Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
File:                     4ABC2853483C8D55A291610B3C655D5FD053740E.mft (raw, json)
Hash identifier:          IytL8NytnJdYtO1w7f9CfbKeVfpXm3/UubapzaAEwLQ=
Subject key identifier:   48:8C:7E:E6:9C:4F:D5:69:A3:26:E8:E2:B3:9D:26:AF:D5:55:B1:31
Authority key identifier: 4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
Certificate issuer:       /CN=4ABC2853483C8D55A291610B3C655D5FD053740E
Certificate serial:       3ED4049EF25F21C83DDA0FA0B60406D7EB534899
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
Manifest number:          0195
Signing time:             Sat 01 Feb 2025 12:21:36 +0000
Manifest this update:     Sat 01 Feb 2025 12:16:36 +0000
Manifest next update:     Sun 02 Feb 2025 13:10:36 +0000
Files and hashes:         1: 3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa (hash: 1LDXv0zBhcADxYmwHZeK8ERsIuED0HuQvyOfe+AVLKQ=)
                          2: 323830343a376332303a3a2f33322d3334203d3e20323731343737.roa (hash: KsM5DjA+LPpqSG18AKMERsHSuFRnigrcfmdp7/4Y/Sg=)
                          3: 4ABC2853483C8D55A291610B3C655D5FD053740E.crl (hash: xEXUuiaZvMAzQGU5M6UrYL6Gfn9ZF7aEepr6qT2Cd+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:04:9e:f2:5f:21:c8:3d:da:0f:a0:b6:04:06:d7:eb:53:48:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ABC2853483C8D55A291610B3C655D5FD053740E
        Validity
            Not Before: Feb  1 12:16:36 2025 GMT
            Not After : Feb  2 13:10:36 2025 GMT
        Subject: CN=488C7EE69C4FD569A326E8E2B39D26AFD555B131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:c3:a7:6b:ae:10:e3:53:f9:e6:57:e0:08:
                    2c:1e:f0:0d:76:62:13:60:17:11:50:12:3f:a1:1b:
                    85:06:6e:29:25:f2:18:27:02:28:1b:2f:77:77:54:
                    9c:53:ec:ef:d7:04:6a:f1:37:be:b1:4c:81:1b:15:
                    a5:ff:4a:53:38:82:b2:f0:ba:c8:3e:16:10:57:ab:
                    ea:17:fd:01:07:26:fc:db:b0:77:01:85:26:a8:bc:
                    0c:3b:20:38:cb:3f:21:de:f4:5e:dd:ea:9f:ea:5d:
                    99:0e:75:78:26:28:67:84:73:cc:23:94:82:5a:93:
                    4a:02:f1:e1:35:23:8b:18:ba:9c:14:8c:19:e4:a4:
                    68:ae:bb:96:48:f3:29:6a:43:08:61:b6:07:27:61:
                    ef:7c:56:7a:59:82:51:09:0a:63:95:5a:8a:4c:9a:
                    08:75:47:be:66:ea:cc:14:f8:e7:88:9d:de:44:43:
                    1a:fc:7a:28:20:2b:fe:d9:d7:2c:3c:1b:bf:93:d4:
                    9a:c6:bf:01:0a:09:e4:b7:64:b7:fa:67:dc:8a:1a:
                    07:3a:57:0b:72:7e:d1:50:9f:a5:ed:20:02:5d:4f:
                    24:a0:f5:53:56:57:5b:ed:f1:a1:ec:b8:09:44:f4:
                    42:57:ac:61:db:c2:ad:16:20:c7:c7:49:6e:21:0b:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:7E:E6:9C:4F:D5:69:A3:26:E8:E2:B3:9D:26:AF:D5:55:B1:31
            X509v3 Authority Key Identifier:
                keyid:4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:58:a6:3c:c2:62:a2:9e:72:61:eb:83:d5:fc:46:3c:97:43:
         b2:3e:e6:72:96:ac:ee:a8:d8:19:f3:26:6e:93:ef:5a:0d:80:
         33:a8:1a:51:52:be:a3:b5:0a:20:84:c6:30:64:4b:66:df:38:
         e7:4d:40:ec:42:32:ad:8a:f9:d4:1d:31:07:1f:f4:8d:29:96:
         74:37:99:ab:58:d7:89:54:e6:72:3a:73:9b:a7:61:6f:4a:c5:
         cb:16:21:79:74:4c:1a:50:c6:1e:6b:ca:7f:89:c8:26:e8:cb:
         50:e5:d9:04:01:0d:31:2b:75:95:02:39:2f:1c:27:06:51:1d:
         e2:99:38:36:f0:41:8a:9b:84:95:c3:49:a3:42:95:69:07:76:
         38:90:9a:73:8c:21:34:c2:fb:10:fa:f5:4e:01:7b:36:f8:d3:
         20:8b:ce:dd:5c:41:3b:80:2a:a0:5b:51:3e:6d:a5:f0:ae:52:
         f2:69:8e:a2:1e:13:8b:0d:a2:e1:13:78:7f:36:c6:b9:22:f9:
         1f:bf:91:94:f0:14:a3:03:dd:74:67:18:0b:15:76:30:7d:dd:
         c9:b7:63:90:1b:7f:f9:01:20:9f:8f:d2:79:a1:f2:e5:c0:d8:
         5f:dc:68:42:82:59:5e:52:8c:d7:61:0d:70:05:ac:a3:be:6d:
         fe:99:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:18 2025 by rpki-client