Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.mft
File:                     538E3016A58D538A8E37C13617C6A21BBA07AAED.mft (raw, json)
Hash identifier:          ggTisLLMQZ4uRgyFW8zqfV9KxV2DAihsIk26zhLAvtI=
Subject key identifier:   FE:38:5A:0F:A4:80:F7:6A:A8:DE:D7:7A:1C:CD:FE:91:09:FA:6B:DF
Authority key identifier: 53:8E:30:16:A5:8D:53:8A:8E:37:C1:36:17:C6:A2:1B:BA:07:AA:ED
Certificate issuer:       /CN=538E3016A58D538A8E37C13617C6A21BBA07AAED
Certificate serial:       477A06A65B1AC7DDD89F597A6AED5379BB42AC15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.mft
Manifest number:          01A1
Signing time:             Thu 22 Jun 2023 05:46:11 +0000
Manifest this update:     Thu 22 Jun 2023 05:41:11 +0000
Manifest next update:     Fri 23 Jun 2023 07:33:11 +0000
Files and hashes:         1: 538E3016A58D538A8E37C13617C6A21BBA07AAED.crl (hash: KWL9q0m8b6wUhnf0nuDtKzXo7grpCqgSU5i1mEbWv+o=)
                          2: 323830343a3564633a3a2f33322d3438203d3e203533303139.roa (hash: /7AeL9coiBXGv424DvxCxQQUCzMCR4y5WJcVgtWlgXc=)
                          3: 3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (hash: y1Jn0/X9cIf3NmhUep3ex0NTdCW8zTkVPr0ZGPJBnog=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7a:06:a6:5b:1a:c7:dd:d8:9f:59:7a:6a:ed:53:79:bb:42:ac:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=538E3016A58D538A8E37C13617C6A21BBA07AAED
        Validity
            Not Before: Jun 22 05:41:11 2023 GMT
            Not After : Jun 23 07:33:11 2023 GMT
        Subject: CN=FE385A0FA480F76AA8DED77A1CCDFE9109FA6BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:11:b2:7d:12:20:2d:5f:b8:07:35:68:86:
                    1a:ef:7b:dc:9a:8e:80:e6:b1:18:17:1f:39:7a:86:
                    9b:f9:66:8a:cb:cc:1e:39:02:f8:a3:86:84:43:16:
                    36:f7:00:85:5f:82:53:b9:eb:7b:b3:bf:99:de:b6:
                    23:62:4a:3b:0a:4a:34:0f:f7:bf:db:dc:30:2a:1f:
                    47:5b:9b:c4:40:f6:92:0a:b1:e7:12:04:af:0d:4f:
                    62:cc:73:b9:66:72:0a:28:f6:2e:1b:20:14:22:5e:
                    72:e0:02:5f:ac:fd:d3:65:dc:93:84:3b:86:14:ea:
                    e7:eb:d1:9c:01:d1:0a:b5:ba:0a:41:04:e7:44:80:
                    fc:a5:96:f9:3f:53:58:f6:e8:a8:92:99:ae:44:12:
                    c9:46:5b:70:a8:0c:34:6a:4f:cc:ea:33:49:b7:84:
                    b4:8d:a2:a5:bb:52:5d:13:99:1a:15:3a:2a:92:fd:
                    2b:e5:c7:01:c5:ca:6b:b8:65:19:b2:50:07:29:09:
                    00:00:20:41:a2:66:a9:a6:24:60:2e:e0:c7:7d:7a:
                    26:ff:d9:a1:69:23:85:45:e0:e8:4c:59:bb:ce:29:
                    89:76:47:b3:a6:42:69:23:35:dd:ff:e0:29:26:2d:
                    77:af:1d:e2:94:7f:03:90:ae:9d:cc:06:5b:c1:63:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:38:5A:0F:A4:80:F7:6A:A8:DE:D7:7A:1C:CD:FE:91:09:FA:6B:DF
            X509v3 Authority Key Identifier:
                keyid:53:8E:30:16:A5:8D:53:8A:8E:37:C1:36:17:C6:A2:1B:BA:07:AA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/538E3016A58D538A8E37C13617C6A21BBA07AAED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:a4:98:d5:f7:2d:ad:4f:28:36:7d:5c:bb:df:5d:b5:e7:6d:
         61:3c:4a:25:af:de:23:64:fc:4f:9d:bb:24:50:fc:e5:a5:af:
         d5:56:e0:c6:2c:2c:28:96:82:05:90:ec:6a:42:3e:0f:0e:e3:
         29:83:6e:39:39:b9:f2:96:3a:82:99:44:f4:b9:32:58:45:3f:
         1a:16:30:e8:80:05:30:7d:45:79:0a:07:7f:ad:2b:61:8e:82:
         c4:0e:ae:f6:bc:c5:a8:54:9c:1e:c3:ed:d1:e3:78:dc:9f:ef:
         3e:3d:bc:48:a7:f5:07:00:e1:9a:2e:80:81:bf:5b:78:d4:fd:
         dc:73:25:a8:1f:02:21:8c:40:4d:fa:e9:6e:d3:0d:71:61:01:
         a8:00:c2:18:43:4b:d4:53:81:3e:91:9a:dc:33:fb:a5:56:c7:
         72:11:99:3c:e4:b9:c8:bf:c8:a4:99:d8:bc:10:04:26:eb:02:
         df:93:7f:33:e7:a6:99:2a:a7:b5:e9:f6:c5:d7:e1:76:ab:a6:
         be:33:4c:bc:e1:b1:1f:2d:f5:de:65:b9:38:51:fa:ef:8c:3e:
         e0:46:14:17:f9:d8:9c:e0:8b:6f:98:1e:68:77:d7:8d:25:7d:
         77:5c:cf:ab:dc:37:1c:a7:67:ba:98:10:62:1b:4e:40:e8:8d:
         f6:5e:b8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:37 2025 by rpki-client