Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft
File:                     5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft (raw, json)
Hash identifier:          DKXO5mCmGZaA2N7COvXDVeQBL32fVmlTEtIT6R1ZEI4=
Subject key identifier:   D7:66:70:05:59:98:9A:26:B4:EB:88:AC:21:B8:DE:2D:5E:DD:A3:29
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       3011363F9831991E9B6F96CC525EE25CA56216E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft
Manifest number:          0157
Signing time:             Mon 03 Feb 2025 15:53:02 +0000
Manifest this update:     Mon 03 Feb 2025 15:48:01 +0000
Manifest next update:     Tue 04 Feb 2025 19:02:01 +0000
Files and hashes:         1: 5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl (hash: Jclpx3O4mRIviArYxKhxPWk3HuF3yGRJdPVgRyX5thc=)
                          2: 323830343a323338633a353130303a3a2f34352d3435203d3e20323634313639.roa (hash: 7ylMoUo0LElAxDikfpM1JNH3edDbsmbRqL6LP9usOb8=)
                          3: 323830343a323338633a333030303a3a2f33362d3336203d3e20323634313639.roa (hash: rxjAoQRVId+SmI+vPMETpBZFJUREzx6oIDs0PczXwbo=)
                          4: 323830343a323338633a313230303a3a2f34302d3430203d3e20323634313639.roa (hash: VDKAdQ4/qxBkPKE+5iiZ7NWojh+iUgm2VKpkktCM4yQ=)
                          5: 323830343a323338633a363030303a3a2f33362d3336203d3e20323634313639.roa (hash: lUSF3n6Jb519fnNfL2UQdHN+OrUnB1rPVtStHxEtZJw=)
                          6: 323830343a323338633a3130303a3a2f34302d3430203d3e20323634313639.roa (hash: TWeH8NzuMEoHhIyC+YhLnJJb+lCequPPzkevaivtUXw=)
                          7: 323830343a323338633a373030303a3a2f33362d3336203d3e20323634313639.roa (hash: K9OrLCO3joyKlr+Ebzu8vuWYaQleB0X/PJPL1qsmtu4=)
                          8: 323830343a323338633a3a2f33362d3336203d3e20323634313639.roa (hash: YUMoEes5WkcxQhc9eOchL8lnU5QcZcL5gPeVmpWxF4I=)
                          9: 323830343a323338633a313030303a3a2f33362d3336203d3e20323634313639.roa (hash: B5HRLHp1bsocjYrEE9BZSVCxI+aQrpbraX9xHkX6OyY=)
                          10: 34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa (hash: MSjpX/4D8m1RgIODxDRHXV7CdYLTQ5w1aciGfFCu7VY=)
                          11: 3133382e39342e3230302e302f32322d3234203d3e20323634313639.roa (hash: LmS1FYOCrlWMPX7Yctf7bLtiX/R3dxXFQRUThmNmLeQ=)
                          12: 323830343a323338633a323030303a3a2f33362d3336203d3e20323634313639.roa (hash: t4n0weidsvMKgknW1LBIdW/CTV0LW1IFI23soC6w+u4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:11:36:3f:98:31:99:1e:9b:6f:96:cc:52:5e:e2:5c:a5:62:16:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Feb  3 15:48:01 2025 GMT
            Not After : Feb  4 19:02:01 2025 GMT
        Subject: CN=D766700559989A26B4EB88AC21B8DE2D5EDDA329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:f1:32:b2:48:b1:c7:cb:93:b4:12:66:1f:
                    70:09:a4:64:16:d6:10:d0:d1:75:4f:e5:cd:52:3c:
                    64:e8:c9:d7:98:ed:3e:77:f5:18:1d:0f:0d:49:ae:
                    18:0d:56:13:dd:e1:c7:00:d9:e4:55:b1:97:70:fb:
                    bb:89:ca:6c:36:cb:b8:19:4c:b8:cc:60:02:a9:7d:
                    4b:e9:3d:c7:c8:e3:da:5a:64:29:70:56:44:3b:ce:
                    a6:a1:b9:76:79:3c:e5:9c:56:cf:d3:7f:78:c5:4a:
                    54:05:bc:90:e4:f9:42:ac:bf:ba:89:5a:b7:9f:8b:
                    0a:e2:62:49:f0:0f:1d:83:98:04:a6:a3:56:81:0d:
                    44:3f:c5:00:62:e1:0e:13:c2:53:0d:82:8b:e8:97:
                    66:3b:bf:21:b9:60:dd:3b:1a:63:7e:50:f0:5f:86:
                    4e:79:85:1f:bc:e1:cf:1d:2c:86:ae:32:48:69:2e:
                    23:f5:32:a8:29:5d:cf:29:10:af:ee:8b:55:e2:c7:
                    bb:c2:4b:17:44:1c:3a:76:02:c9:5b:62:4e:64:81:
                    6b:0a:66:0a:e0:57:d4:54:ee:d4:56:a1:bd:b5:73:
                    a8:47:8c:ba:1c:8e:53:b9:b6:b0:a5:9c:7a:3a:c7:
                    cb:89:73:60:36:4c:86:9d:fd:37:4d:b8:30:b9:8d:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:66:70:05:59:98:9A:26:B4:EB:88:AC:21:B8:DE:2D:5E:DD:A3:29
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:39:9e:4b:b5:a8:7b:e2:27:13:f7:d2:bb:e4:87:ee:d7:1b:
         80:ab:e7:84:08:e7:e1:e4:1f:85:b6:97:d4:24:9f:0c:63:60:
         b2:c5:44:5a:a5:49:07:e1:14:d3:83:85:97:0d:47:5c:af:46:
         9b:36:f0:c2:5c:93:a2:fe:c5:c3:dd:76:da:a1:4e:5a:01:ce:
         39:78:81:68:c1:bf:4f:5e:b0:e0:77:5c:42:e2:07:8a:b5:a9:
         6a:49:d4:92:e2:6c:0a:44:7d:10:6c:b6:05:cb:7e:27:7d:67:
         7e:4c:67:e8:cf:0e:85:6e:b8:62:c6:ab:5e:6c:6a:96:38:98:
         8e:69:f9:d8:3f:5a:00:b7:fa:2f:84:ef:93:f7:32:8a:11:d0:
         f9:7e:27:fa:cc:c5:a2:9a:7e:1c:1b:34:2d:b5:29:5e:fa:01:
         c2:9e:6e:9d:af:3b:d6:a0:cf:c5:15:ce:20:6f:05:2f:6c:12:
         59:18:f3:a7:46:a7:9c:cd:e4:53:c6:55:11:8e:7c:a7:58:c1:
         00:2f:b3:87:07:49:5e:fb:83:54:a8:9d:8f:84:81:46:40:d4:
         71:88:21:d4:62:a3:23:dc:76:71:ed:6f:60:ac:7c:c9:86:9e:
         c1:cd:61:28:f5:b7:6a:c7:56:10:56:92:29:ec:d4:a5:f1:c3:
         71:a9:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:41:52 2025 by rpki-client