Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
File:                     890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json)
Hash identifier:          OuAjN8nALpvEJxYMSax4JZ8gK6Kpmwez/G34n84v8R4=
Subject key identifier:   E2:50:01:DA:24:B0:A3:BF:70:4B:95:25:58:BB:75:6C:76:F9:64:31
Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29
Certificate issuer:       /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
Certificate serial:       63E22546FC8CC1D808D98DD47044C8C40BEA7FC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 07:47:03 +0000
Manifest this update:     Fri 31 Jan 2025 07:42:03 +0000
Manifest next update:     Sat 01 Feb 2025 11:06:03 +0000
Files and hashes:         1: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: q4P44Do45TabWkXAJHMGmAqFIRSKe39FpGHxOhtc52w=)
                          2: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: 6m+agPtABigEOnJRv6OBijMKpxHf1RpvCreL2kxMlQw=)
                          3: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: mgf9wu2dnmul2GdbRFysicPHSmoc77ycPcN7HCWICv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e2:25:46:fc:8c:c1:d8:08:d9:8d:d4:70:44:c8:c4:0b:ea:7f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629
        Validity
            Not Before: Jan 31 07:42:03 2025 GMT
            Not After : Feb  1 11:06:03 2025 GMT
        Subject: CN=E25001DA24B0A3BF704B952558BB756C76F96431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:5d:53:a6:c7:b6:24:92:25:b2:98:e9:2a:
                    2a:cb:fd:44:de:bb:69:c7:39:63:08:e1:0c:c4:5f:
                    02:d4:44:ee:69:00:a6:0e:f4:a5:fd:1c:fd:f7:dc:
                    59:cc:07:46:73:52:06:de:54:42:a1:89:f6:90:33:
                    87:de:3a:92:f6:be:6f:bc:5b:7b:67:24:be:c7:9c:
                    83:44:04:ed:34:b0:da:0f:20:12:7e:50:21:04:65:
                    ea:fc:b4:f0:2a:d4:ca:05:d7:8a:3c:bd:10:8f:b0:
                    da:80:a7:fa:49:ce:48:0e:06:2e:1b:81:d1:b0:c1:
                    1d:42:5c:39:94:89:f6:49:1a:1a:a0:34:c4:fd:d0:
                    5e:a6:d6:0f:43:7c:1a:8c:4a:d9:31:d8:26:82:64:
                    2d:91:ec:7e:cd:28:0f:80:fb:00:a1:cf:9e:52:93:
                    01:f0:a2:7c:e8:a8:45:60:05:dd:df:6f:7e:be:72:
                    e2:74:c2:1f:b7:7e:c8:8d:e4:e2:b3:6e:aa:09:0a:
                    92:1e:de:d6:b8:a4:f4:f4:fd:51:5b:02:fb:c9:29:
                    73:f3:38:d3:20:4d:64:8e:1f:d1:58:74:8f:34:18:
                    3d:cf:44:51:99:aa:79:d4:42:cd:67:ec:fe:7d:e1:
                    a3:83:f9:00:ec:1b:d6:15:73:d3:b3:8e:c2:a8:15:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:50:01:DA:24:B0:A3:BF:70:4B:95:25:58:BB:75:6C:76:F9:64:31
            X509v3 Authority Key Identifier:
                keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:8c:fe:11:e5:d5:45:30:37:cc:a4:32:8e:61:34:f4:9a:
         7c:59:12:12:4c:29:ef:8d:cc:e7:6c:fb:46:25:4d:79:6b:4a:
         3f:dc:c0:76:24:8a:ff:1b:64:eb:2d:82:f9:ef:4d:af:3c:10:
         e7:37:4e:d9:df:96:cf:58:00:4f:cb:de:b1:35:8c:05:fa:04:
         71:97:fb:10:47:41:e5:69:24:e6:5c:1d:20:0b:e2:9e:b0:b4:
         39:4a:24:22:20:80:e2:66:f8:84:36:2d:3c:c0:cc:6b:eb:cf:
         af:47:c3:0b:55:85:98:b6:f9:6a:0b:80:15:68:80:38:21:92:
         b7:ee:c6:32:00:8c:8a:e1:59:1c:e5:1f:d7:6e:22:ac:d8:d0:
         08:bc:28:8f:3d:ca:74:cf:49:0e:95:2f:e1:25:68:07:73:19:
         4f:a6:c3:71:87:05:1d:66:fb:04:78:9f:67:5f:a1:18:ba:66:
         e8:da:13:71:0d:22:7f:2c:aa:c0:94:97:d6:63:1b:bf:57:90:
         44:27:82:24:1b:ca:a5:5b:dc:00:03:c7:e2:1c:ef:69:8d:e6:
         1d:92:63:0c:27:ea:1f:7b:39:a5:1d:72:df:c9:27:b7:dd:7a:
         46:dc:93:e2:f6:c7:c3:d8:59:48:49:bc:90:5b:7f:60:a3:ed:
         97:63:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:57:53 2025 by rpki-client