Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
File:                     95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json)
Hash identifier:          53lbIovDnljiL/khExCfcLz/WVwtI8GUZbWwJjwPFlc=
Subject key identifier:   17:63:C6:3B:AD:42:C5:C4:8B:23:8D:2B:B0:29:A8:18:DB:D1:CC:3A
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Certificate issuer:       /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial:       66E50754FB44C14492C545962A289F59BD6E1A88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
Manifest number:          0190
Signing time:             Fri 31 Jan 2025 02:14:20 +0000
Manifest this update:     Fri 31 Jan 2025 02:09:20 +0000
Manifest next update:     Sat 01 Feb 2025 05:55:20 +0000
Files and hashes:         1: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: Gd0X1kQB5Pz/yZJgcS/vQl3m19nigoBi3S7EayQtz4Q=)
                          2: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: yj5k9BUcptAdU82P3r/6WEYqrXweQmPMcyOJBYmPJ+g=)
                          3: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: i/VE6CHwJdLzi+qFJ5bZWYYTpGfpyEgqS54nO3RM8IE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e5:07:54:fb:44:c1:44:92:c5:45:96:2a:28:9f:59:bd:6e:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
        Validity
            Not Before: Jan 31 02:09:20 2025 GMT
            Not After : Feb  1 05:55:20 2025 GMT
        Subject: CN=1763C63BAD42C5C48B238D2BB029A818DBD1CC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:c0:9a:8d:ca:b3:2d:2e:e9:f3:8e:2c:34:
                    62:cf:97:f9:41:38:d2:82:54:75:1c:bc:59:5b:5c:
                    b9:d0:4d:5e:ce:b0:07:4b:b8:38:1a:2b:37:a0:1b:
                    44:5e:85:ff:d0:79:23:fc:d2:f1:30:a5:74:9a:3c:
                    ad:c8:38:9f:f0:2f:95:c3:06:2a:2d:7b:e3:1f:88:
                    bc:03:ec:af:0e:12:51:0e:ae:f6:5c:9f:22:2f:f5:
                    40:09:3b:b0:00:ab:17:74:5b:c6:6f:e4:85:50:ac:
                    e5:1e:ff:26:48:21:c8:46:b9:d6:b7:36:c8:e3:95:
                    7f:b8:06:f1:64:0c:d4:b6:75:38:9c:fc:d9:15:45:
                    a7:b5:75:0d:ef:96:09:b7:7b:10:85:f3:4c:3a:d7:
                    e4:8f:e6:d9:20:21:a6:74:93:1f:46:ad:c2:81:2f:
                    bb:04:d0:05:5a:a8:41:05:60:53:b3:da:90:61:c1:
                    ff:39:1c:5a:3b:eb:40:a6:54:b9:71:6a:0a:83:0c:
                    87:64:30:86:7a:d0:c0:f4:b8:d3:1e:c1:d3:49:29:
                    1c:21:eb:43:45:ca:90:53:5a:a7:29:f6:86:eb:9a:
                    7f:c6:20:df:7a:46:5e:14:c1:24:dd:d5:0e:a1:af:
                    fd:62:ee:41:17:31:ac:8c:ab:54:7c:5e:04:46:e4:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:63:C6:3B:AD:42:C5:C4:8B:23:8D:2B:B0:29:A8:18:DB:D1:CC:3A
            X509v3 Authority Key Identifier:
                keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:69:16:e4:b3:95:34:08:db:ce:49:6e:17:0b:44:89:42:12:
         00:d6:70:95:5c:18:11:fc:1e:12:85:b8:36:5b:f5:38:01:30:
         d4:b5:c9:18:4c:a8:19:b9:7e:a5:a8:28:43:89:57:6b:41:97:
         30:03:43:d3:bc:d9:9e:ea:55:e4:ee:b3:f6:88:f7:e8:16:de:
         fe:6f:bc:8b:16:28:1d:85:9c:24:cc:38:a3:c7:55:be:05:90:
         d1:88:49:93:e9:f0:68:20:98:d0:4b:30:eb:ea:3d:f3:8e:ae:
         53:d1:2c:29:a6:6b:03:85:cc:4f:a0:28:68:d3:26:3a:fc:9a:
         38:ae:cb:5b:76:bd:ed:f3:2b:57:76:c9:b9:00:7c:4f:09:7e:
         c2:2a:57:b8:43:ba:ef:97:61:4f:ef:65:ce:92:aa:6f:8f:98:
         4b:10:77:91:ec:a3:3b:99:87:8b:89:18:e5:65:1d:69:ad:3b:
         21:94:6c:32:99:2c:ac:a0:03:a4:85:38:0f:a8:cb:13:71:33:
         02:30:97:9f:c9:ba:d4:9f:94:b8:dd:1e:9a:38:1b:97:66:69:
         a6:06:90:d5:76:34:f9:51:58:dd:bb:c3:03:88:70:dc:31:a9:
         24:fe:fa:2c:37:06:c7:32:ad:60:b6:c3:53:fe:47:15:9c:55:
         54:25:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:45:46 2025 by rpki-client