Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
File:                     4329045FF5A88F6B7949093B6FE2C5D28A774010.mft (raw, json)
Hash identifier:          fnEV5DSQz6NUjoBdZdjVYfhifmvTJ9kizoujuslIrzM=
Subject key identifier:   42:C5:38:D1:BB:9A:B8:16:1F:E3:77:7F:D5:63:19:AA:50:43:A4:3B
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       3EAFE5300F30649EC16A2AE7417B830A9EB193C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 09:09:48 +0000
Manifest this update:     Fri 31 Jan 2025 09:04:48 +0000
Manifest next update:     Sat 01 Feb 2025 10:44:48 +0000
Files and hashes:         1: 3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (hash: 6euXhRonJuLChltX2gYPw3JLV+ShtQSB08EqUm3EYgg=)
                          2: 3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa (hash: FVd7IxF37a2XVBynNJPJ7yR7sX4fGC6lg5MSlzO87Ss=)
                          3: 323830343a313736633a3a2f33322d313238203d3e20323633303938.roa (hash: 736DsYi9i+uBojCq3W/rgpla7iB3WxC+tstNjSxBh7M=)
                          4: 4329045FF5A88F6B7949093B6FE2C5D28A774010.crl (hash: BpGjZMi+8MpVU+UCVzpBDy/pAyPmcpMYletViq+MLyE=)
                          5: 3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa (hash: L4Tge9YwemEO7o4VgRosHrOKFbyS7cp10eQpa7QtyiQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:af:e5:30:0f:30:64:9e:c1:6a:2a:e7:41:7b:83:0a:9e:b1:93:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Jan 31 09:04:48 2025 GMT
            Not After : Feb  1 10:44:48 2025 GMT
        Subject: CN=42C538D1BB9AB8161FE3777FD56319AA5043A43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:d9:d7:68:54:14:0b:e6:2a:6a:e0:b4:1a:
                    1f:77:53:64:e5:71:b7:d5:3c:34:67:12:ee:ad:78:
                    2c:4e:bb:be:b7:cb:cb:89:92:e8:3d:74:36:b5:3e:
                    79:1d:b8:f7:f8:cf:a6:ac:9f:8f:71:ef:8e:ec:f0:
                    b2:09:0f:8b:91:77:5c:8d:82:95:c4:88:95:2c:49:
                    6b:86:2d:0a:43:76:6f:86:f1:ff:46:25:d9:b1:75:
                    6c:4a:f0:e5:9b:08:10:ad:67:5d:67:f5:58:fe:cb:
                    da:99:0a:0c:f6:83:2d:7d:71:79:bb:88:9b:eb:83:
                    65:73:fb:cc:e0:02:6a:e3:20:fc:54:3d:30:1c:e1:
                    b2:98:64:4b:05:dc:15:0e:ec:71:6e:0a:23:3c:12:
                    92:1a:38:64:c1:1f:03:8f:77:94:e3:be:4a:77:3d:
                    df:3d:bc:7d:11:ed:df:d1:81:8f:9c:5b:f8:cd:67:
                    2e:b6:fb:03:e1:c2:5d:79:42:6d:2d:5f:8e:f4:24:
                    4b:bc:07:44:1a:8b:71:9e:3a:5b:4a:f7:23:f6:1c:
                    89:13:ae:f3:a8:06:bc:bf:98:f0:ed:35:f7:11:1c:
                    a9:fa:47:df:4a:c5:8c:0b:90:26:ba:b3:20:8c:10:
                    ce:32:13:5e:f1:28:95:50:d2:a9:aa:66:66:5e:71:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:38:D1:BB:9A:B8:16:1F:E3:77:7F:D5:63:19:AA:50:43:A4:3B
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4f:cd:65:d1:ad:b1:ce:dd:e3:79:22:ac:42:75:5e:fc:72:
         1c:d6:e8:77:da:02:a1:36:03:bd:d9:3b:0e:56:78:ca:40:0b:
         7f:f9:06:5d:18:8c:8b:da:87:11:6f:4b:7e:13:fd:67:e3:16:
         67:ef:b5:35:e5:f2:81:fa:1d:99:d2:7d:bb:0a:e3:15:82:59:
         2d:f0:7a:cb:e8:68:2e:31:32:e9:e8:89:ff:14:0b:9e:19:e6:
         fb:d4:90:b2:2a:1b:9e:bd:30:f0:5d:28:10:68:b5:7e:b4:fe:
         d4:fb:ff:ef:8d:d7:65:1f:8f:e3:be:ed:16:40:9c:20:d5:0c:
         dc:04:9b:67:51:31:aa:29:11:58:7a:5e:f0:ad:06:50:91:c9:
         51:19:de:b9:3a:e7:05:c2:b7:6d:f9:f9:9f:3a:5d:64:48:0b:
         7c:ff:c4:cc:12:49:46:8a:47:67:b5:1d:4f:a2:43:23:be:6f:
         79:0d:00:72:b7:a6:24:39:b7:1f:96:11:d4:a7:6e:71:ff:9d:
         47:90:08:03:f4:ac:21:4e:30:d7:36:47:54:0b:94:7c:84:0a:
         63:68:fb:cf:f6:a4:7c:96:7a:c7:39:50:14:59:c5:ce:fe:f7:
         45:75:fd:ae:63:a1:0e:c9:33:b9:bd:82:42:f6:cf:5f:5e:21:
         ca:e8:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:21:54 2025 by rpki-client