Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft
File:                     5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft (raw, json)
Hash identifier:          tj+cWiwhgYY1J0fv+HNoaKBs6atlAlaEtl7ZgTHkbII=
Subject key identifier:   E9:1F:18:9E:5A:EA:10:83:3A:67:B2:E2:B9:3C:E2:77:99:17:F7:A4
Authority key identifier: 58:91:D2:45:4F:33:64:90:E5:D3:34:AA:9E:3D:63:FE:E0:EB:D8:FC
Certificate issuer:       /CN=5891D2454F336490E5D334AA9E3D63FEE0EBD8FC
Certificate serial:       59F7FF2B113CE3A26615D09B31CEA0659547D213
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 04:57:12 +0000
Manifest this update:     Fri 31 Jan 2025 04:52:12 +0000
Manifest next update:     Sat 01 Feb 2025 05:57:12 +0000
Files and hashes:         1: 5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.crl (hash: nKEglOrvuSWKMkcjYfJCd+BXA9jfTWdrbPdfNxE92hM=)
                          2: 323830343a333037633a3a2f33322d313238203d3e20323634393534.roa (hash: /il0xtj26Lw5O/RHOQaMWiKpW0vI/cSEO3/Fju5pKuU=)
                          3: 3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa (hash: s9t774uWcP1eCCJmuwFCF/QDq/d3Yl7LJzQzTsFCJ0U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f7:ff:2b:11:3c:e3:a2:66:15:d0:9b:31:ce:a0:65:95:47:d2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5891D2454F336490E5D334AA9E3D63FEE0EBD8FC
        Validity
            Not Before: Jan 31 04:52:12 2025 GMT
            Not After : Feb  1 05:57:12 2025 GMT
        Subject: CN=E91F189E5AEA10833A67B2E2B93CE2779917F7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:4c:5a:55:75:6e:c2:da:13:c2:89:26:a4:
                    69:97:d7:e5:54:a6:ff:51:f2:d4:a5:26:ff:c9:fa:
                    a4:de:0b:58:d7:d4:c0:cb:de:60:a7:e7:6a:71:40:
                    10:43:da:91:a8:10:c2:71:f5:2e:ec:a9:17:44:b4:
                    65:87:c2:21:8b:87:02:91:a1:6b:26:7a:f6:cb:d6:
                    a6:25:65:e9:41:85:c5:17:3f:33:d7:90:33:62:61:
                    9a:a6:f5:b5:58:d4:86:82:3a:33:3f:73:a9:30:6d:
                    79:36:d5:a8:a3:54:1c:80:df:bd:51:4d:91:e0:e8:
                    a5:dc:4c:bc:2c:c0:c2:42:7b:c2:1f:bc:46:07:ac:
                    37:1e:87:6a:df:be:b9:93:40:f3:b7:0b:22:9e:7c:
                    2e:dc:0e:26:fc:47:a9:03:76:a9:cf:db:b3:d6:6b:
                    72:7e:f4:fc:1b:8e:6c:fc:07:d6:96:b9:c2:96:35:
                    ab:ab:b7:41:96:aa:2c:d6:2f:df:7b:26:99:61:7b:
                    83:8b:d8:c0:77:56:92:8e:13:a3:1d:cd:f3:8f:fa:
                    4e:4b:3c:d9:61:11:b5:4f:de:06:53:d2:62:28:2f:
                    13:4d:4e:f7:c1:a1:62:83:49:34:ec:b2:d4:f3:ce:
                    00:e5:4e:a3:ff:c6:02:49:e3:a4:80:45:66:54:d5:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:18:9E:5A:EA:10:83:3A:67:B2:E2:B9:3C:E2:77:99:17:F7:A4
            X509v3 Authority Key Identifier:
                keyid:58:91:D2:45:4F:33:64:90:E5:D3:34:AA:9E:3D:63:FE:E0:EB:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:83:b4:4a:97:f6:6b:13:f5:77:cd:8f:6b:47:60:72:ba:ad:
         93:2e:e7:e9:fa:bf:0c:a3:f6:f5:8f:ac:c7:5f:8a:9c:94:78:
         f2:29:f1:3c:88:dc:91:e7:e6:26:99:00:2f:9a:3c:24:9b:24:
         a2:95:a9:d4:a3:3b:44:ac:5e:89:a2:66:5b:b2:d0:9d:ed:1c:
         71:87:52:0a:e4:02:05:30:05:1b:a3:1c:25:0c:e7:cb:88:ea:
         49:ba:e4:4e:4f:84:3c:51:3c:7b:1a:b2:51:d0:02:23:c4:62:
         21:28:ce:7e:81:3e:cd:9f:20:6c:31:5e:84:a5:47:b1:2c:c0:
         11:f0:37:1d:a8:27:44:13:0d:ce:3e:f1:d2:ad:0c:4f:44:01:
         c2:d7:de:39:57:21:56:82:ee:a4:57:5d:35:25:08:c2:d9:78:
         d7:83:5c:be:69:b4:f0:f7:d8:e6:4e:b9:1b:98:59:f0:dc:76:
         99:8f:c2:f8:90:a9:8d:eb:a7:e9:13:95:23:aa:e6:3b:3c:8c:
         82:78:f1:b9:3a:00:4f:d5:47:a2:10:0f:fa:6e:bf:ae:82:ca:
         f5:32:c0:88:fa:af:c8:f8:ca:63:6d:53:f4:72:6b:2d:74:11:
         ca:e4:cd:0f:c8:17:b7:36:9d:52:94:87:3f:46:3b:02:9c:1d:
         a7:94:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:01:52 2025 by rpki-client