Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.mft
File:                     A422D440165BAA30AAA7A2F917873160E46205D6.mft (raw, json)
Hash identifier:          j5vguiCHG8w1FshUEXDspp/u/x5ZwSBPxa1oxvawZHg=
Subject key identifier:   55:1F:31:DF:B4:7C:FD:DE:5A:80:B5:2F:C7:39:64:E3:D1:7D:D8:82
Authority key identifier: A4:22:D4:40:16:5B:AA:30:AA:A7:A2:F9:17:87:31:60:E4:62:05:D6
Certificate issuer:       /CN=A422D440165BAA30AAA7A2F917873160E46205D6
Certificate serial:       44828E260D0FA1E481ABC8567C2CA18F55E8E4C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A422D440165BAA30AAA7A2F917873160E46205D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.mft
Manifest number:          DE
Signing time:             Tue 21 Jan 2025 14:14:04 +0000
Manifest this update:     Tue 21 Jan 2025 14:09:04 +0000
Manifest next update:     Wed 22 Jan 2025 17:57:04 +0000
Files and hashes:         1: A422D440165BAA30AAA7A2F917873160E46205D6.crl (hash: JoY/LXyUorcDSP3YbCCbucdJE1hCO4qJfCW32gfBbh0=)
                          2: 3139302e38332e3132302e302f32322d3234203d3e20323730343235.roa (hash: wFdMy+qyaw9TPyJDVeF3aeKPwDUXDrfrZtnDyYP2EB0=)
                          3: 323830343a366263383a3a2f33322d3334203d3e20323730343235.roa (hash: CUd9IOh1nbNknYferJU5xy35+mwaEqcu9gZh03jQCeo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:82:8e:26:0d:0f:a1:e4:81:ab:c8:56:7c:2c:a1:8f:55:e8:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A422D440165BAA30AAA7A2F917873160E46205D6
        Validity
            Not Before: Jan 21 14:09:04 2025 GMT
            Not After : Jan 22 17:57:04 2025 GMT
        Subject: CN=551F31DFB47CFDDE5A80B52FC73964E3D17DD882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f4:f9:02:e7:aa:b6:c0:8b:b1:af:03:af:97:
                    21:3d:0c:26:26:3a:19:ac:5a:42:73:a8:8a:23:bd:
                    90:1a:c3:46:4d:8b:d6:86:7f:12:06:79:1b:c6:28:
                    88:67:45:e3:93:32:6c:cf:6a:13:d9:13:cf:63:3b:
                    98:70:39:76:29:cd:fb:e7:9b:a3:2c:f1:f0:23:fd:
                    b7:e0:e9:a4:b9:a2:7f:8c:2f:11:14:e8:10:00:ba:
                    fd:55:75:16:4a:f8:c1:ed:14:a5:4a:40:bb:70:19:
                    06:0a:e4:03:47:da:d6:65:48:a2:13:58:97:01:fc:
                    4a:0c:85:58:92:d4:0b:62:c2:ab:25:5f:41:96:5d:
                    0c:62:a0:a0:b9:c1:77:7b:e9:e9:e1:5c:14:9b:93:
                    16:68:e1:f3:91:16:b3:2c:68:ff:89:83:83:6a:f5:
                    56:42:8f:29:8b:ba:bd:03:fb:88:f6:3b:36:69:c5:
                    97:63:b4:ef:6c:ca:d3:85:6d:1f:ed:a7:2b:48:cf:
                    41:ef:27:46:88:51:1c:06:d0:e9:7c:63:d6:99:85:
                    18:0a:e7:ed:c5:20:23:25:cc:13:a5:55:48:3f:6c:
                    26:ad:4e:77:ec:5d:2d:d1:98:6e:34:55:df:df:22:
                    b1:9f:b7:8b:a7:03:56:3d:50:61:cd:a2:10:48:7f:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:31:DF:B4:7C:FD:DE:5A:80:B5:2F:C7:39:64:E3:D1:7D:D8:82
            X509v3 Authority Key Identifier:
                keyid:A4:22:D4:40:16:5B:AA:30:AA:A7:A2:F9:17:87:31:60:E4:62:05:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A422D440165BAA30AAA7A2F917873160E46205D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:38:3d:e4:d7:2f:34:44:e7:bd:2a:5c:1c:0e:6a:81:d9:db:
         0b:75:2a:71:38:51:b2:59:09:4b:d0:51:72:c5:2a:44:ba:a5:
         0a:11:be:9c:ae:f3:51:f6:fd:ee:1c:f1:ee:77:f9:dd:3e:07:
         4d:93:7e:77:ed:16:d4:e8:39:46:15:b2:b1:ad:6b:64:9b:76:
         f7:f6:57:4c:fc:26:a5:7d:85:3e:5c:d9:fd:fd:36:8e:0a:d6:
         9b:88:47:cb:96:01:e4:27:d1:ff:0d:43:0c:c4:bc:be:86:3f:
         0b:be:e2:2b:f4:71:f3:6a:85:22:92:f0:1a:7f:a2:e1:d7:6c:
         cc:c0:f7:fb:f3:37:65:02:8b:54:85:9c:a0:01:d8:98:f8:e6:
         6c:74:69:7d:db:a2:a5:3d:f8:54:d1:9b:3c:a5:f2:7a:96:75:
         b1:f4:49:c7:73:de:58:93:30:73:0c:3c:1b:26:29:0f:29:39:
         37:61:ad:1b:a1:ba:15:98:bc:ee:0a:d9:fd:06:2f:e3:83:56:
         be:97:78:e2:5a:a1:b8:02:da:5a:44:71:7f:66:59:03:3d:3e:
         c6:84:91:0a:a1:e3:eb:73:86:02:9b:eb:62:8c:c9:aa:61:be:
         0f:a9:e7:ab:ea:40:60:5c:bc:a8:24:af:9c:6a:0b:dd:e2:15:
         d9:d2:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:22:41 2025 by rpki-client