Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft
File:                     9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft (raw, json)
Hash identifier:          /8sHRkxjj/xvrNih0E9bEAHITzo7CFUNihwPM3zRTDQ=
Subject key identifier:   C2:45:18:DD:C3:05:85:8E:B8:2F:B4:F7:E9:53:09:DD:13:30:08:E2
Authority key identifier: 9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1
Certificate issuer:       /CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1
Certificate serial:       5D825157E28DFEB8B134DF3048FA706800FC8B0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft
Manifest number:          0198
Signing time:             Fri 31 Jan 2025 14:47:37 +0000
Manifest this update:     Fri 31 Jan 2025 14:42:37 +0000
Manifest next update:     Sat 01 Feb 2025 16:15:37 +0000
Files and hashes:         1: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: gbo1ZzkUCZWG5+l5CgTYJZtfpThAgQk/L6rli7IY0ZY=)
                          2: 323830343a353764303a3a2f33322d3438203d3e20323638303838.roa (hash: bYEra2StC4d5or6+nuaMYzELgOVLkflt5LxwOnHuI6o=)
                          3: 9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl (hash: 2RhyHCuL/RVEeFCP0rFx0vGibDZ0kX9Q9KV5fMaF9Ks=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:82:51:57:e2:8d:fe:b8:b1:34:df:30:48:fa:70:68:00:fc:8b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1
        Validity
            Not Before: Jan 31 14:42:37 2025 GMT
            Not After : Feb  1 16:15:37 2025 GMT
        Subject: CN=C24518DDC305858EB82FB4F7E95309DD133008E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:28:c9:81:f1:8c:b7:ce:56:7f:33:2d:5f:00:
                    7d:93:87:6e:eb:55:0d:4b:57:8f:1d:e3:12:04:61:
                    b9:49:d0:5a:47:4d:40:ed:be:0b:fe:c4:24:e9:04:
                    36:71:2b:2f:99:66:c7:2e:bf:57:00:96:ee:33:75:
                    bb:19:33:50:e2:9b:c8:8e:e4:db:5d:50:d7:46:d4:
                    29:2c:90:59:76:5b:8a:f2:b3:d1:dc:cb:f0:ea:bd:
                    b4:bc:ab:18:42:b5:42:2f:eb:90:d0:9c:5e:7d:6f:
                    0b:0b:9a:cf:eb:20:cb:84:1f:c0:fe:89:71:b0:0c:
                    00:c5:34:1e:75:49:f4:9f:87:c9:c1:eb:a4:5e:fb:
                    ce:39:3f:8b:55:83:ff:b0:74:32:1e:9d:27:0e:6a:
                    b6:f5:8b:b7:4f:22:70:f6:7a:c2:ac:74:e2:26:25:
                    b2:f9:e1:e1:3f:d3:18:56:80:aa:d5:52:28:fb:44:
                    ab:e7:50:ce:33:8a:4f:aa:9f:5e:a0:7f:95:0a:da:
                    45:35:df:f0:ac:4c:dc:61:3f:5a:f5:cd:e3:89:99:
                    67:e6:e7:cd:26:83:57:fe:70:b7:01:d0:d6:c2:4c:
                    c9:8e:9b:d2:c3:53:61:70:83:d3:6a:68:9f:74:32:
                    57:f0:c2:2c:df:08:57:b8:46:fc:15:ee:16:20:fc:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:45:18:DD:C3:05:85:8E:B8:2F:B4:F7:E9:53:09:DD:13:30:08:E2
            X509v3 Authority Key Identifier:
                keyid:9C:DD:5E:D9:F3:81:FA:7C:7C:F5:58:70:AB:5A:C7:1F:AB:D4:AD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/1/9CDD5ED9F381FA7C7CF55870AB5AC71FABD4ADA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:70:8e:4c:65:46:51:17:85:bb:3d:d5:11:4a:b0:41:4a:d0:
         ef:4d:1a:0d:09:9e:86:d9:c7:f4:10:ae:68:6f:75:c1:37:c5:
         46:11:fb:68:e2:d7:c9:a9:ee:29:ca:31:80:44:f1:ef:d1:5f:
         3e:b3:fc:6e:ec:c1:ee:8c:e9:1e:4d:6e:4f:5a:23:64:58:24:
         f2:79:2c:ca:d3:ac:fb:7c:27:6d:f2:0b:4d:32:34:ba:cd:1e:
         13:e3:e3:9c:a8:60:ef:27:64:31:cd:2e:8a:cb:42:22:4c:f0:
         bc:69:b4:9a:70:c6:33:71:ce:d4:95:3d:56:ca:88:64:19:a8:
         07:95:49:bf:f1:02:33:c1:21:6e:41:b6:06:27:05:c3:3a:a2:
         50:2b:78:bd:1a:52:c7:67:6b:4e:9d:d1:78:77:6f:ca:5e:f1:
         15:2e:4c:63:48:dd:dc:18:e5:13:cf:d7:c7:e0:45:0f:9d:24:
         a4:5a:0a:be:2f:64:04:74:d8:c2:19:a1:db:75:61:66:55:69:
         1b:7d:1f:6c:00:a1:32:16:c1:7c:b9:d9:8d:07:67:d5:02:b6:
         e3:67:f1:81:4f:9b:56:97:99:65:78:2c:7f:22:63:99:25:04:
         e8:b7:92:6a:f3:eb:f9:a8:f8:a2:7b:42:87:c4:40:a0:47:61:
         8e:51:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:50:28 2025 by rpki-client