Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.mft
File:                     A05BF308DC29C25A26A0F4A33425B04FFB3D9251.mft (raw, json)
Hash identifier:          ywbQdd7xvXz2P8rIlCn+n/J8FMjvrY8iC6BoD9bG0rw=
Subject key identifier:   B1:54:9D:7D:59:1C:2D:E7:E5:1A:FC:01:33:2A:98:A6:FA:2F:92:99
Authority key identifier: A0:5B:F3:08:DC:29:C2:5A:26:A0:F4:A3:34:25:B0:4F:FB:3D:92:51
Certificate issuer:       /CN=A05BF308DC29C25A26A0F4A33425B04FFB3D9251
Certificate serial:       235B16A8B38AF90844584F86C9433C0C2BF583A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.mft
Manifest number:          0157
Signing time:             Sat 29 Mar 2025 04:19:38 +0000
Manifest this update:     Sat 29 Mar 2025 04:14:38 +0000
Manifest next update:     Sun 30 Mar 2025 05:48:38 +0000
Files and hashes:         1: 323830343a353737383a3a2f33322d3334203d3e20323638303637.roa (hash: 3sy+kduS2pbwRMRe53UR4Cy7MW3hCh/9TP3uGqO6HjU=)
                          2: 34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa (hash: s4ZvTDuplScwuoPYymiln35GJlfp6UUFIuTJ/o4H6nQ=)
                          3: A05BF308DC29C25A26A0F4A33425B04FFB3D9251.crl (hash: 7Pupre1MvtDbKLFNbU2tpAuWTv0AGEYFdhZuNoykniU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5b:16:a8:b3:8a:f9:08:44:58:4f:86:c9:43:3c:0c:2b:f5:83:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A05BF308DC29C25A26A0F4A33425B04FFB3D9251
        Validity
            Not Before: Mar 29 04:14:38 2025 GMT
            Not After : Mar 30 05:48:38 2025 GMT
        Subject: CN=B1549D7D591C2DE7E51AFC01332A98A6FA2F9299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:33:26:f3:f0:6f:41:4d:32:96:6b:9f:4a:
                    70:c0:7e:a3:a2:1a:77:a1:38:8d:c2:1b:bc:b2:2d:
                    92:ec:86:6e:40:79:87:8a:9a:72:36:17:22:5b:fa:
                    36:73:0c:34:46:aa:a8:dd:a9:42:25:cb:7a:e7:ac:
                    e4:00:bc:15:bc:f4:cc:04:50:d9:f2:d6:b8:5f:9f:
                    f7:81:16:2c:db:77:1d:7d:75:c0:c6:1c:db:36:c7:
                    b7:14:fd:11:df:04:24:69:a8:a5:04:50:db:17:d8:
                    90:07:1b:7a:9f:c1:f4:0e:98:08:6e:57:20:45:97:
                    7a:e3:31:df:a4:b6:9f:e1:9a:13:db:53:18:cb:37:
                    55:ac:a0:e6:10:ab:3b:1b:8d:f5:fe:8d:64:f1:65:
                    b8:86:5a:96:65:e8:56:58:8a:46:0a:41:9b:3c:fc:
                    a5:f0:6c:9a:c5:7c:9b:8c:34:9e:4d:7b:16:08:19:
                    3f:d0:85:25:c6:ae:09:47:25:5b:a6:63:c6:68:a3:
                    48:61:d2:f8:46:1a:68:33:70:46:1e:50:17:b9:d4:
                    c8:d5:45:6f:6c:0d:55:76:53:34:03:b7:d0:ad:a1:
                    30:25:1f:9b:11:ff:e3:3d:c9:18:af:a6:b3:93:bb:
                    37:82:6a:fa:5a:ee:59:05:9a:98:7f:6d:5a:cf:d1:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:54:9D:7D:59:1C:2D:E7:E5:1A:FC:01:33:2A:98:A6:FA:2F:92:99
            X509v3 Authority Key Identifier:
                keyid:A0:5B:F3:08:DC:29:C2:5A:26:A0:F4:A3:34:25:B0:4F:FB:3D:92:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/A05BF308DC29C25A26A0F4A33425B04FFB3D9251.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:68:d1:85:ad:bc:4a:88:85:93:02:7c:7e:4b:ca:63:f1:89:
         65:18:ab:20:01:01:0e:78:b4:0d:a3:b7:0c:d9:34:1e:f4:e0:
         ae:f7:3b:d8:41:1d:48:fe:97:65:11:fb:80:b7:d9:35:12:09:
         c0:48:df:d1:c9:44:fc:c6:b8:fb:d7:5a:bf:92:3a:b5:2c:f9:
         88:13:44:95:6f:bc:d2:b8:32:e6:27:32:25:b7:56:92:58:5c:
         eb:24:00:a3:3c:bf:46:d3:c6:ac:bb:f6:d3:9e:58:d8:e3:68:
         fc:9b:70:b2:c7:3d:09:96:4e:60:8e:4a:79:aa:1f:3d:dc:53:
         54:2b:bd:82:b7:1c:01:eb:15:1a:5d:4e:67:1c:f9:a7:03:00:
         28:74:d3:fb:f3:0a:40:f1:5c:2b:00:1a:b2:85:d1:57:d8:bb:
         14:14:1e:53:45:7b:e7:c3:30:9a:89:39:72:89:f2:8b:2e:9d:
         39:d6:d4:a9:1d:8e:88:b4:c9:62:f5:3c:ff:43:54:f9:45:2c:
         11:c8:93:b1:98:b9:14:a3:c5:e4:c8:9a:d8:28:89:2d:e0:70:
         e5:a1:09:e4:72:d8:e2:a9:a9:62:05:39:0a:b8:ae:e5:2b:9a:
         ff:19:87:a1:74:e6:5f:9e:65:8b:7c:40:48:14:4e:e1:28:fd:
         7c:b8:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:49:07 2025 by rpki-client