Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft
File:                     972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft (raw, json)
Hash identifier:          JKhnrsiN7+TqwfIeKGKm/4ySIY4azIz2uNxNb4Ig808=
Subject key identifier:   48:F1:1E:03:C2:EC:F8:06:A1:53:5E:59:FC:16:C3:F8:8F:9F:61:01
Authority key identifier: 97:2A:2A:66:D2:C1:CE:70:79:ED:17:03:C5:17:51:0B:65:A0:A3:7D
Certificate issuer:       /CN=972A2A66D2C1CE7079ED1703C517510B65A0A37D
Certificate serial:       4F63FD45AE59BA7A81EF539626624300C8DB3A04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972A2A66D2C1CE7079ED1703C517510B65A0A37D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft
Manifest number:          49
Signing time:             Fri 31 Jan 2025 13:28:42 +0000
Manifest this update:     Fri 31 Jan 2025 13:23:42 +0000
Manifest next update:     Sat 01 Feb 2025 15:32:42 +0000
Files and hashes:         1: 323830343a343064343a3a2f33322d313238203d3e20323635393834.roa (hash: TCzswtVBsTnHY5qb0fxr+KxGnzmG67I1uvArA47Fo0g=)
                          2: 972A2A66D2C1CE7079ED1703C517510B65A0A37D.crl (hash: DZH01Eg7S1xIOiiv8Qw7UwMZgtdYbJ1q1gbsY/RSuaQ=)
                          3: 3138312e3139312e342e302f32322d3332203d3e20323635393834.roa (hash: glUmcWqGA/C/tX9HNNWuQ6OPpXxcVcRTEuqqsInpH3Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:63:fd:45:ae:59:ba:7a:81:ef:53:96:26:62:43:00:c8:db:3a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972A2A66D2C1CE7079ED1703C517510B65A0A37D
        Validity
            Not Before: Jan 31 13:23:42 2025 GMT
            Not After : Feb  1 15:32:42 2025 GMT
        Subject: CN=48F11E03C2ECF806A1535E59FC16C3F88F9F6101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:cc:c2:e6:6a:cf:90:cc:e0:4a:c0:4f:55:
                    9a:26:a1:c8:46:32:3e:41:13:94:c3:f8:00:65:fd:
                    69:23:ef:ef:e6:85:c6:1a:af:b5:92:f3:37:0c:5a:
                    3e:92:2e:98:38:28:c9:ac:b6:34:18:e0:5c:62:77:
                    62:8a:c2:49:f9:66:14:c2:e8:59:6a:3e:9e:07:49:
                    39:b6:85:0e:d0:33:f9:bf:77:7e:56:6f:22:21:e9:
                    bf:af:21:0a:ff:61:14:77:19:89:d4:53:9b:1d:66:
                    9d:d4:ca:94:f2:e2:a3:a3:51:50:6e:59:2f:a3:bc:
                    8d:20:78:82:13:2a:e4:0f:10:e6:c6:4e:f5:07:69:
                    d3:6b:36:e5:20:8b:36:c8:24:27:15:9f:35:dc:38:
                    7d:2d:5e:16:3b:95:b1:73:be:f4:57:20:ac:d3:fa:
                    04:fa:57:73:d1:33:78:f1:8b:6c:7c:56:63:24:a0:
                    a4:23:59:a3:48:e3:c1:56:ae:d1:15:a6:af:2d:11:
                    40:24:1b:46:21:9e:de:d0:84:1b:28:c4:86:64:4e:
                    64:20:f1:88:14:cd:c8:1d:83:96:14:ac:c8:9f:17:
                    1b:ae:0b:e0:0e:5c:d6:0c:05:47:a9:3a:55:12:e2:
                    58:12:f0:5d:a1:eb:44:5a:13:50:77:4a:4a:f8:06:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F1:1E:03:C2:EC:F8:06:A1:53:5E:59:FC:16:C3:F8:8F:9F:61:01
            X509v3 Authority Key Identifier:
                keyid:97:2A:2A:66:D2:C1:CE:70:79:ED:17:03:C5:17:51:0B:65:A0:A3:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972A2A66D2C1CE7079ED1703C517510B65A0A37D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:d8:e9:a2:a2:8f:a8:80:46:0c:33:1f:03:19:eb:d0:32:
         94:11:2b:2d:f5:6b:a6:c4:5c:d3:0f:7c:e9:88:6c:18:03:13:
         9f:82:ec:6c:fb:b4:f2:ea:d4:e0:fd:70:ce:78:2c:5c:06:2f:
         a2:42:a5:d4:1e:a5:d5:d6:8d:ca:b3:7d:cb:63:33:7d:c2:93:
         48:14:4c:e6:0b:23:d8:55:8e:1b:8e:c6:1c:9c:6a:79:c9:8f:
         b6:2d:bd:e5:bb:08:84:0f:4a:ed:ca:aa:2a:c8:fc:68:bb:12:
         f1:bf:c7:34:91:c8:5e:f9:66:e0:2b:8d:3b:32:02:08:84:31:
         3a:e9:34:42:eb:91:05:e9:e6:08:f3:be:d9:3e:d0:51:a9:04:
         b8:bb:a9:e8:71:68:c8:45:c6:ab:f1:32:19:87:0a:5b:be:0f:
         59:1d:85:4a:6c:99:02:46:91:34:fe:3b:33:d9:1b:4e:1a:08:
         be:c3:52:65:e1:e8:03:53:7e:60:a9:49:15:b4:54:8f:f4:23:
         6f:03:7f:7a:17:d6:ba:ef:d1:5a:79:6d:cd:b1:45:b2:1e:50:
         f1:ef:8d:62:12:33:73:98:dd:9e:1c:55:26:05:0c:4f:6b:d0:
         21:16:71:36:6d:1e:15:87:99:fe:65:28:b4:e7:46:ff:13:fa:
         fd:2d:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:31 2025 by rpki-client