Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft
File:                     2003446125EA52EEA4D454A94B69C79AEDEB7687.mft (raw, json)
Hash identifier:          Q9TvBU+SjVmYYD7+/ocqO+tQ69J5lwwhOolCBSVJyyo=
Subject key identifier:   CE:CD:DD:19:95:F2:16:71:80:B4:A0:55:A2:9A:97:C1:21:FF:8C:FF
Authority key identifier: 20:03:44:61:25:EA:52:EE:A4:D4:54:A9:4B:69:C7:9A:ED:EB:76:87
Certificate issuer:       /CN=2003446125EA52EEA4D454A94B69C79AEDEB7687
Certificate serial:       4F0EB4AA0DD563BFE59B0D9F2E9B4C4B1C123AFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft
Manifest number:          0160
Signing time:             Fri 31 Jan 2025 02:56:23 +0000
Manifest this update:     Fri 31 Jan 2025 02:51:23 +0000
Manifest next update:     Sat 01 Feb 2025 03:55:23 +0000
Files and hashes:         1: 3137302e38322e34382e302f32332d3233203d3e20323636343338.roa (hash: mHuelaLuqLx5UaUMnE2z0r0vrdzplQvevgx72IVuFXU=)
                          2: 2003446125EA52EEA4D454A94B69C79AEDEB7687.crl (hash: j1m9u8AgT3gsP8GpEaUEyzdWFsCoF2PZwLizhBibznA=)
                          3: 3137302e38322e34382e302f32322d3232203d3e20323636343338.roa (hash: YmC0sGUTLYnCUS0ERJ04i86WP3sEksD1+nD3PUknSag=)
                          4: 323830343a333764343a3a2f33322d3332203d3e20323636343338.roa (hash: TUUYd0NccVuu9M4ekO1ueQ06Acp7xQX0Xdzh+iS7Xq8=)
                          5: 3137302e38322e35302e302f32332d3233203d3e20323636343338.roa (hash: 0O29DjcojPdtPydRbpD8ITeWvO6sEsBV97Z9p9vrmzQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0e:b4:aa:0d:d5:63:bf:e5:9b:0d:9f:2e:9b:4c:4b:1c:12:3a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2003446125EA52EEA4D454A94B69C79AEDEB7687
        Validity
            Not Before: Jan 31 02:51:23 2025 GMT
            Not After : Feb  1 03:55:23 2025 GMT
        Subject: CN=CECDDD1995F2167180B4A055A29A97C121FF8CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:4a:22:b2:d4:47:25:ad:76:e6:ba:80:4e:
                    bc:5b:3a:a0:08:1b:00:ae:e5:35:c7:a2:a1:db:95:
                    e5:0b:69:30:a9:d5:61:e9:1d:1f:02:1a:ae:85:b4:
                    aa:f0:57:b4:ae:51:ad:f2:d4:4d:ce:6c:c9:14:d3:
                    f3:33:28:22:dc:28:5c:ff:8c:ae:86:fa:03:e7:38:
                    0a:0b:a0:e8:4a:30:ed:56:7e:88:47:d0:41:1d:da:
                    15:ae:98:46:26:10:cd:0a:0f:79:f1:18:39:66:61:
                    11:a7:02:b1:4a:ef:07:da:4c:76:00:51:98:33:17:
                    b0:03:bb:cf:4c:1a:1f:95:85:18:cd:9d:c3:8b:51:
                    3b:9c:27:54:e6:dd:50:b3:15:13:42:f8:0a:67:81:
                    ea:6d:8f:49:cf:be:e3:bc:80:b4:02:0d:3e:20:6f:
                    40:d5:ed:44:68:9a:85:f8:60:89:d1:87:cd:cb:22:
                    38:b7:eb:32:af:7d:b0:3c:59:89:c5:d7:34:91:61:
                    90:8a:ef:ad:77:f9:5c:63:31:62:4a:29:23:c6:d7:
                    b0:26:00:ae:1c:f3:95:ca:0e:09:55:00:fe:cc:ee:
                    8e:52:ed:93:3f:02:09:d9:ba:ae:cc:a7:58:87:bf:
                    ea:8d:72:4f:ee:55:29:57:15:66:2e:bd:41:3b:71:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:DD:19:95:F2:16:71:80:B4:A0:55:A2:9A:97:C1:21:FF:8C:FF
            X509v3 Authority Key Identifier:
                keyid:20:03:44:61:25:EA:52:EE:A4:D4:54:A9:4B:69:C7:9A:ED:EB:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:eb:16:19:7b:b4:49:ba:18:62:bf:1c:52:88:d9:e8:43:1e:
         f7:29:ac:fb:ca:d1:d1:e0:8a:c9:25:c8:2f:bc:a0:72:ec:74:
         7c:6d:23:8d:f0:c8:9f:e6:13:2b:0c:ce:47:fc:9e:fd:95:fc:
         39:80:30:a7:d7:83:d0:f8:79:3f:1c:75:1b:ae:73:14:fb:e6:
         1c:30:ea:c5:3a:01:37:ae:f6:06:ac:8d:1d:a9:1f:fe:f7:85:
         79:18:a4:f7:7b:8e:8f:47:e1:f2:0e:2b:8f:68:dd:75:5b:83:
         e9:a9:6c:71:5f:7b:ec:51:cb:43:98:14:c3:10:a0:3c:1c:2a:
         9a:a7:9e:c7:2f:fb:43:ef:09:10:5c:09:3b:6b:0f:0d:40:fc:
         18:01:54:db:7d:5e:3e:c5:6f:a5:9c:d6:6c:0e:a8:f4:85:6d:
         bb:d4:f1:2d:1c:73:5d:3c:55:c6:6e:67:1a:c9:c6:60:84:95:
         36:6d:9b:c7:25:f4:03:68:ae:32:10:fb:8b:71:78:64:27:7a:
         55:22:62:7d:fe:54:33:58:33:9a:cc:b2:60:7a:d9:b3:60:e4:
         f3:f0:7f:87:1b:ed:2b:00:50:2d:aa:6a:b8:48:7a:28:99:52:
         db:64:34:0c:6d:96:93:11:d2:76:a2:bb:df:9c:bf:85:28:c8:
         a5:82:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:18:07 2025 by rpki-client