Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft
File:                     053534088AE146C26641820A5E5F82310DB957FC.mft (raw, json)
Hash identifier:          ruOvzal9mZj+PqdF31DHSnJLJS5OALxPZskbF3lVVuY=
Subject key identifier:   2B:E7:F8:28:9D:D2:70:F0:1B:F9:D5:84:3F:37:F1:EA:16:3D:EF:1B
Authority key identifier: 05:35:34:08:8A:E1:46:C2:66:41:82:0A:5E:5F:82:31:0D:B9:57:FC
Certificate issuer:       /CN=053534088AE146C26641820A5E5F82310DB957FC
Certificate serial:       38EF81945B1A286EB0C0F1FB73E91EA1823ACD8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft
Manifest number:          0192
Signing time:             Fri 31 Jan 2025 13:42:19 +0000
Manifest this update:     Fri 31 Jan 2025 13:37:19 +0000
Manifest next update:     Sat 01 Feb 2025 15:04:19 +0000
Files and hashes:         1: 053534088AE146C26641820A5E5F82310DB957FC.crl (hash: JEQTPXW+j9mdQ7kdy0B92mwXQ++8XM5XP98I3DdDrQ4=)
                          2: 323830343a326137383a3a2f33322d3438203d3e20323634303734.roa (hash: L2MxDxjFfJRHDJigLY1TVEbysvcjRCsMQsHsuXpiIW8=)
                          3: 3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa (hash: UA6913WWUGeZjE543dlhn7SzXb+hIebA5SqIqY30jjc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ef:81:94:5b:1a:28:6e:b0:c0:f1:fb:73:e9:1e:a1:82:3a:cd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053534088AE146C26641820A5E5F82310DB957FC
        Validity
            Not Before: Jan 31 13:37:19 2025 GMT
            Not After : Feb  1 15:04:19 2025 GMT
        Subject: CN=2BE7F8289DD270F01BF9D5843F37F1EA163DEF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:7d:6b:65:15:8a:0d:13:25:a0:0d:ee:73:
                    62:41:62:5f:12:03:e2:86:10:da:68:66:e4:14:ab:
                    37:ea:3a:54:dd:96:fc:fd:5a:ea:6d:d8:63:cb:33:
                    32:8f:69:2a:7c:92:ef:e9:eb:05:79:a8:9b:1d:e2:
                    48:0d:97:74:31:79:83:5f:1c:a4:8a:ff:0b:e9:1c:
                    8a:86:7c:07:e1:01:0f:6b:2b:45:8c:f0:34:25:f0:
                    8f:de:2d:3c:97:d5:93:ad:49:7c:d4:6f:7a:23:d2:
                    07:cd:0f:ef:41:b3:f0:d4:9a:85:00:e1:5b:17:89:
                    02:60:f2:be:43:76:e7:9a:08:f5:4b:6a:d0:0c:d0:
                    92:04:e4:1b:f0:3c:de:dc:47:d3:46:e9:4e:6e:57:
                    cb:cd:ce:be:98:aa:38:7f:b3:6f:9a:c6:6c:f6:a0:
                    7a:7f:53:63:3e:c4:45:86:ee:ba:2f:c4:e5:35:3d:
                    32:2b:f2:f9:62:2c:8d:f8:49:ce:7f:a6:7f:a6:40:
                    c6:28:dd:90:de:4e:a2:b9:a9:f8:ad:5b:19:1d:4d:
                    83:94:2f:71:f2:45:db:54:cd:25:c0:8d:90:be:03:
                    e2:3d:15:d1:ae:af:f5:d6:1e:f1:a4:09:e8:56:ee:
                    b3:74:36:10:40:99:dd:e8:4a:f5:22:f5:4d:9e:46:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E7:F8:28:9D:D2:70:F0:1B:F9:D5:84:3F:37:F1:EA:16:3D:EF:1B
            X509v3 Authority Key Identifier:
                keyid:05:35:34:08:8A:E1:46:C2:66:41:82:0A:5E:5F:82:31:0D:B9:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:a9:91:21:cf:37:21:a0:29:f9:b4:7d:9f:bb:d5:8c:b7:
         a3:36:f6:9c:25:83:2e:62:9d:f5:32:2f:bd:60:dd:f3:94:ea:
         f1:63:6a:ce:e7:de:c1:e0:19:d2:4d:38:e1:29:d9:79:ca:de:
         92:a6:fa:86:e0:8b:bf:35:a5:df:e0:03:f9:fb:33:90:58:e5:
         63:54:d2:5d:13:54:5c:eb:87:d0:3f:9a:14:5e:01:ee:6f:d8:
         de:58:30:ce:ec:ee:bc:f1:aa:2e:6f:a5:d8:c2:c1:00:31:70:
         76:5e:3a:0d:08:4e:9c:d0:28:1c:9c:54:99:01:f2:7e:9d:41:
         76:04:ac:be:38:09:bc:ee:f1:6b:3d:53:e1:04:06:b0:0e:7e:
         04:ec:4c:7f:e0:4f:46:5b:85:7a:86:80:14:b9:37:bd:2a:ab:
         1b:d9:3a:f1:1c:f4:c6:8b:46:2f:1d:6f:62:d2:7b:46:a4:95:
         bb:2e:a2:84:7d:f8:a6:57:3f:4f:81:e3:43:03:0c:79:b0:b5:
         b0:ae:d4:94:f9:d3:7f:5b:b5:64:5a:fb:02:65:79:c9:cd:86:
         d3:1e:76:2b:8d:a4:6e:1b:00:c9:8b:3b:2d:46:11:dc:69:f9:
         c6:35:4a:a8:21:6c:7b:8c:f0:01:75:53:cf:7c:89:34:7c:8b:
         ae:19:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:09:43 2025 by rpki-client