Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.mft
File:                     5429164DC72EDAA8E89044A7962EFBA59A4A8421.mft (raw, json)
Hash identifier:          b1LGyf7CY5jMc4M7X7e8/pgDrNKwIl1/8i2sUzeUDu0=
Subject key identifier:   1D:45:24:31:E5:76:84:F4:FB:C2:88:F6:2B:A6:B8:F6:89:78:71:09
Authority key identifier: 54:29:16:4D:C7:2E:DA:A8:E8:90:44:A7:96:2E:FB:A5:9A:4A:84:21
Certificate issuer:       /CN=5429164DC72EDAA8E89044A7962EFBA59A4A8421
Certificate serial:       431AE47A489C11C419ABDECCD172C018B6442891
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.mft
Manifest number:          FA
Signing time:             Mon 26 May 2025 22:35:22 +0000
Manifest this update:     Mon 26 May 2025 22:30:22 +0000
Manifest next update:     Wed 28 May 2025 00:37:22 +0000
Files and hashes:         1: 323830343a373666343a3a2f33322d313238203d3e20323731313435.roa (hash: lmgI8x7NxbkcjSD7kQC/y1Wnk8P1WhkcWoAFM77N+C8=)
                          2: 5429164DC72EDAA8E89044A7962EFBA59A4A8421.crl (hash: /6zpdqpzsqbD0ms5hDYtGjIJ3mr4IWKxQmESoAwLorw=)
                          3: 3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa (hash: nQl72TF5s0ejYKsWVml923LbBUli74Cl7Z5POPfYUJk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1a:e4:7a:48:9c:11:c4:19:ab:de:cc:d1:72:c0:18:b6:44:28:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5429164DC72EDAA8E89044A7962EFBA59A4A8421
        Validity
            Not Before: May 26 22:30:22 2025 GMT
            Not After : May 28 00:37:22 2025 GMT
        Subject: CN=1D452431E57684F4FBC288F62BA6B8F689787109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:20:e1:c0:89:f5:fe:8c:14:58:af:3f:51:
                    e6:4d:1c:83:1d:f7:4a:7f:68:b8:be:2c:8d:0b:f7:
                    2d:0e:4f:e4:08:56:2f:04:8c:b7:2d:ac:1d:39:d7:
                    b4:b5:a8:db:09:a5:5f:a4:bc:a4:28:ca:d6:4b:98:
                    5e:73:8e:ae:41:93:99:e8:7c:fd:0e:0b:76:3e:60:
                    96:d8:a3:df:b7:7c:b8:66:fa:a3:32:cd:df:37:22:
                    af:1c:c2:5a:27:cf:83:88:af:c9:ce:8c:05:f8:17:
                    82:23:e4:11:fb:95:1d:a7:45:66:56:c6:f1:c8:17:
                    47:d6:3a:5c:a4:f6:74:ed:54:df:8a:da:0c:11:b2:
                    37:77:2f:d2:9d:ac:1c:fc:53:12:00:8d:43:f1:f9:
                    77:12:18:63:f4:4f:32:0a:44:63:da:0b:84:68:c6:
                    94:84:3a:e7:c3:ce:09:c5:ad:e3:9e:16:e3:6f:ff:
                    01:f1:d1:f1:c2:57:7e:9e:7e:7d:8c:d6:25:a3:03:
                    6e:04:01:95:0a:65:94:44:45:5f:65:68:94:88:09:
                    f9:61:cd:1e:0f:81:76:03:e5:c7:10:e5:e0:d6:d2:
                    2c:20:77:c5:5e:10:85:f9:6a:56:c7:a6:eb:b2:6b:
                    4b:41:25:0c:f6:94:46:f0:c5:61:ef:4b:25:a5:0e:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:24:31:E5:76:84:F4:FB:C2:88:F6:2B:A6:B8:F6:89:78:71:09
            X509v3 Authority Key Identifier:
                keyid:54:29:16:4D:C7:2E:DA:A8:E8:90:44:A7:96:2E:FB:A5:9A:4A:84:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429164DC72EDAA8E89044A7962EFBA59A4A8421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/5429164DC72EDAA8E89044A7962EFBA59A4A8421.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:dc:fd:8f:ac:77:f0:d0:7e:82:01:93:73:e2:39:b5:db:ce:
         cd:d3:2a:90:8d:e1:39:4a:10:d9:9b:4a:71:95:91:ae:eb:fe:
         c3:e9:59:c1:c4:d8:96:92:b9:ab:b0:fb:c2:a6:9d:14:2f:38:
         3b:ca:ae:a5:c9:d7:d3:45:44:02:44:78:af:a4:c4:8f:8b:01:
         26:8a:59:c8:dc:33:1d:7e:27:4a:c5:91:a3:e9:ce:68:5f:61:
         81:7a:4a:45:d2:d5:82:59:a4:2c:4f:d8:54:a2:42:e5:15:63:
         e6:86:b9:42:c7:58:06:b9:f9:c7:80:41:a6:7b:84:a2:fc:c2:
         51:d4:66:27:72:e2:dc:46:2d:2c:c2:60:dc:c3:57:d4:a2:23:
         39:c3:d7:cc:8a:e7:0e:cb:02:df:fc:39:ac:a8:64:76:19:72:
         d7:d7:0d:06:e5:02:0d:73:03:bb:52:9c:7a:38:93:be:2f:4d:
         14:bb:a9:87:6b:f4:70:4e:89:db:f3:d0:c4:b3:ee:45:d6:b0:
         4c:2b:a7:91:e8:61:10:00:1d:9e:dc:04:b4:ed:ba:c0:df:93:
         02:df:5b:48:7b:8b:7c:c6:86:64:a2:26:e2:51:dc:02:e4:b1:
         7f:57:53:44:69:21:46:19:b4:fd:ec:52:63:b8:56:13:a2:54:
         51:bb:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:57:52 2025 by rpki-client