Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft
File:                     5BE4378A5E0B1629852BDD255130076ED843FD31.mft (raw, json)
Hash identifier:          fC7uqnduc4/flc7s3pO/YQjxd9fyHWq0l/Zwu9Tte28=
Subject key identifier:   AF:18:1D:EC:18:14:0D:8F:EB:FE:5A:20:81:3C:90:74:2C:4D:4E:60
Authority key identifier: 5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31
Certificate issuer:       /CN=5BE4378A5E0B1629852BDD255130076ED843FD31
Certificate serial:       6606026A9499625995231BED64DDAC304CF96DDF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 10:46:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:41:22 +0000
Manifest next update:     Sat 01 Feb 2025 14:36:22 +0000
Files and hashes:         1: 323830343a346564383a3a2f33322d3438203d3e20323638323836.roa (hash: GEQ/zc8/7LtjKiuD1Edl55rV4vYIygqXYEkvIqSndr8=)
                          2: 34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa (hash: AyixVWWVAAkpKmodLA9uV31jQKniiwuoJk/ixtsF46E=)
                          3: 5BE4378A5E0B1629852BDD255130076ED843FD31.crl (hash: uQgioesLs8gisFynliKK0v6ybuVXkf6S1DQheQwj0GQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:06:02:6a:94:99:62:59:95:23:1b:ed:64:dd:ac:30:4c:f9:6d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE4378A5E0B1629852BDD255130076ED843FD31
        Validity
            Not Before: Jan 31 10:41:22 2025 GMT
            Not After : Feb  1 14:36:22 2025 GMT
        Subject: CN=AF181DEC18140D8FEBFE5A20813C90742C4D4E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:52:1c:de:84:79:c7:e3:18:2c:4e:2f:9c:
                    3a:f7:85:f4:1a:70:01:a3:a7:4d:7e:27:12:d8:b5:
                    99:3a:de:6f:e5:66:b6:5c:ce:b6:13:a1:6f:2a:8d:
                    2e:d4:2c:7e:5e:74:1a:fa:0c:ae:71:9b:c3:3f:10:
                    fb:ef:40:c5:6c:28:b6:66:da:57:c9:4a:1b:ef:d4:
                    c7:30:d5:a9:3d:36:ec:63:ae:ac:4c:48:8b:9d:70:
                    5c:7d:4a:31:bf:b5:f6:60:b4:ab:79:cd:ff:90:93:
                    8d:4d:67:bf:6f:ed:61:0e:c7:59:e8:88:d1:6b:7d:
                    e8:8c:df:98:e4:38:90:65:e4:58:3a:95:96:18:8a:
                    ae:dc:d6:8d:31:06:50:7b:89:a8:b0:fe:46:20:cc:
                    da:58:f5:a6:60:27:eb:4f:9e:04:b4:9a:87:e6:d7:
                    6c:79:93:9f:c7:c8:38:84:9f:a6:81:93:05:81:28:
                    f2:49:7c:59:00:06:ba:5b:99:67:78:cf:c8:aa:d8:
                    a0:94:c6:51:9a:83:3a:90:74:65:ba:fb:5b:ec:e8:
                    11:9c:90:e2:75:a9:ca:97:f2:b6:49:4b:19:7a:b7:
                    64:b3:7e:05:83:64:cd:39:a9:e4:b1:7e:8d:44:c2:
                    7c:ec:9a:9d:41:29:93:24:03:38:1c:0c:aa:fb:53:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:18:1D:EC:18:14:0D:8F:EB:FE:5A:20:81:3C:90:74:2C:4D:4E:60
            X509v3 Authority Key Identifier:
                keyid:5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:23:24:8f:70:aa:5a:8d:20:be:f0:9b:e6:7c:2c:48:c2:5c:
         6d:57:94:0a:b3:ba:7e:d4:37:a4:57:88:ce:b3:95:0f:ea:58:
         d8:81:56:9b:bf:d4:8d:eb:af:ee:e5:ea:cd:15:26:b3:aa:1a:
         b7:a0:25:24:9a:60:4f:9e:c3:98:dd:80:d5:d0:ab:e0:ee:f5:
         85:af:0b:39:e2:5e:5d:bf:50:79:0d:66:1c:55:55:d2:3c:34:
         d0:b5:5b:8c:99:09:35:63:99:88:16:7f:4c:b4:6a:88:ab:1e:
         99:dc:28:3a:e6:ec:80:94:60:d0:00:5a:4e:0e:41:83:8b:a3:
         23:5e:a5:29:e1:0e:a4:55:3e:9f:f8:3f:be:fe:87:7b:b9:b6:
         aa:e2:f2:e3:f4:5d:ba:cc:b0:dd:73:c3:ba:66:e7:30:cc:ee:
         1d:7e:a5:86:4a:59:53:a0:53:59:8b:62:e0:fd:9b:c1:db:01:
         c6:56:24:56:6d:15:d0:b1:20:64:57:6a:eb:19:2b:87:66:30:
         fc:30:ab:dc:02:26:55:c7:e7:20:cb:be:a2:b9:47:70:6b:bf:
         ac:71:5a:e5:2a:20:8e:7c:0a:a4:46:e9:30:99:4a:11:1a:c7:
         fa:2e:62:3b:63:ea:25:4a:bc:6d:d9:15:0c:3f:58:2f:8e:7e:
         36:df:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:40 2025 by rpki-client