Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
File:                     585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft (raw, json)
Hash identifier:          3R48YrnrG2BcHLfrilVS9BWE78z6m9EM5ob33L8zIcc=
Subject key identifier:   62:14:A2:D0:9E:3B:8C:CD:BC:CE:07:F6:D8:A8:87:CC:39:A2:80:97
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       2E842BBFE1FCB50E7096819925289A15F9C58B59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 18:17:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:12:07 +0000
Manifest next update:     Sat 01 Feb 2025 18:24:07 +0000
Files and hashes:         1: 585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl (hash: Mn3zOl9ih7CekP7e58MxKCmN+DBJwdcFHazSX3pZgGs=)
                          2: 323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa (hash: 5TjvgaDuD41TP7foY+3jQJDz86IH0IOacLru0uZqH9g=)
                          3: 323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (hash: rQabrSLl4GSjLNIxkevB2dBKRnYYB5fGRCLMnCZzjIU=)
                          4: 323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa (hash: RN4DO9TVk9oig9vcOIRHnImGZv/U8BsxpHTfy5cN7C4=)
                          5: 323830343a363061303a3a2f33342d3334203d3e20323639313831.roa (hash: C9Dzi/tZKmZzh2kIScwrPLKcajDKYsSOCBFj00Na0gw=)
                          6: 34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa (hash: c6MjNMP72uRyXIWs4Eyb3gn+cnhZpy3txk/w9d/BMnU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:84:2b:bf:e1:fc:b5:0e:70:96:81:99:25:28:9a:15:f9:c5:8b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Jan 31 18:12:07 2025 GMT
            Not After : Feb  1 18:24:07 2025 GMT
        Subject: CN=6214A2D09E3B8CCDBCCE07F6D8A887CC39A28097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:75:e2:e8:c9:12:8a:a9:4f:3f:7f:f8:96:
                    1e:06:65:e0:b7:2d:4c:bf:7f:a5:ae:15:cb:d6:f2:
                    13:e6:4b:00:6f:57:66:b2:b1:35:ab:ef:80:19:ec:
                    a4:f8:7f:c0:25:fa:7a:5e:5d:12:b2:37:f7:43:ca:
                    cc:35:a6:02:5e:9e:73:41:b2:53:77:2f:cf:ff:3c:
                    af:c3:1b:32:45:76:fd:43:48:5e:13:89:ee:7a:1c:
                    17:e2:e4:5e:a4:3d:1e:f6:8e:af:e8:1d:a6:01:ea:
                    f3:1e:2c:38:58:29:7a:11:48:23:5d:b3:d4:51:5e:
                    88:21:2e:fe:0b:20:3b:24:83:fc:92:45:09:64:fb:
                    7c:9a:60:54:05:5c:6b:e7:a1:e8:af:79:5e:1b:c6:
                    60:61:d4:0b:14:26:f0:38:d4:cf:55:d6:d5:68:be:
                    ac:b7:0d:3b:32:18:bc:ef:2b:8f:50:6b:3a:0f:10:
                    46:ff:93:30:ec:3b:b0:37:cd:e9:bc:9a:9e:2f:70:
                    fa:fb:92:5a:aa:c8:74:db:67:76:16:fa:5d:0e:82:
                    92:8c:8f:09:a2:5e:ad:4e:b7:7e:c3:64:7d:cc:87:
                    47:bf:f7:86:0d:bf:35:5d:3c:a0:c9:d6:41:c4:dc:
                    30:e6:38:ec:90:7a:0e:e9:83:5f:eb:5b:ad:f3:c6:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:14:A2:D0:9E:3B:8C:CD:BC:CE:07:F6:D8:A8:87:CC:39:A2:80:97
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:e3:3a:79:8a:61:9e:c6:f8:e4:e5:af:12:06:23:a7:a0:
         f9:9e:e8:59:61:33:de:dc:4a:0b:87:cc:e7:b6:79:f7:2f:80:
         e8:3b:cc:0d:1e:bb:b3:ac:69:a4:4c:05:c5:85:7a:92:7c:51:
         1a:7f:fd:35:92:d1:2d:fa:b6:97:f1:9d:25:03:7a:90:8a:8a:
         b5:a4:9d:59:61:29:af:31:f9:fb:5a:95:9a:78:38:63:c0:e1:
         0e:27:f0:7f:41:59:d5:47:c2:e5:2e:61:02:d5:30:e9:74:7d:
         fa:a4:0e:3c:a0:74:d0:78:7b:55:fe:81:97:9b:3a:8d:71:d3:
         8c:1e:02:7d:e5:c1:70:0b:20:1c:f4:69:8e:5f:d3:cd:e4:dd:
         ac:a8:19:97:57:69:ec:bd:5f:be:16:0b:71:08:03:d0:c1:92:
         d2:fe:59:e1:2a:e0:ef:c1:b7:81:48:2f:1e:b5:ed:13:c4:6c:
         67:25:2c:f4:dd:68:fc:4f:d3:89:3c:86:f1:7f:46:a4:b7:5a:
         e8:ad:f1:2c:7b:da:77:2c:84:5b:29:ab:43:f2:18:6b:38:07:
         57:5e:f5:b0:01:4b:e3:c8:c5:99:d5:58:a2:13:82:3f:80:bf:
         a1:a6:30:a5:26:5a:79:40:b3:e1:ab:04:19:24:8c:bd:a3:cc:
         b7:fb:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:23:11 2025 by rpki-client