Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
File:                     D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft (raw, json)
Hash identifier:          g8XE/9NRyo1ikD2TOYvTskur6L1UOjQSCks7S8JbLI0=
Subject key identifier:   05:B0:86:4C:9E:E5:31:B6:0E:4D:72:08:CE:2E:8A:26:C2:D6:AB:2D
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Certificate issuer:       /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial:       1AB18DB07BC8F0CA2FCEBB7FA132F9C27A8A0DB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
Manifest number:          0191
Signing time:             Fri 31 Jan 2025 15:24:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:19:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:26:30 +0000
Files and hashes:         1: 323830343a356332383a3a2f33322d3438203d3e20323638383932.roa (hash: aCLdX8npKd5AwSexuBHKVbO7bhyy9EjWbiR5FGT8IUU=)
                          2: 34352e3137352e38382e302f32322d3234203d3e20323638383932.roa (hash: L3h0sv89qg046LFc8CapII8LMXni3RbNTLDhyiC0Eeg=)
                          3: D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl (hash: PTizW8UV+5uWlXwmDRotQ2BzS0+rjKXzrl/sKtG2+rQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b1:8d:b0:7b:c8:f0:ca:2f:ce:bb:7f:a1:32:f9:c2:7a:8a:0d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
        Validity
            Not Before: Jan 31 15:19:30 2025 GMT
            Not After : Feb  1 16:26:30 2025 GMT
        Subject: CN=05B0864C9EE531B60E4D7208CE2E8A26C2D6AB2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cb:f4:c6:20:b4:e1:33:1b:b4:0c:55:d3:5b:
                    db:b8:5b:8a:d9:41:a4:51:e1:4f:0a:d5:4f:dd:10:
                    98:75:79:c1:8e:d2:27:94:c3:7b:6d:27:4a:8a:4f:
                    b8:2c:b0:0a:90:76:29:98:fb:40:a9:f5:8d:a2:89:
                    3e:87:89:6f:9a:a1:4f:65:01:a8:9c:e3:07:32:28:
                    e5:74:fc:2c:8a:bc:cb:80:68:bb:78:07:a7:e5:78:
                    17:c6:a8:90:f1:13:11:4e:fb:6a:02:a5:22:a5:44:
                    18:16:cb:94:41:ba:3e:5e:e8:02:3e:ab:df:1b:d9:
                    3d:cb:71:b8:25:9c:9b:fa:24:a2:e9:e7:22:1c:6b:
                    f1:dd:27:91:ff:77:99:c6:6c:d1:4d:83:95:46:5a:
                    2f:9c:e9:54:f5:e4:55:12:b5:2d:37:21:e6:89:32:
                    27:5d:85:0b:3a:14:9a:52:86:fc:0e:01:bc:f1:54:
                    0d:8b:0e:c6:e7:61:05:48:20:21:4d:ce:37:83:5f:
                    df:c6:04:e3:37:39:11:09:a1:e0:94:35:f2:a0:31:
                    f9:64:38:79:4a:de:ad:59:2b:9c:42:7c:39:6a:f0:
                    af:84:c0:a0:ba:e5:fb:e5:f6:ee:cf:48:92:64:88:
                    5c:68:cd:b4:53:22:97:79:39:c3:10:2b:48:b0:14:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B0:86:4C:9E:E5:31:B6:0E:4D:72:08:CE:2E:8A:26:C2:D6:AB:2D
            X509v3 Authority Key Identifier:
                keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:39:bb:cb:5a:ce:e6:d4:97:35:be:4c:47:7e:8b:5e:7c:17:
         87:bc:6c:d8:6a:95:92:b2:65:30:1e:ee:20:ed:3a:bd:ca:ee:
         0c:33:18:69:f1:c1:2d:5d:ea:f1:3d:cb:77:bc:e4:e7:1f:40:
         ea:9d:fb:93:2b:d2:9a:3a:7e:db:6c:40:64:11:b9:9b:f3:d3:
         86:eb:6f:ae:0d:66:fd:6d:44:08:43:c9:38:0f:27:8d:ab:8d:
         08:18:2b:8b:db:22:ed:39:27:d3:89:55:c9:aa:f2:84:f7:ae:
         93:72:07:e4:b3:a1:af:0e:b3:c0:2b:3f:9a:91:28:f3:c2:82:
         3c:b3:2f:b0:a6:3a:a5:b8:09:de:6c:c7:f7:f8:9d:a2:1f:04:
         ce:bb:b0:40:3d:c4:b6:6f:d3:d5:52:57:5b:23:3b:07:c8:85:
         42:79:1d:05:eb:a3:eb:ff:0d:8c:56:dc:4d:b7:9e:ff:b1:15:
         02:64:b8:79:4c:31:c4:63:57:69:4a:a6:4d:3b:ae:f0:63:e8:
         91:e5:22:d1:81:7c:48:9b:7c:99:12:e9:de:8d:35:af:ac:35:
         11:95:1a:85:c4:76:36:b6:a5:4f:35:fa:f3:70:90:02:3e:5c:
         2c:28:38:93:9f:9b:7c:79:f0:dc:67:49:c7:ca:67:fe:27:e6:
         60:6f:7b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:53:52 2025 by rpki-client