Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.mft
File:                     5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.mft (raw, json)
Hash identifier:          uUSx8L12mJIfeb4NcI1vMpQpSkNkL5pW0aRf10omar4=
Subject key identifier:   AC:F0:92:BA:1B:1C:62:08:38:F6:BD:E9:86:FD:24:6B:28:3E:CC:40
Authority key identifier: 5B:2F:E1:79:A6:3E:B0:64:2B:E3:37:4D:4C:06:C1:F3:54:AC:BE:BC
Certificate issuer:       /CN=5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC
Certificate serial:       5AE05A3828A27E10D84E41C76D2A3FC29AD50F00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.mft
Manifest number:          4C
Signing time:             Mon 17 Feb 2025 14:24:34 +0000
Manifest this update:     Mon 17 Feb 2025 14:19:34 +0000
Manifest next update:     Tue 18 Feb 2025 17:33:34 +0000
Files and hashes:         1: 323830343a356532633a3a2f33322d3438203d3e20323639303136.roa (hash: RsLZKFDkoVmXIjn8F0e0tWxLT+jEEbVckw7dv/9CPvM=)
                          2: 5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.crl (hash: Qhrq4xZsL2pzMd0X2xNKFlPOocwLqZVBuRCaiLNX82Q=)
                          3: 34352e3137382e32342e302f32322d3234203d3e20323639303136.roa (hash: ANDOD2Y20o/bn9AtcP6xKbuWzBdF87/cZuievyIe0QM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e0:5a:38:28:a2:7e:10:d8:4e:41:c7:6d:2a:3f:c2:9a:d5:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC
        Validity
            Not Before: Feb 17 14:19:34 2025 GMT
            Not After : Feb 18 17:33:34 2025 GMT
        Subject: CN=ACF092BA1B1C620838F6BDE986FD246B283ECC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:a8:24:15:1d:ba:e4:26:55:34:8a:8a:1c:
                    69:6a:b6:2d:62:7b:40:3f:ab:d7:79:ce:50:a1:f3:
                    2d:90:cf:50:b9:99:92:10:59:ea:3d:1a:79:94:8e:
                    98:26:2a:73:83:c6:89:8a:81:5f:4c:8e:3b:8e:4e:
                    39:ba:b1:4f:90:a4:d5:b5:23:9d:da:7a:0a:56:c5:
                    d7:0c:85:ea:78:9f:f4:b6:f5:19:df:9c:1a:a7:7f:
                    5d:3a:03:10:35:93:41:b8:ad:1d:b6:83:50:17:76:
                    1a:a8:a3:fe:30:1f:18:09:62:30:0a:5f:21:87:5e:
                    8b:39:0c:20:28:1c:78:c0:ba:db:2f:c3:03:c5:1c:
                    1f:6b:e1:c9:12:36:61:af:fc:1d:79:43:57:07:b1:
                    36:7d:c1:fb:ab:25:46:ec:c0:7f:91:92:d1:94:49:
                    17:db:64:16:8c:67:d4:4d:9c:59:8c:4f:63:f2:c8:
                    53:b5:e3:8a:37:df:6f:e5:44:25:ea:11:83:bb:de:
                    4d:bc:24:46:9c:65:07:0d:8f:5d:36:1f:af:68:3e:
                    4b:ae:74:10:23:9c:8a:22:bc:f5:76:b1:3a:7d:82:
                    3e:b1:dc:92:58:95:c3:de:ea:82:c0:a1:57:dd:ac:
                    bf:77:7d:bc:0a:10:1f:e1:d2:1c:3c:0f:ed:80:41:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F0:92:BA:1B:1C:62:08:38:F6:BD:E9:86:FD:24:6B:28:3E:CC:40
            X509v3 Authority Key Identifier:
                keyid:5B:2F:E1:79:A6:3E:B0:64:2B:E3:37:4D:4C:06:C1:F3:54:AC:BE:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zmCNqDss2eG7EVngnAZdmJJtTJdPN2XPsDqcUbK5VA3/0/5B2FE179A63EB0642BE3374D4C06C1F354ACBEBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:9b:18:ff:df:9e:66:ef:99:19:06:32:3e:15:79:f2:c0:
         18:bb:69:2f:01:e2:d3:1c:7f:e5:f2:e7:2d:4e:65:fc:af:8f:
         c1:a7:e0:47:1b:25:19:e1:1d:41:eb:de:c1:1e:03:6d:9c:e3:
         c8:05:2f:37:fb:66:a1:84:b3:22:18:dd:04:1a:69:f5:9b:98:
         c1:07:31:29:a6:21:67:cb:c4:06:7c:b9:df:16:4f:da:c7:3b:
         6f:97:d4:3e:12:bc:d6:f0:45:00:45:ff:69:b2:dc:bc:2a:93:
         bd:fb:5a:0b:7c:6f:36:a0:b3:00:fd:3c:c9:04:c2:5f:e9:85:
         57:50:b9:36:5d:e8:a0:e4:0d:2b:c4:41:7e:53:ac:59:a1:fe:
         87:83:50:51:0f:ab:2e:24:62:b8:fd:30:67:d9:bb:b5:57:7a:
         d8:1a:f6:2f:16:2a:43:fd:77:72:36:15:bc:f6:b0:55:65:37:
         f9:cc:68:45:6d:83:be:5c:8f:aa:2a:83:59:17:3f:ca:8c:56:
         41:ea:ed:29:e8:20:6a:87:51:16:94:86:bf:62:db:d9:c8:5a:
         ec:97:52:c3:79:d4:fd:98:af:6a:3b:d2:e8:57:78:43:12:dd:
         da:b0:31:6d:67:51:44:a8:25:b0:f1:c4:6c:a3:3b:dc:39:32:
         05:1b:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:39:16 2025 by rpki-client