Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.mft
File:                     54D4593134F7F511D48D82945BAD14FF2A1EC182.mft (raw, json)
Hash identifier:          UNtCj2dACKx1W6s0QZLJA27Dl+vgAXqixo4WB23P/pU=
Subject key identifier:   E3:5E:58:38:53:C2:A8:55:5F:A9:D2:C1:50:7E:2F:27:18:B8:12:01
Authority key identifier: 54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82
Certificate issuer:       /CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
Certificate serial:       10C986AE6AFA4490A1A40B0A0A0323DE0F5E4B04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.mft
Manifest number:          2B
Signing time:             Sat 29 Mar 2025 09:41:35 +0000
Manifest this update:     Sat 29 Mar 2025 09:36:35 +0000
Manifest next update:     Sun 30 Mar 2025 11:00:35 +0000
Files and hashes:         1: 323830343a363632633a3a2f33322d3438203d3e20323639353339.roa (hash: 7g2BlB2NY0kCpaY2fr+7u8nYiIvr/Tkgd0dS3sFveTc=)
                          2: 34352e3138372e3136302e302f32322d3234203d3e20323639353339.roa (hash: 2bx46VQMh8Rsx1KohlqlDd6PYs+TSGlgfK/6vhNVQqU=)
                          3: 54D4593134F7F511D48D82945BAD14FF2A1EC182.crl (hash: s1oEZMm9aPi6MUocVX4u9t3iv6GZ5Wi6bAW83PTNTCE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c9:86:ae:6a:fa:44:90:a1:a4:0b:0a:0a:03:23:de:0f:5e:4b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D4593134F7F511D48D82945BAD14FF2A1EC182
        Validity
            Not Before: Mar 29 09:36:35 2025 GMT
            Not After : Mar 30 11:00:35 2025 GMT
        Subject: CN=E35E583853C2A8555FA9D2C1507E2F2718B81201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0b:d5:86:bd:0b:e5:81:12:9d:42:88:1e:6e:
                    7c:f4:b0:01:ff:20:96:46:2b:ad:60:0d:92:88:a7:
                    94:f6:2c:ba:fd:c6:1a:00:63:a9:16:f6:1b:03:cf:
                    4b:62:5e:ac:b4:84:db:4a:29:c6:d3:e9:1f:46:69:
                    dc:33:d9:c7:c8:91:0a:7f:35:8e:ae:b1:73:6f:9b:
                    85:35:88:c8:65:c1:c3:fb:d2:11:50:b1:77:9b:1b:
                    de:c7:43:c5:78:cf:db:b2:c4:48:d9:8e:32:bf:0f:
                    8d:8d:46:33:58:03:60:94:f1:a3:6a:17:70:2c:3e:
                    e8:69:20:20:fc:a6:ef:11:8a:b0:13:9a:cf:00:13:
                    e3:42:60:f8:92:3c:b3:8e:f9:ac:05:fb:b9:10:50:
                    f5:95:93:6b:6f:c7:2e:1e:2e:ba:d5:a3:50:bf:19:
                    21:99:d6:f1:93:ae:b7:1c:89:8a:6d:6f:6a:1b:91:
                    68:f3:8d:87:20:5c:91:a9:9a:f2:f8:70:fb:b7:c3:
                    ac:66:24:c8:11:e8:4b:c2:03:11:e5:e5:2f:14:9d:
                    a2:8b:89:61:ce:4a:33:eb:9d:ca:ea:20:cf:72:b2:
                    fc:c9:d3:d7:97:2d:f7:90:0d:a5:41:30:4b:44:44:
                    b1:b9:ae:ec:f1:f5:30:86:d1:fe:c5:55:9c:5d:c7:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:58:38:53:C2:A8:55:5F:A9:D2:C1:50:7E:2F:27:18:B8:12:01
            X509v3 Authority Key Identifier:
                keyid:54:D4:59:31:34:F7:F5:11:D4:8D:82:94:5B:AD:14:FF:2A:1E:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54D4593134F7F511D48D82945BAD14FF2A1EC182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/54D4593134F7F511D48D82945BAD14FF2A1EC182.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:11:ae:55:f9:9f:9b:a8:9c:25:17:57:bb:d1:f3:03:2b:
         fe:2e:54:5d:f7:22:31:64:28:3b:00:fe:a2:7a:be:5f:ca:0e:
         f4:bd:b0:4d:a3:55:d7:77:aa:77:62:54:4c:20:7a:f9:3b:4e:
         a4:59:91:4f:bc:3b:5a:35:47:e8:9e:a3:61:e1:44:6c:5e:a6:
         c5:c1:1f:a9:da:e1:a1:eb:0c:e3:16:0e:26:b7:cc:9d:f9:de:
         a2:82:9f:64:0f:46:1e:89:6d:2e:29:40:00:90:be:a8:48:db:
         d9:17:c2:1b:ad:70:ab:d7:9b:d2:96:11:d9:da:72:8e:b3:df:
         07:d5:60:0c:a8:9f:17:f8:04:1b:66:ca:2a:85:cd:5c:0a:07:
         e9:a0:67:25:17:fe:7d:ee:df:fd:22:6f:37:40:76:71:ca:9c:
         3a:00:fd:56:64:e4:c3:05:21:69:fb:f8:00:ac:d6:d1:a8:c5:
         07:86:be:e7:a4:06:01:65:a7:d7:08:9c:e8:b2:e3:f5:1d:77:
         d1:d8:b1:2d:a2:b2:a8:9a:66:13:d6:7d:8b:77:a5:92:e6:af:
         6e:6f:5f:35:80:e7:d8:62:cc:f9:5b:9f:01:c7:d2:db:bc:d3:
         05:b0:1e:48:73:1d:20:ef:15:d8:c1:cd:a2:5d:8a:54:eb:94:
         7a:b8:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:11 2025 by rpki-client