Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft
File:                     5D4824580436E9E25FD6D099253DCC3B98F6438C.mft (raw, json)
Hash identifier:          yzMNFLjxkTg6XiT2v7mG0V08J8Bczj/tTSLYQnki94M=
Subject key identifier:   FC:9D:2F:BC:26:13:80:A1:04:87:6B:7D:1D:D6:A2:9B:11:5C:EE:8E
Authority key identifier: 5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C
Certificate issuer:       /CN=5D4824580436E9E25FD6D099253DCC3B98F6438C
Certificate serial:       0B25C89E55861D6BAB8EAB003580C77CA14ED284
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft
Manifest number:          0198
Signing time:             Fri 31 Jan 2025 17:56:50 +0000
Manifest this update:     Fri 31 Jan 2025 17:51:50 +0000
Manifest next update:     Sat 01 Feb 2025 21:03:50 +0000
Files and hashes:         1: 323830343a336139303a3a2f33322d3336203d3e20323636303936.roa (hash: rdPIY83nywi+epjQkJqUjpU7rDxamQQJfU5dICAdALs=)
                          2: 5D4824580436E9E25FD6D099253DCC3B98F6438C.crl (hash: CY1CQaV1JmMc217A2fzfcct48iFPbRi4VUOlAWMCnkM=)
                          3: 34352e352e3130342e302f32322d3234203d3e20323636303936.roa (hash: lufWjo1+B/p7dqDx6tcD81vsmQyvhIVr1jxYwPfhMEo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:25:c8:9e:55:86:1d:6b:ab:8e:ab:00:35:80:c7:7c:a1:4e:d2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D4824580436E9E25FD6D099253DCC3B98F6438C
        Validity
            Not Before: Jan 31 17:51:50 2025 GMT
            Not After : Feb  1 21:03:50 2025 GMT
        Subject: CN=FC9D2FBC261380A104876B7D1DD6A29B115CEE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:43:0c:8a:0e:b1:c6:40:40:40:eb:12:60:
                    8e:fe:fc:e6:dc:ae:24:74:cc:0c:30:ba:90:dc:48:
                    69:b7:0b:a1:19:b7:cc:67:d0:da:2f:a0:cc:54:26:
                    e7:3c:37:56:ff:1a:42:ef:97:64:06:52:34:a4:6a:
                    d0:29:20:74:be:ec:af:b4:39:09:d2:41:08:17:fc:
                    d5:f0:d9:27:db:d3:bc:41:72:b4:ce:31:1c:27:0f:
                    dd:63:a7:db:e7:df:2f:5b:7b:1a:92:40:db:8c:77:
                    a0:95:cc:c8:12:10:8b:6c:e2:66:98:cb:e9:9a:25:
                    78:c1:4f:cc:44:d3:50:98:6c:b1:a5:28:e6:b0:3f:
                    89:3e:97:72:5b:c4:23:63:26:ea:3a:75:b0:8b:09:
                    58:bd:d5:cd:cd:95:e6:d5:19:80:50:28:8d:3d:9e:
                    fa:b4:2e:80:12:7e:2a:f0:a7:28:ac:c1:94:58:b1:
                    20:6d:44:87:ba:58:83:72:66:f5:ff:52:aa:4f:99:
                    bc:25:be:db:fd:9e:3b:9c:64:c7:d3:10:a5:d0:1e:
                    08:33:8a:b7:f0:fd:de:f4:3d:72:32:94:9f:83:56:
                    dc:a2:1e:8d:b4:e1:97:47:bb:88:9c:dc:1f:20:ac:
                    ce:d8:0a:5b:32:4c:0d:79:da:fe:d9:07:8b:d8:46:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9D:2F:BC:26:13:80:A1:04:87:6B:7D:1D:D6:A2:9B:11:5C:EE:8E
            X509v3 Authority Key Identifier:
                keyid:5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:d6:25:ea:47:8f:58:8d:8e:e0:fb:bb:b8:da:02:c0:b1:
         04:03:54:b5:61:9a:ff:f9:39:50:97:e8:fc:14:d5:2c:d7:f4:
         36:d2:3f:c0:dc:1d:0e:d2:36:94:0e:0c:c0:d5:6a:88:ed:7a:
         1c:a9:53:9c:a7:b9:71:96:bc:6f:6a:76:ed:72:a0:02:ad:b2:
         f5:05:88:38:df:ef:4b:6c:c5:b2:2c:c3:5b:51:59:b8:86:18:
         5b:ca:37:34:38:b0:ef:ef:38:dd:84:a2:ac:b7:a8:f1:59:2e:
         50:e1:51:60:05:4c:f9:4f:d7:0c:b3:e5:d2:74:d9:fb:20:4c:
         54:23:40:c3:00:be:52:82:d2:c0:dc:64:04:a1:52:3c:cd:3f:
         1b:3f:39:96:42:ee:fa:e2:1b:9a:6a:56:ab:4d:34:31:ad:67:
         67:21:d4:4f:fa:5c:34:e0:dc:3e:e3:3d:37:9e:e3:80:e9:94:
         17:c5:46:c8:fd:96:46:a4:eb:29:89:d9:a7:b2:f1:ce:03:28:
         43:a8:06:b2:37:14:05:96:7c:4e:fc:5e:11:0b:d6:b4:c9:57:
         78:d2:58:bc:77:a3:94:65:85:3e:b2:1a:27:05:1e:ab:9b:84:
         45:4b:bc:76:47:77:db:be:4d:02:7c:60:e7:f7:f8:fd:9c:ed:
         bb:8c:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:45 2025 by rpki-client