Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.mft
File:                     49E580A065EA4E02BA9ACD797F53E062CB6AAC63.mft (raw, json)
Hash identifier:          qSkzqMjW4Zh0uQYujW/VY7ANihT89/v0xIlUPi+pMpo=
Subject key identifier:   12:16:3D:0B:BF:8D:59:78:5A:69:2C:6C:03:79:CE:47:0F:92:41:15
Authority key identifier: 49:E5:80:A0:65:EA:4E:02:BA:9A:CD:79:7F:53:E0:62:CB:6A:AC:63
Certificate issuer:       /CN=49E580A065EA4E02BA9ACD797F53E062CB6AAC63
Certificate serial:       096B204D0B5A3FD4E230AA57EC42410923EEED46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.mft
Manifest number:          60
Signing time:             Mon 20 Jan 2025 01:33:45 +0000
Manifest this update:     Mon 20 Jan 2025 01:28:45 +0000
Manifest next update:     Tue 21 Jan 2025 03:21:45 +0000
Files and hashes:         1: 34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa (hash: hFL0g5toHrFdWLcFOwWVnPZ3ufY22SlQxTCFEi5fg/k=)
                          2: 49E580A065EA4E02BA9ACD797F53E062CB6AAC63.crl (hash: pbcBlBlQDjSCsoTZcbRs5SICLaYIgbTTGLYY963CLec=)
                          3: 323830343a363865383a3a2f33322d313238203d3e20323639373234.roa (hash: NNyU5AwRxv0Ylh76fV34Rb6tc5RBfREjgaV5ZByywB4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6b:20:4d:0b:5a:3f:d4:e2:30:aa:57:ec:42:41:09:23:ee:ed:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49E580A065EA4E02BA9ACD797F53E062CB6AAC63
        Validity
            Not Before: Jan 20 01:28:45 2025 GMT
            Not After : Jan 21 03:21:45 2025 GMT
        Subject: CN=12163D0BBF8D59785A692C6C0379CE470F924115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:fa:88:96:b3:89:11:1e:95:bc:81:e0:ab:
                    a7:41:10:d6:c9:01:b1:b6:c4:a2:48:dd:4d:d0:a4:
                    50:55:a7:03:8c:43:f0:17:7a:c7:0a:58:8b:eb:a2:
                    80:ed:a4:9b:da:2a:f9:d1:c7:cb:c4:22:c9:2b:49:
                    17:2f:33:41:4c:41:6c:f0:e7:fb:46:40:39:93:83:
                    cd:98:35:c2:f9:c9:0b:9e:97:25:ee:82:15:12:b1:
                    73:f3:8e:74:f4:0b:c2:54:f1:5f:68:14:42:be:e0:
                    f0:be:24:34:62:59:07:a2:81:69:2c:cf:e9:8e:51:
                    1c:9e:f7:9a:f9:2e:97:b6:50:e5:87:3a:8a:f6:25:
                    22:a4:6c:f7:d3:7c:1a:3e:58:36:1b:fa:81:dc:8e:
                    8c:25:8b:76:0c:2c:d4:66:69:f3:d6:c9:1e:6e:85:
                    27:c1:be:90:1c:d9:b4:9f:05:8c:3f:06:e8:2b:8f:
                    a4:3b:b7:ca:68:1c:bb:45:ec:30:38:8e:dc:6b:c8:
                    31:6f:62:55:9a:74:b6:55:fb:83:b2:c5:3f:8b:e8:
                    45:2c:e4:aa:0d:27:7a:99:c8:f2:4d:23:36:6a:61:
                    f9:e1:9c:bd:07:ba:a1:16:c5:29:ed:e6:35:7d:66:
                    ae:f1:cd:f0:d8:f4:07:44:52:f9:45:6e:54:1f:97:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:3D:0B:BF:8D:59:78:5A:69:2C:6C:03:79:CE:47:0F:92:41:15
            X509v3 Authority Key Identifier:
                keyid:49:E5:80:A0:65:EA:4E:02:BA:9A:CD:79:7F:53:E0:62:CB:6A:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:06:38:e4:1e:8a:7e:ca:58:9e:bc:21:04:96:5d:d0:66:5c:
         a2:cf:5b:c7:89:85:1f:04:47:d8:70:ab:86:22:53:f8:ec:64:
         5e:25:5d:7f:d0:15:a6:86:21:11:17:86:54:28:51:28:03:bb:
         73:c6:a0:47:98:44:ac:20:d2:ac:35:e6:ef:9c:e9:1e:82:bd:
         1d:40:7f:f6:44:21:cb:e5:09:f5:72:ae:98:08:4c:84:fc:cd:
         5d:81:ee:8c:a6:48:f0:c6:a8:72:23:92:12:e4:4f:3c:bd:ef:
         83:7a:f7:7f:64:09:54:3a:4d:d5:96:1c:80:c5:f5:0e:29:ae:
         45:7b:c4:2a:3b:23:9b:f9:d2:c0:e1:01:0e:35:33:e1:81:04:
         69:22:d1:d5:df:c9:ca:4d:b3:86:fe:51:96:c7:7c:bc:8a:9a:
         35:c4:55:97:23:d6:84:13:1d:60:37:3c:80:50:cd:05:71:80:
         3c:c8:e9:d6:7d:f0:67:06:47:59:e7:02:96:ff:14:ca:59:6b:
         b1:43:90:69:4d:ba:c2:eb:dd:97:08:bd:3c:44:bc:9d:0c:6c:
         80:c7:f3:b5:3a:45:06:2f:ea:71:3b:73:21:d3:c9:be:54:89:
         9f:4b:44:43:18:9e:c2:d6:43:39:73:00:17:82:a0:a8:1c:d5:
         18:7a:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:10 2025 by rpki-client