Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft
File:                     5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft (raw, json)
Hash identifier:          bQpSoDFGAi8UI0C4A+ls7urZ6PTWnFv8OVJEh+Oh90U=
Subject key identifier:   46:A7:CC:E9:FE:F4:B2:B1:BF:12:06:91:C4:66:98:1B:E5:B3:AD:70
Authority key identifier: 5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA
Certificate issuer:       /CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA
Certificate serial:       104C0FAD7AEB181EFDC4784E17FA5324EF1457AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft
Manifest number:          A1
Signing time:             Sat 29 Mar 2025 05:35:21 +0000
Manifest this update:     Sat 29 Mar 2025 05:30:21 +0000
Manifest next update:     Sun 30 Mar 2025 05:58:21 +0000
Files and hashes:         1: 34352e37302e342e302f32332d3332203d3e20323637353537.roa (hash: hzk5pfVMKmSnXgCqrrAiLUBnOlh6sxuIzaAEK/dnhbc=)
                          2: 323830343a343333633a3a2f33322d313238203d3e20323637353537.roa (hash: igHOZQrkWxwvNldBx/c85GMsgvPl1O5uxDTE8MWmIzo=)
                          3: 5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl (hash: /gWsYY2kMqqoJiDcmk7EjNgOw+3jFiVlPSnf6iil4KE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4c:0f:ad:7a:eb:18:1e:fd:c4:78:4e:17:fa:53:24:ef:14:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA
        Validity
            Not Before: Mar 29 05:30:21 2025 GMT
            Not After : Mar 30 05:58:21 2025 GMT
        Subject: CN=46A7CCE9FEF4B2B1BF120691C466981BE5B3AD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:bd:fc:d2:4a:c8:3b:89:e6:c1:33:27:1d:
                    d3:be:a4:01:a0:c5:da:fa:bb:33:c8:58:49:f2:41:
                    8a:bd:ca:59:9b:38:e7:f1:7b:a8:4f:c0:e6:88:5c:
                    29:2a:d4:13:26:44:27:0c:71:55:af:6d:5e:58:38:
                    ae:d7:5e:90:69:38:24:45:c0:df:b1:6f:53:94:d6:
                    50:c7:d8:3a:0f:79:af:28:7f:1e:99:4a:c8:9f:44:
                    66:6b:1e:87:dd:fb:9d:53:a7:a1:d8:20:2f:b3:a1:
                    4e:cd:81:f5:1e:aa:2d:1d:ef:33:ed:06:4e:1f:20:
                    a5:b2:b3:a3:ae:0d:59:01:75:32:90:a9:cf:b4:19:
                    88:45:86:5e:1d:37:73:af:6c:e8:e4:06:37:a9:1d:
                    35:16:9c:e0:51:d9:12:95:fe:d7:e1:5b:d5:1f:02:
                    26:b8:9b:5a:22:d0:8d:02:8f:ce:69:4d:95:15:75:
                    b0:31:e9:7b:b4:87:11:27:1d:c9:96:45:2d:01:0a:
                    3d:98:2c:d1:50:a5:42:08:e0:37:96:5b:b9:fa:0c:
                    7b:70:26:4f:a2:b9:a7:e4:18:38:28:67:3b:4b:1f:
                    61:79:28:18:ac:13:f1:e7:12:ae:5e:c9:dd:c4:a1:
                    af:b2:bf:78:87:8a:c9:2d:3a:62:ca:89:6d:89:f2:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A7:CC:E9:FE:F4:B2:B1:BF:12:06:91:C4:66:98:1B:E5:B3:AD:70
            X509v3 Authority Key Identifier:
                keyid:5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:22:80:19:b2:7f:b2:23:53:99:94:97:e8:b0:5d:2d:fd:27:
         c9:ea:7f:0f:46:6d:53:77:fc:30:6e:54:6c:0e:ff:e2:81:aa:
         a2:53:93:50:11:0d:79:29:9c:af:55:6c:4b:4b:82:1e:2a:e2:
         36:14:a9:87:4d:68:60:b9:b3:3a:64:5a:34:4c:f6:fe:64:36:
         61:57:2d:df:fd:68:f4:b9:db:75:e9:41:f8:68:cc:21:bb:46:
         9c:0c:e2:e2:cf:de:21:12:e2:db:9c:c0:ef:0a:64:93:41:a2:
         69:78:37:ab:15:2e:49:60:01:7d:79:d7:8f:ff:10:af:fd:7c:
         7c:0e:1d:b0:49:35:0e:aa:ae:8b:08:d3:1b:85:30:80:fc:9a:
         3e:3e:6f:8c:b4:52:9c:b3:1a:5b:d3:9e:15:b4:2f:55:f3:ea:
         cd:df:4c:9a:e2:23:46:38:85:32:97:0f:3c:ca:18:93:11:f4:
         9d:1e:42:4d:b9:90:f0:76:23:1e:b0:e2:f0:a9:6e:6d:38:23:
         6d:e6:79:a7:d4:12:72:97:92:90:78:f9:e9:d6:06:d5:6f:25:
         ac:4a:d7:92:60:50:0a:83:92:4f:a4:5d:50:73:06:5f:a2:fa:
         98:15:74:25:56:95:c2:2d:e7:5f:32:84:c6:e2:fd:a3:28:f9:
         a9:e7:7d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:45 2025 by rpki-client