Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.mft
File:                     C966BFE75D740DECD5CC886F943F0FBC4390193F.mft (raw, json)
Hash identifier:          GOcaZspAx8+9Ik+K6DDhxnsQvR0QNSa3m6tk1Aj4wzY=
Subject key identifier:   05:84:74:E0:AB:1C:73:89:66:CE:7A:0D:A6:ED:AC:71:B8:53:AD:B3
Authority key identifier: C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F
Certificate issuer:       /CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
Certificate serial:       1461DE5A5B6505DF6139B4C74376D66072001480
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.mft
Manifest number:          0480
Signing time:             Thu 11 Jan 2024 19:29:00 +0000
Manifest this update:     Thu 11 Jan 2024 19:24:00 +0000
Manifest next update:     Fri 12 Jan 2024 21:00:00 +0000
Files and hashes:         1: 3136382e3139352e3231302e302f32342d3234203d3e20323731353135.roa (hash: DCUSQpmGu1z10XbIVwFwCAxzZGzbk/0VxvMpq0zvB98=)
                          2: 323830343a376362633a383030303a3a2f33332d3333203d3e20323731353135.roa (hash: DAkoD5ROIJtYmYYfitDxcOCRLtn3QKZU1iQEigWt2E8=)
                          3: 323830343a376362633a3a2f33332d3333203d3e20323731353135.roa (hash: t4h3KgYwtcXZCTHerjB1TwbLiHKuyseii3FmTCqf2i0=)
                          4: 323830343a376362633a3a2f33322d3332203d3e20323731353135.roa (hash: 3+jYsLcr7vzhDMHWcXBpZrnZtS5y7G/IEhwrNzjptdI=)
                          5: C966BFE75D740DECD5CC886F943F0FBC4390193F.crl (hash: I4hSWaq899y6tYKtsmYEWrQTKU00LLLX3P0653hDhhc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:61:de:5a:5b:65:05:df:61:39:b4:c7:43:76:d6:60:72:00:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
        Validity
            Not Before: Jan 11 19:24:00 2024 GMT
            Not After : Jan 12 21:00:00 2024 GMT
        Subject: CN=058474E0AB1C738966CE7A0DA6EDAC71B853ADB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d2:f5:67:bb:4a:5e:a5:57:ae:bc:7f:99:fb:
                    a9:ae:2e:b5:e2:0e:c7:d5:9c:2c:9a:3a:45:6e:59:
                    b5:55:43:c1:bb:0c:80:12:3d:e2:50:20:7c:a7:14:
                    14:cd:04:d3:92:aa:7d:35:17:ac:3f:a8:6f:1e:77:
                    da:e1:bd:c5:d5:e3:4e:65:c2:46:0a:31:fb:f0:cc:
                    80:f1:ef:2b:24:78:35:ec:15:9b:b3:23:49:3d:c5:
                    30:1f:59:15:28:c8:55:cf:6e:01:7d:19:89:63:95:
                    a7:83:4c:20:ae:c0:6c:2b:5b:d3:f7:cd:8b:0a:d2:
                    bc:0f:d0:9f:36:5e:d8:10:e6:26:35:09:21:0a:a2:
                    94:dd:f2:2f:8b:cd:6c:21:05:e9:0e:67:51:aa:f9:
                    07:6a:ad:3b:26:51:d6:86:a6:4d:2d:a6:35:2c:72:
                    69:ea:aa:77:55:94:32:0e:56:4e:62:03:53:e2:b2:
                    60:25:ea:6e:03:6a:77:8f:75:24:65:f5:68:a8:43:
                    fa:b8:80:cf:8b:92:7c:4d:60:c3:14:3b:22:e5:88:
                    c0:f0:38:8c:b4:c5:13:7e:ca:b8:2b:de:f4:9e:6b:
                    96:a8:69:95:1a:48:8d:81:0f:83:8d:3e:52:38:0f:
                    91:af:52:99:d9:26:0e:98:dd:87:87:22:c0:b3:01:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:74:E0:AB:1C:73:89:66:CE:7A:0D:A6:ED:AC:71:B8:53:AD:B3
            X509v3 Authority Key Identifier:
                keyid:C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:92:df:0b:5c:1b:74:fb:be:49:de:09:0d:13:ab:be:c4:39:
         f3:1a:11:4b:bb:0c:ba:ee:78:f4:77:ac:f0:04:f5:d4:e8:9b:
         8b:0f:96:3d:da:fe:a7:fc:16:5e:a7:5c:56:d8:7a:52:d1:d1:
         df:0c:ed:68:18:55:74:75:ee:e8:63:a0:a7:2f:e0:34:e3:9a:
         13:ab:2a:6e:2f:ac:50:08:5d:74:99:94:1a:8f:4d:d0:b5:7b:
         83:a9:e2:c5:b8:76:bd:a4:31:32:71:03:77:f9:ed:c5:d7:02:
         75:f5:f7:cc:aa:48:54:45:47:59:f7:6c:3e:2d:d8:2b:a2:ad:
         dc:0c:9c:d1:87:f4:a4:a7:01:a0:44:66:0d:fb:0b:d2:4a:d4:
         8d:92:18:20:c1:3e:cb:09:d7:76:13:5a:7c:d0:0f:e1:bb:69:
         b9:87:a5:41:e7:17:1f:e3:94:3e:7b:cf:77:72:e2:78:8e:47:
         e4:f1:14:11:a4:25:b2:6c:4d:86:66:d6:55:d8:51:01:99:98:
         83:86:bd:80:1d:33:2f:c0:d2:e3:f0:8b:7c:b2:26:77:39:d7:
         44:80:f3:c5:0a:78:84:2f:49:03:f5:bc:73:2d:7a:12:2b:eb:
         03:60:30:78:ea:2f:d0:fe:a2:6f:d6:77:98:94:49:47:ba:93:
         a3:b8:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:16:08 2025 by rpki-client