Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
File:                     32A915BA5A97568A877890D55DC289FFCB6FEE60.mft (raw, json)
Hash identifier:          sdOcmHTxXhFVdumPLgZh5mdXZQjEn60m7Ttj5EyQYrQ=
Subject key identifier:   51:90:52:3A:AA:76:FC:75:47:52:13:FC:5E:B3:9B:4A:79:32:FA:52
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       028A1BFB3D2478CD8D0DB930D89E0C62B2C79CD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 09:26:59 +0000
Manifest this update:     Fri 31 Jan 2025 09:21:59 +0000
Manifest next update:     Sat 01 Feb 2025 12:16:59 +0000
Files and hashes:         1: 34352e3137322e3134342e302f32322d3234203d3e203238333730.roa (hash: qmBzdoEHt+JkLSkTUgqwr6XDrFxIwA8X+5VMAwXXKhA=)
                          2: 323830343a353931633a3a2f33322d3438203d3e203238333730.roa (hash: pKrcxGZyhb4jGCYcX+40tFaHJcL3QXqWXrtgtTDuwQY=)
                          3: 32A915BA5A97568A877890D55DC289FFCB6FEE60.crl (hash: 2nZEi69CxjYeGCOM/0YsE/6E37OyeuMTdSnhOaZmZ4A=)
                          4: 3138372e34352e3134342e302f32302d3234203d3e203238333730.roa (hash: 4OSBTaqgPOxtNljkaIxC3vztl0+rh41iSB8p9iu8rX8=)
                          5: 3138392e38342e3134342e302f32302d3234203d3e203238333730.roa (hash: 7vTxk8c40/BbhckgAt3p30kAtvbhvKiPyjBOU2Mhnlw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8a:1b:fb:3d:24:78:cd:8d:0d:b9:30:d8:9e:0c:62:b2:c7:9c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jan 31 09:21:59 2025 GMT
            Not After : Feb  1 12:16:59 2025 GMT
        Subject: CN=5190523AAA76FC75475213FC5EB39B4A7932FA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:1a:67:25:14:82:c1:88:7f:c3:06:94:47:
                    69:95:39:c2:0e:b2:c5:17:cf:16:e7:e1:f5:92:1f:
                    4d:05:3f:ae:2a:cb:b8:e3:36:73:51:5d:9b:cd:96:
                    7e:10:8d:b1:b7:c2:5a:1b:6b:43:f9:13:d6:c6:a1:
                    72:f7:a5:94:d9:f1:e7:94:d8:c6:3c:30:23:bb:9c:
                    c0:aa:e3:d5:54:4a:db:3f:5a:8b:60:47:c2:fd:be:
                    78:2f:19:d2:87:8c:86:f3:78:1c:50:16:d6:99:47:
                    4a:0a:27:0f:68:11:31:bd:3a:b8:23:0e:4d:d8:91:
                    ad:1e:c3:e3:3b:e8:d3:ed:98:a6:a0:2b:d0:fe:80:
                    ee:62:db:e7:1b:7c:13:30:2a:51:cc:f2:81:06:85:
                    4c:f1:37:c3:82:e1:76:0e:e3:4f:3d:0a:87:43:d9:
                    c8:c5:35:17:c7:48:d3:0b:ea:77:26:90:77:f7:a9:
                    97:40:8b:f2:89:96:e3:2a:5c:64:40:7f:bc:d9:ee:
                    8b:bf:d1:74:dd:a0:49:7f:8d:5e:46:f1:e7:06:64:
                    f7:5b:25:f0:ca:23:bb:f6:f1:6e:57:6e:24:8c:e1:
                    38:de:e9:35:f2:81:f8:3a:16:bb:68:72:0e:9b:17:
                    aa:d6:67:c8:61:b4:0e:6b:a0:f3:28:c7:42:ab:e0:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:90:52:3A:AA:76:FC:75:47:52:13:FC:5E:B3:9B:4A:79:32:FA:52
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:ed:3a:20:d0:de:14:4b:dc:80:65:81:40:0f:50:8a:ab:
         41:49:0b:f1:17:87:d3:d6:8a:9d:da:3e:7d:fc:f8:39:26:7d:
         76:b5:b8:df:fb:0c:01:7a:0f:fd:57:f2:4b:9a:e0:13:92:26:
         87:fd:9c:ac:cd:b6:ce:ab:58:d9:50:33:7b:28:7c:66:fa:3a:
         91:e3:47:3a:76:37:89:98:d4:7d:0a:95:18:1b:1d:a6:90:34:
         bc:13:df:c8:fa:5f:b1:bc:03:b7:b9:c4:2f:e5:e0:31:d2:b2:
         58:2c:a4:1b:ec:29:a1:e1:82:1f:4c:c2:74:7b:a8:36:ea:1e:
         bd:e1:ce:9a:27:15:98:77:30:c2:a5:64:28:ed:e3:d5:66:62:
         a6:20:b1:29:5b:37:52:80:30:c1:9f:5d:01:2b:a7:7f:5f:27:
         51:21:8f:03:95:ff:28:16:1b:e2:f5:16:f2:e4:37:1c:fa:f4:
         98:42:3d:9c:6c:48:f6:fa:59:1a:b2:23:d6:23:91:d0:2f:bb:
         f0:45:cd:02:7b:ce:b3:ed:2b:ce:32:4d:ea:50:1a:03:fb:39:
         9d:20:20:9c:f0:50:7e:fb:24:56:e1:fd:07:5c:5a:7e:22:a9:
         66:d3:93:2a:9e:36:ca:b7:79:0e:0f:8e:2b:d1:8a:ae:42:41:
         f3:ff:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:28:50 2025 by rpki-client