Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft
File:                     D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft (raw, json)
Hash identifier:          GcIA1hHxhpeBsvuW99Mu1OztnqIhiGI2A2msQJPVGEk=
Subject key identifier:   A9:10:22:D2:F2:00:E0:14:C5:13:63:0A:56:43:18:DE:7C:82:74:28
Authority key identifier: D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA
Certificate issuer:       /CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA
Certificate serial:       0D80F17CA77F1CD68126B6A360B9F63C808C4114
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 13:10:19 +0000
Manifest this update:     Fri 31 Jan 2025 13:05:19 +0000
Manifest next update:     Sat 01 Feb 2025 15:24:19 +0000
Files and hashes:         1: 34352e3136342e34302e302f32342d3234203d3e20323731373531.roa (hash: PDs75Gn6YsxcIYD9QbxaMZUz+KucYOAVwaJ4s9vMak0=)
                          2: 323830343a383037343a3a2f33352d3335203d3e20323731373531.roa (hash: CdP3tshGoaMZ4evVosfiACDB4FzsOfn8Ouq+2WqxyBQ=)
                          3: D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl (hash: NTdehADzzjRcjizs6kFmeExTZgq/fGwkF8enHAjUfqQ=)
                          4: 323830343a383037343a323030303a3a2f33352d3335203d3e20323731373531.roa (hash: ss7KlZH9UvSYKBLzJ0EnRaWIxBi0abU5jLonpqzL87s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:80:f1:7c:a7:7f:1c:d6:81:26:b6:a3:60:b9:f6:3c:80:8c:41:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA
        Validity
            Not Before: Jan 31 13:05:19 2025 GMT
            Not After : Feb  1 15:24:19 2025 GMT
        Subject: CN=A91022D2F200E014C513630A564318DE7C827428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:ed:be:d8:8a:a5:e3:4a:e5:c0:44:de:3f:
                    c8:1a:73:9d:c5:a8:90:f8:9d:e5:07:ca:ad:ad:5e:
                    3f:a2:db:b7:11:5c:bc:db:59:f7:99:f3:c3:28:08:
                    01:f2:21:72:bf:9e:cd:b4:ef:0e:91:50:a7:fc:53:
                    cc:53:25:49:92:96:6f:cc:ba:7b:a8:36:04:27:10:
                    fd:c8:54:0c:47:59:ce:51:d4:c6:e4:78:31:28:73:
                    d8:f8:20:86:46:14:b2:b7:11:a5:d9:52:bf:91:19:
                    fb:e2:ac:d6:47:74:0a:1d:cf:ad:8c:eb:07:13:f1:
                    90:5a:6a:ad:b4:ad:ba:8d:3f:e9:a7:d9:8c:d3:39:
                    d1:77:42:50:eb:ac:3d:de:6f:65:f5:b2:d9:0e:62:
                    eb:58:a7:83:4d:e2:70:d4:33:29:7c:3e:48:62:c7:
                    fa:be:f0:65:75:64:af:2d:a3:41:27:c1:bd:18:43:
                    d9:40:ab:35:34:06:19:33:f4:c7:53:d3:a6:a4:d2:
                    61:d0:39:b2:1f:34:76:a9:fa:20:f2:02:b8:8a:5c:
                    a2:8d:11:4b:73:7a:45:6c:4d:47:13:ca:a8:d6:9e:
                    fa:a6:22:fc:72:33:51:04:64:fa:eb:84:6a:06:cf:
                    35:46:a9:16:d3:51:db:1a:74:0a:89:8d:01:4f:c8:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:10:22:D2:F2:00:E0:14:C5:13:63:0A:56:43:18:DE:7C:82:74:28
            X509v3 Authority Key Identifier:
                keyid:D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b3:de:ad:4c:bf:a6:53:5d:6b:db:fe:b0:80:ac:a0:fc:8f:
         aa:6a:b3:c6:f8:57:15:d2:ab:94:2f:7a:97:a3:6e:e3:d2:f3:
         39:9b:87:99:75:b1:74:64:de:55:23:24:24:28:87:2f:1c:0e:
         19:08:c5:c3:b1:d5:8b:d1:68:2d:a7:d4:29:92:31:26:84:cb:
         61:33:25:46:59:ff:dc:9e:65:85:53:99:8d:26:42:06:42:92:
         d1:43:ca:7e:ff:03:bc:79:3b:83:65:e4:b6:e7:6d:48:56:fc:
         99:2f:05:99:2d:dc:f8:84:ff:26:cf:5d:0f:0f:a1:8b:f1:fc:
         65:be:e8:58:6f:d2:1c:92:df:0d:b0:ad:d5:71:4f:9c:c0:1a:
         a3:aa:53:22:e4:12:d6:5b:f1:8c:73:de:ac:36:d0:cc:e7:d8:
         d0:1e:da:03:1a:0d:6e:ec:5a:6b:f3:0a:c1:a5:9b:9d:0c:0e:
         ff:eb:f2:e7:b3:74:38:81:d8:ec:70:a5:be:4a:cb:6a:e9:80:
         02:bc:f7:89:61:44:e0:15:d5:b1:28:c6:70:a6:b9:54:10:8f:
         a1:fa:82:c2:1e:bc:50:41:91:4a:b8:3d:33:14:1a:6d:27:1c:
         ea:d0:43:55:6a:10:7d:9b:f7:a9:cc:cb:25:ba:c3:38:9f:5f:
         6d:69:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:47:50 2025 by rpki-client