bf:06:3a:ba:ea:b8:93:00:
                    35:4f:40:8c:fc:29:da:d2:a5:08:eb:89:6a:9f:80:
                    da:c2:3b:41:b9:52:bc:0b:f8:5f:2b:9e:3f:8e:da:
                    53:0a:22:17:fe:9f:cd:f8:98:ed:cf:e4:5c:87:35:
                    92:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F5:DB:C8:D4:60:D4:25:4C:25:21:8C:00:73:A9:01:D0:44:F4:B5
            X509v3 Authority Key Identifier:
                keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:02:06:2c:e3:1f:94:39:d6:5f:cf:89:a0:d4:1c:40:56:59:
         f9:96:2a:18:80:44:0f:a7:e7:20:58:0e:d8:1f:69:e6:e1:bc:
         f2:8f:c4:4d:6e:d2:48:1d:bb:68:a1:e0:1a:e4:e9:87:40:b7:
         c8:3e:d7:56:a1:c5:80:9c:40:bf:67:79:0b:f0:f1:8f:50:18:
         87:67:92:40:dd:33:ea:f1:87:f8:0f:a8:91:90:59:f4:d7:36:
         24:e6:ef:9f:64:61:ae:15:db:6f:d4:58:c6:00:b7:85:c2:b3:
         69:f8:56:81:16:78:8b:31:ff:f6:67:00:b0:e3:6d:b2:94:42:
         55:73:22:a1:ba:f3:d9:6b:83:a2:65:60:e4:f4:e7:c5:89:5a:
         ee:dc:24:eb:c5:f8:eb:d5:f2:9e:e1:b2:b7:58:2b:3d:c9:8c:
         b2:1e:3b:7b:95:d6:53:8d:36:4f:92:9a:07:fe:d6:49:df:e8:
         80:1d:b0:c6:e6:00:e9:f7:b1:09:89:ca:99:50:b7:4d:11:9d:
         67:59:c4:18:01:68:de:27:96:99:51:de:46:08:75:08:d3:20:
         26:1c:67:3e:76:f5:2f:24:c5:13:24:b1:73:98:ad:30:03:c0:
         80:78:d1:41:6f:71:36:24:20:32:1a:a3:bb:d6:8b:5c:a1:ac:
         48:ca:24:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:12:16 2025 by rpki-client