Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
File:                     9A72AC165710D3D2240950F90FF41932E5992CFB.mft (raw, json)
Hash identifier:          ZSu6szUDBvHYyjJNmrQUxTwnQ5nXIyzK9fWGrutqhrQ=
Subject key identifier:   2A:4A:F3:91:4E:A9:46:4A:8D:EB:07:BC:E6:4D:C1:41:41:97:E4:F7
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       6A014230831F15429826931A8BBED40811766143
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
Manifest number:          018F
Signing time:             Fri 31 Jan 2025 01:29:12 +0000
Manifest this update:     Fri 31 Jan 2025 01:24:12 +0000
Manifest next update:     Sat 01 Feb 2025 03:03:12 +0000
Files and hashes:         1: 34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa (hash: BrOe9iDLS58jfkTPYHbJjXRNJg4ZngX/1q+auK4/xBw=)
                          2: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: 9RRF0IuyB4K5MSrg/uXvFp/AlbvE8/F/HNGP/SHbNhc=)
                          3: 9A72AC165710D3D2240950F90FF41932E5992CFB.crl (hash: xhwWEPWwsAGa+EIgbmoesxDydn5/EorhFbNvnfSR9mk=)
                          4: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: Swr3zUSynVKriES46fIeT7N7FMRUV22WemjMyEc1kc8=)
                          5: 34352e3137392e3133352e302f32342d3234203d3e20323639303739.roa (hash: TyTkD+dKKkbZLL2NJKIEeZ9zs9uQnT8GRvopuaBfSWc=)
                          6: 34352e3137392e3133342e302f32342d3234203d3e20323639303739.roa (hash: vXrMZtQqvInzYkiUoWKggUkFJR4zUqiIBqLHBX1iBKg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:01:42:30:83:1f:15:42:98:26:93:1a:8b:be:d4:08:11:76:61:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Jan 31 01:24:12 2025 GMT
            Not After : Feb  1 03:03:12 2025 GMT
        Subject: CN=2A4AF3914EA9464A8DEB07BCE64DC1414197E4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:0a:99:6c:af:2e:9b:39:87:be:04:93:7d:
                    6a:cd:f5:fd:0d:34:01:9e:c5:1a:c6:86:0e:ba:ba:
                    ef:4c:30:bc:7e:7a:3d:3a:96:d7:6d:9b:b1:9c:7b:
                    12:d0:37:61:66:a8:44:35:1d:71:d1:bd:f1:a0:97:
                    a4:72:2d:77:1d:b2:55:2b:dc:f6:bb:ad:a4:a1:67:
                    1c:11:fc:b7:35:64:74:8b:97:7c:56:ca:65:fe:e1:
                    90:86:9a:c8:8c:5d:4e:5d:f0:37:82:fc:06:f7:6a:
                    84:3d:71:c6:bf:36:eb:52:dc:d0:b9:35:f1:62:04:
                    89:41:a9:27:29:e1:e8:f9:16:e7:7d:e3:e3:22:11:
                    c0:fe:84:99:42:a1:d2:0e:33:44:81:61:84:37:e1:
                    17:84:62:39:2d:9f:6b:4b:2d:40:43:7a:39:1d:ec:
                    83:c5:18:da:4b:0d:55:88:2b:03:a1:06:1b:d7:b7:
                    c8:40:68:b0:6c:b9:26:26:22:a3:da:11:13:cb:1f:
                    d8:8b:87:9f:46:43:5b:94:9b:87:d8:ff:6d:03:a2:
                    ac:e8:8b:0b:aa:79:6d:9d:2c:f4:07:58:fe:25:b8:
                    18:9c:95:4c:51:15:75:db:f4:91:86:2c:1b:40:af:
                    1f:f7:6d:23:b0:52:ac:fd:be:4b:b1:df:92:d6:e6:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4A:F3:91:4E:A9:46:4A:8D:EB:07:BC:E6:4D:C1:41:41:97:E4:F7
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4c:1f:b8:00:7b:0b:7b:42:32:11:b1:1e:5f:76:8c:c0:60:
         f0:bd:97:6d:43:c0:c6:95:b5:ed:00:64:f0:98:94:15:71:e0:
         fd:0f:48:cc:c4:46:3f:01:8c:21:48:43:1b:38:c1:46:1a:98:
         38:ae:c2:06:3d:7c:1f:c4:87:2d:cd:3c:f1:2d:76:c8:6a:5e:
         62:0f:69:e9:1f:13:98:ae:fc:af:dd:c5:e7:99:f9:56:c4:3f:
         f6:6e:51:0f:20:b9:cf:74:dc:2d:fc:b8:dc:b2:04:33:9e:cc:
         cb:ac:a5:26:65:f8:af:9f:92:e9:f5:46:3a:ae:6e:51:44:7d:
         b3:f8:d5:cd:27:eb:40:e0:b2:a9:be:94:d2:7b:c4:d2:e9:f7:
         67:21:5d:1b:1f:ac:38:d4:1d:08:b2:f4:e5:15:8c:05:85:d5:
         28:c3:b8:53:dd:37:b9:f1:27:72:f4:26:12:98:c5:de:dc:9a:
         df:ad:04:bc:94:bf:a5:3f:3d:81:c8:95:7f:7e:ff:a7:23:fd:
         fc:ed:37:74:d4:a7:79:12:93:cf:df:d4:1e:20:8c:40:35:a0:
         bb:68:7b:73:47:f2:af:5d:50:f3:b4:14:e8:be:99:44:b1:d9:
         23:5c:0a:6e:dc:01:e7:71:c5:a8:f0:31:89:59:3d:d8:82:9a:
         46:76:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:22:39 2025 by rpki-client