Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
File:                     BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft (raw, json)
Hash identifier:          MRbACCytt/FVtYA35QOw7K9RZtHvqaVGE6bFfc1YYjo=
Subject key identifier:   08:08:34:7F:A8:40:89:40:85:C9:02:2D:40:3B:A9:48:C9:45:ED:0A
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Certificate issuer:       /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial:       7B6AC6AD14A17DD871DF975C2A409348CD09C82C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 13:58:54 +0000
Manifest this update:     Fri 31 Jan 2025 13:53:54 +0000
Manifest next update:     Sat 01 Feb 2025 15:32:54 +0000
Files and hashes:         1: 323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (hash: dxqxMCCk6w4F2uQbNYBihGcjynQzW8oiqV6FBB1qkbI=)
                          2: 34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (hash: IyoHc/0DlX1O3b3GBAmU7ScmF5OtT5yvqQE7kC4/vF8=)
                          3: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl (hash: ATAzbaVmlmo2qfa9fp41mdP0TjuN6lws+zIWrPjTABk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6a:c6:ad:14:a1:7d:d8:71:df:97:5c:2a:40:93:48:cd:09:c8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
        Validity
            Not Before: Jan 31 13:53:54 2025 GMT
            Not After : Feb  1 15:32:54 2025 GMT
        Subject: CN=0808347FA840894085C9022D403BA948C945ED0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:af:d6:de:63:da:67:b0:75:fa:fd:85:81:af:
                    ba:ca:b1:20:c8:37:18:be:22:cf:d4:05:e0:fa:ce:
                    6c:0c:15:16:76:24:a9:63:3c:cf:88:0f:2f:96:bc:
                    c1:9f:a6:e5:76:c3:5d:0a:9d:7e:9a:66:80:3b:0f:
                    6a:9d:77:7f:a1:31:ab:6a:c1:21:97:32:7e:e6:65:
                    ed:3e:c7:7d:2d:8b:d0:0d:8a:7c:d9:35:13:c3:a4:
                    3c:4d:5a:a3:b1:cc:c4:3d:29:7a:cc:85:b3:2b:ff:
                    52:9b:96:a3:5b:f6:64:4f:4c:d0:ea:9c:fc:c3:e0:
                    a8:dd:dc:f1:54:d0:ff:0f:66:2c:a1:58:ae:e6:64:
                    f7:90:52:ec:81:8d:46:51:77:ee:74:2d:e0:a6:40:
                    21:fa:3d:49:63:90:a1:6d:43:ca:7b:d7:5f:16:2d:
                    c8:17:ea:5e:b7:2b:cb:a2:8f:3c:3f:94:09:ea:0e:
                    ad:9e:8e:3f:76:57:6c:78:05:2c:e4:20:ee:6f:96:
                    b5:ff:e4:82:12:fc:5b:2b:bb:ea:ad:4e:98:27:a6:
                    69:1c:fb:5b:4a:46:2a:d3:74:6c:63:da:d6:da:38:
                    b9:3f:3b:12:e4:5d:77:f1:c3:ed:fc:30:cc:81:ba:
                    12:6b:35:ab:5d:6a:5f:20:c8:dd:a5:7d:4b:5b:9e:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:08:34:7F:A8:40:89:40:85:C9:02:2D:40:3B:A9:48:C9:45:ED:0A
            X509v3 Authority Key Identifier:
                keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:f2:cf:dd:67:15:5a:70:e3:58:58:fe:0c:fc:1e:46:f9:
         9b:b1:13:aa:c1:f0:84:98:dd:ab:b5:d8:a6:e8:8d:52:49:f4:
         90:91:4b:f7:23:21:ca:19:d2:6a:ff:4b:8c:8e:40:fc:33:2b:
         e0:b2:44:f3:a4:1d:29:8d:c6:af:ed:1a:fc:4a:8c:3e:ae:6c:
         a3:0a:61:db:23:e5:ac:d3:da:bf:ca:f4:ed:0c:67:75:f5:ab:
         86:09:36:21:5a:61:22:31:94:bb:c1:b4:c2:75:39:0f:6c:20:
         94:91:b2:19:11:bb:41:58:9b:fb:ff:90:86:04:82:4a:2f:9d:
         1e:1e:b8:50:75:38:4c:f7:d3:46:18:e6:a5:43:84:22:42:3c:
         a9:6c:d2:b2:94:20:5f:d5:60:29:f8:56:85:5b:8a:a5:80:1c:
         9c:d1:b1:aa:4c:79:06:b5:ab:ba:5e:1a:87:34:f3:29:4e:88:
         b6:63:79:03:aa:5a:ff:e2:0c:37:bb:16:fc:75:9f:da:79:d0:
         81:c2:20:64:55:46:55:85:2d:65:ad:8a:db:0e:2f:ef:cf:03:
         d3:2a:f0:9c:37:05:4a:6d:db:b3:20:fe:28:70:fc:29:98:9e:
         d9:76:f7:67:99:bb:d8:1f:6b:4d:f2:35:40:51:e0:4b:09:8a:
         5c:b9:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:43 2025 by rpki-client