Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.mft
File:                     401E64DC4591B39EEF36B1700B289C705583F254.mft (raw, json)
Hash identifier:          v+ZtEP45QwKVqrNkasvvBfHkC0Wn5pp9k+UgzHFsH5U=
Subject key identifier:   99:03:9A:CF:80:0E:BE:0E:EF:52:AD:87:E3:BD:C6:C1:DD:F2:69:5A
Authority key identifier: 40:1E:64:DC:45:91:B3:9E:EF:36:B1:70:0B:28:9C:70:55:83:F2:54
Certificate issuer:       /CN=401E64DC4591B39EEF36B1700B289C705583F254
Certificate serial:       1BD96337A9026A703ABFB5959D5CA82C9E8F4AFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.mft
Manifest number:          5D
Signing time:             Tue 21 Jan 2025 12:14:21 +0000
Manifest this update:     Tue 21 Jan 2025 12:09:21 +0000
Manifest next update:     Wed 22 Jan 2025 15:30:21 +0000
Files and hashes:         1: 323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa (hash: qSUKR3JWZ7peOcAHSZStekrngA7wZLaJng5LqEAc+tY=)
                          2: 401E64DC4591B39EEF36B1700B289C705583F254.crl (hash: rpF5nJvzE2SuMLSOhWLDusaFflpYiGKDnpCzz0rWAlI=)
                          3: 34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa (hash: rOPu12RGMtAmxED48zLQgZSCLzjtJRyi8idbAsSvFs4=)
                          4: 34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa (hash: c/0b/zSQdZ4cTp5gRHHinssZ6dJTJRaEaFNDnJsKSfw=)
                          5: 34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa (hash: c3hsOn+mToJip9uYdxO84P0iTDyKu9ljneM8xuo0IS0=)
                          6: 323830343a353130343a3a2f33332d3333203d3e20323638343235.roa (hash: uxDUEDTYXnAr+g/6W/Tncaci9t7Dcopc6UXfV1GorEE=)
                          7: 34352e3136302e3136382e302f32342d3234203d3e20323638343235.roa (hash: MyAhfN1dMbhjWBMsW3nOsdRGNw8D1BiCBBcBfnFCKUQ=)
                          8: 34352e3136302e3137302e302f32342d3234203d3e20323638343235.roa (hash: 2NMguSsl/2s7rHFGKJEOHMSnV6hTO9XsLO2UPL4h7Ds=)
                          9: 323830343a353130343a3230303a3a2f34302d3430203d3e20323638343235.roa (hash: zooTLf2sFE/ikP0Rn3LYDbEwtRU8vXXPMnx5hgK3Y1o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d9:63:37:a9:02:6a:70:3a:bf:b5:95:9d:5c:a8:2c:9e:8f:4a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401E64DC4591B39EEF36B1700B289C705583F254
        Validity
            Not Before: Jan 21 12:09:21 2025 GMT
            Not After : Jan 22 15:30:21 2025 GMT
        Subject: CN=99039ACF800EBE0EEF52AD87E3BDC6C1DDF2695A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c3:9d:52:ba:a3:3e:01:90:72:c7:d9:50:4d:
                    51:a9:23:e1:df:33:ac:df:0f:a4:59:0e:8c:a2:9d:
                    c5:79:30:7f:7f:ea:59:59:7f:e9:55:f5:12:25:6d:
                    2e:fd:a1:0a:87:5e:26:3b:22:62:64:b3:af:2a:34:
                    c6:c9:f3:a0:4a:35:c8:6b:36:38:03:91:7b:98:9a:
                    ea:ad:a2:81:39:d5:6d:7e:04:5b:80:17:94:ea:01:
                    8a:57:54:55:b2:be:d4:e7:1b:fb:74:c2:f0:09:2b:
                    33:d0:a5:bd:89:10:94:20:99:75:0f:9b:56:9f:ba:
                    30:66:c9:63:bf:76:75:07:91:c9:21:4e:af:7c:55:
                    3b:89:d8:fb:bc:6e:03:5a:d8:3c:4e:0f:87:4d:c7:
                    86:94:89:cd:e0:78:31:f5:e6:29:71:a3:92:cd:fd:
                    1e:75:72:22:19:2a:53:6c:33:e6:f0:a6:cc:99:5e:
                    f7:cf:ed:ca:b6:b2:4b:14:29:60:b3:39:e2:c8:0c:
                    e3:66:b0:2a:5e:26:96:5e:41:03:97:8c:a1:74:93:
                    93:88:0c:a4:3d:7f:5c:57:7f:0b:73:7a:c1:49:c5:
                    35:76:9f:01:26:35:d4:4e:81:95:ba:84:8a:a5:81:
                    44:3b:4b:8e:ca:5b:ff:b3:fd:bb:a4:5b:d0:04:80:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:03:9A:CF:80:0E:BE:0E:EF:52:AD:87:E3:BD:C6:C1:DD:F2:69:5A
            X509v3 Authority Key Identifier:
                keyid:40:1E:64:DC:45:91:B3:9E:EF:36:B1:70:0B:28:9C:70:55:83:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/401E64DC4591B39EEF36B1700B289C705583F254.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/401E64DC4591B39EEF36B1700B289C705583F254.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:57:df:bc:07:df:4b:cf:14:50:14:47:8f:af:9e:6c:ec:
         9e:b6:88:bf:dd:06:65:71:c5:51:77:04:ee:5b:21:7a:30:49:
         e2:66:bd:ab:07:43:3f:eb:c7:9a:32:57:22:14:71:a9:d0:49:
         ef:f7:e1:f1:f9:64:d3:78:c3:a6:35:b6:c1:72:45:8a:59:5e:
         e1:3b:5e:56:c4:b9:7f:92:15:2e:e7:30:79:df:88:b8:cd:29:
         c7:ff:9b:a1:ec:a1:00:b8:09:37:bc:eb:95:0a:ba:66:3d:44:
         98:e0:82:b3:ee:5c:6f:2c:49:bd:4d:29:85:f6:b1:7b:56:98:
         62:50:f4:62:b9:a7:08:25:b2:0e:c1:65:4e:45:3c:e3:51:12:
         46:1c:a9:0a:8e:0a:49:59:dd:95:14:fe:ac:f2:1b:77:4d:6b:
         12:44:d2:30:21:30:88:02:ad:58:4b:8f:f7:39:57:36:34:ac:
         5b:55:48:08:6d:a5:e4:8c:c7:25:c1:b7:21:32:b7:46:d3:1a:
         23:f8:ac:06:9d:92:17:33:38:ce:14:ba:78:5a:82:9c:20:e5:
         38:98:01:95:ca:77:b1:20:68:de:93:0e:56:8a:c5:5f:05:f5:
         55:c4:84:ed:0d:b7:ef:52:0f:95:8d:ea:d6:b2:e2:95:eb:aa:
         69:d0:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:15:40 2025 by rpki-client