Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
File:                     0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json)
Hash identifier:          p0ko8ngHVNnysxsUZM0+1qu8GZ3fLMI911MmYmoEDeY=
Subject key identifier:   74:76:ED:7A:AE:68:DF:8E:21:EF:ED:66:0A:1D:4F:39:5C:13:6A:75
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       4B64ACE35149BF83CF6F29F5DC08A69F51630872
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
Manifest number:          0199
Signing time:             Fri 31 Jan 2025 14:20:19 +0000
Manifest this update:     Fri 31 Jan 2025 14:15:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:35:19 +0000
Files and hashes:         1: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: ZquSsJEeyXTOwXFIYFOKOdMJ87RjowvVHQkcDV3W1gQ=)
                          2: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: NAlyE1gP5eEm2QCzZwWb0ZvOj7kmRHCKooa9+7IETXo=)
                          3: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: QNFyXkDjYxtjAY+XGMe5tcCI6hXOc6k0U04RR0wk06M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:64:ac:e3:51:49:bf:83:cf:6f:29:f5:dc:08:a6:9f:51:63:08:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Jan 31 14:15:19 2025 GMT
            Not After : Feb  1 16:35:19 2025 GMT
        Subject: CN=7476ED7AAE68DF8E21EFED660A1D4F395C136A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:86:c9:e6:2c:bc:3b:0c:d7:3c:af:bd:df:
                    eb:14:3c:d3:05:c8:f8:5d:55:a1:75:b8:83:45:d3:
                    7e:39:59:31:27:05:0e:43:c3:a6:73:f8:f1:50:45:
                    e1:0d:89:a1:8c:34:c9:45:16:11:38:72:b9:8d:df:
                    73:38:d5:79:1e:c2:ed:80:78:21:08:b4:f8:20:da:
                    66:10:9f:e2:02:73:b7:c8:85:30:b8:cf:37:d9:f9:
                    29:71:72:56:ac:b8:28:c9:f3:9b:0d:29:3e:94:9c:
                    ed:35:79:6f:46:cc:ab:da:d2:fd:03:7b:7e:46:20:
                    b7:ab:95:df:a4:78:78:b7:81:ee:39:3c:e6:a5:5e:
                    b7:d8:a8:1c:2a:e3:65:8b:4b:83:26:7b:3d:25:1c:
                    7d:64:29:97:bf:29:75:57:53:69:93:35:8b:aa:c8:
                    23:d1:34:0e:1d:3a:75:26:69:4f:31:fb:ba:99:69:
                    ff:99:b5:cc:6c:3c:78:10:3b:2f:47:43:3f:39:f0:
                    e7:b9:6d:9e:61:04:ef:77:1e:3f:00:91:b0:8b:46:
                    a1:90:e3:dc:cb:9d:89:4f:ef:ff:87:13:81:8e:84:
                    c0:77:1d:07:14:e2:68:4f:c8:57:e4:15:23:33:70:
                    dd:d1:20:03:25:c8:c6:dc:f0:a6:ee:b2:6b:b2:0e:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:76:ED:7A:AE:68:DF:8E:21:EF:ED:66:0A:1D:4F:39:5C:13:6A:75
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:11:d3:c4:33:cd:b8:8f:f9:6b:5b:32:47:03:07:f0:7c:41:
         be:cd:1e:1d:f9:05:f3:b9:f7:12:7d:a8:b4:1b:c5:f8:d7:0a:
         cd:e0:2e:0c:2f:63:f3:4b:fd:57:3c:cc:51:e3:6b:d7:24:96:
         16:6b:01:83:4a:27:25:59:f0:61:f4:ab:2f:58:ae:3d:b9:4c:
         1e:7e:5d:e1:08:c6:d9:a4:2e:cc:d0:6e:82:c8:23:28:dd:e6:
         cf:22:27:16:e9:f9:53:d1:84:c4:6b:eb:dd:99:62:aa:4f:55:
         e5:96:24:f1:61:da:ca:37:c7:2c:2a:8e:39:94:63:17:07:b7:
         e6:41:c1:b7:c4:3c:ce:2a:1c:d0:3e:ec:32:3f:62:51:e1:51:
         15:a6:d9:49:7c:5e:c1:6c:f6:45:37:e2:be:44:5b:d7:fc:bb:
         61:92:f4:3d:53:da:de:71:55:ce:ab:48:1e:92:6a:2e:72:d1:
         f2:04:7f:41:47:d1:2b:2d:ac:73:8c:ec:ab:cf:22:65:7e:78:
         e0:00:6b:79:08:14:1e:c0:ed:26:e7:2e:90:e9:d7:92:2a:bc:
         74:2c:f1:f9:76:26:4c:d8:ff:80:29:6c:97:ea:e3:34:ea:26:
         d1:10:7d:6b:a6:f1:40:2c:3a:9d:70:19:82:94:82:1c:89:31:
         a9:ce:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:22:10 2025 by rpki-client