Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
File:                     D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft (raw, json)
Hash identifier:          1sTqFnHPkihC92AML2pXNoBclw+RFDq1Weieh1PdF+g=
Subject key identifier:   E6:16:42:E1:90:70:76:07:E1:F2:CA:D4:B6:A8:4D:CD:31:93:C0:E1
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Certificate issuer:       /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial:       1372A4C1EC493B181FF676C6D4BCEA31259C0092
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft
Manifest number:          0192
Signing time:             Fri 31 Jan 2025 13:10:03 +0000
Manifest this update:     Fri 31 Jan 2025 13:05:03 +0000
Manifest next update:     Sat 01 Feb 2025 13:38:03 +0000
Files and hashes:         1: D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl (hash: PJrASfBDbogP1kyX5tcBG8PuoR9u1pGMef41oWbxD6c=)
                          2: 323830343a353135383a3a2f33322d3332203d3e20323638343436.roa (hash: TeUrNGU2EdDyaPxjX0eBruzn9OJCu1l0VRuwl4NJe20=)
                          3: 34352e3136312e31362e302f32322d3232203d3e20323638343436.roa (hash: W5Avw41xUm9/9MPiCLR0WMIcs6FjypNDUyd7w0NNYN4=)
                          4: 34352e3136312e31372e302f32342d3234203d3e20323638343436.roa (hash: tRdAL31O3bvhrE9jLw/c8E70MjPk10/B7iLPUU25FBA=)
                          5: 34352e3136312e31382e302f32342d3234203d3e20323638343436.roa (hash: 9EoCpKBGuYo1bkIlY1TvNF5OwqDrQK/P8eDzQkKuL8M=)
                          6: 34352e3136312e31392e302f32342d3234203d3e20323638343436.roa (hash: teoW2OzTR0iT5LuOa9lVft6yg7no7ZxxEpMMHi5j1QA=)
                          7: 34352e3136312e31362e302f32332d3233203d3e20323638343436.roa (hash: X6Lbmc1AZl5O3j+4L5AchGCCoZXCqBePKNuu9Nac5VQ=)
                          8: 34352e3136312e31362e302f32342d3234203d3e20323638343436.roa (hash: ocVbthX0lxEC5NYdnEvtV+GPWgxkuyPo0v665fj0H1U=)
                          9: 34352e3136312e31382e302f32332d3233203d3e20323638343436.roa (hash: O0EUUd3vo04zuHUHM6x9QgwlcB9qwLLcbSdwuUN51bo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:72:a4:c1:ec:49:3b:18:1f:f6:76:c6:d4:bc:ea:31:25:9c:00:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
        Validity
            Not Before: Jan 31 13:05:03 2025 GMT
            Not After : Feb  1 13:38:03 2025 GMT
        Subject: CN=E61642E190707607E1F2CAD4B6A84DCD3193C0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:87:e2:7e:8d:b5:ce:20:53:79:a7:b7:61:
                    1a:32:6a:a2:8f:a3:9e:51:90:18:aa:fc:d4:c7:2c:
                    ea:40:84:65:5f:a4:f9:66:8f:16:6a:89:72:a1:36:
                    7f:1a:c8:2d:e2:40:96:ac:af:4f:02:e6:83:ac:2f:
                    14:df:6f:4c:5e:28:65:fd:4c:be:89:bf:b9:74:df:
                    df:db:26:89:22:73:93:e5:ab:0d:ed:d7:16:19:88:
                    82:8e:99:29:5f:75:68:fb:20:41:fc:55:07:a9:d4:
                    62:3b:b2:be:81:33:cb:c0:e6:44:21:86:34:62:c9:
                    e0:1d:71:37:8e:c2:a9:94:d1:54:94:48:ed:6f:cc:
                    fd:0b:9d:62:7c:e1:b9:e9:cb:1b:bf:4d:5a:64:33:
                    17:ed:56:17:e5:bb:f7:09:d5:e3:06:fe:0f:b4:76:
                    d6:d0:c1:7f:08:09:c6:71:33:7b:91:8d:20:2d:5e:
                    90:0c:0f:18:df:f3:67:b4:a7:f8:74:b4:79:64:c5:
                    6c:f1:94:80:fa:d4:8b:0a:b1:b7:de:40:09:1a:aa:
                    1a:12:85:92:fe:02:85:18:20:2a:3c:22:89:91:28:
                    54:f0:f7:9b:dc:93:49:83:9f:f9:74:bc:41:d8:2f:
                    51:2d:2f:bf:e8:e1:ed:88:a6:48:5e:c6:da:84:25:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:16:42:E1:90:70:76:07:E1:F2:CA:D4:B6:A8:4D:CD:31:93:C0:E1
            X509v3 Authority Key Identifier:
                keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:fc:68:ab:c2:f1:51:a6:07:85:75:8d:97:5f:5f:78:b6:
         d4:b9:bf:bd:16:aa:0e:d8:6e:c4:64:1c:bc:03:66:1b:26:75:
         90:f2:ee:2d:77:5f:db:20:4c:ca:07:da:07:0c:9b:8a:b2:c7:
         35:c1:b6:98:3f:4e:c3:21:cd:d9:f3:2f:f9:df:15:98:07:bb:
         7a:b0:01:cb:93:76:14:e5:27:d0:ef:2d:be:e2:8d:50:18:3d:
         ae:3a:fa:a4:f8:cc:9c:2d:ed:95:97:bf:42:ce:82:d5:1a:96:
         7d:ef:d7:58:c4:8d:da:08:6f:74:ca:d7:de:b6:f9:68:58:e2:
         22:cb:6a:f9:f3:3c:03:5b:08:c2:50:5d:39:64:15:0e:c9:12:
         08:f5:d0:0e:8d:b2:e6:13:8f:8a:62:53:e1:55:ff:2e:df:db:
         38:6c:8e:f7:b5:28:69:9c:70:72:fd:47:23:7b:ef:4a:cc:a5:
         b6:dc:a7:7c:f8:98:c3:ef:53:8e:9b:7f:47:86:c3:f3:04:c8:
         94:45:ad:67:9d:4a:b9:2c:6d:35:4d:4e:c9:ae:2c:d2:cf:da:
         41:41:9f:fa:39:7e:5a:ed:b5:54:01:08:7f:87:49:e8:8d:1d:
         66:35:99:64:96:71:30:c9:ed:95:0f:c8:db:7e:87:c8:8c:ac:
         5d:59:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:34:18 2025 by rpki-client