Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
File:                     1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft (raw, json)
Hash identifier:          WNfp8ObLfw+JnAZF+TQlBOkiHI2YURywDpxJ01bwaEI=
Subject key identifier:   56:47:39:D5:17:B1:23:56:51:BA:2E:D4:86:AE:DC:95:BF:17:4A:7F
Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Certificate issuer:       /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Certificate serial:       1743C69E34D294FF89443BDE98211220F5DD312B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
Manifest number:          01D1
Signing time:             Sat 29 Mar 2025 09:27:03 +0000
Manifest this update:     Sat 29 Mar 2025 09:22:03 +0000
Manifest next update:     Sun 30 Mar 2025 11:04:03 +0000
Files and hashes:         1: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: CtlsUAFWjImlwZWNz6P/jVFD3JBP5hLeswnSXTvh7E4=)
                          2: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl (hash: 6TGkJI9RF2cj8Wv+HE03BhDNAKdOlw0bdmHXFo7IR4o=)
                          3: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: V4pr7EMRf7I7ElOQ2jaIag3WW0+6k23seAgpv3kqk1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:43:c6:9e:34:d2:94:ff:89:44:3b:de:98:21:12:20:f5:dd:31:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
        Validity
            Not Before: Mar 29 09:22:03 2025 GMT
            Not After : Mar 30 11:04:03 2025 GMT
        Subject: CN=564739D517B1235651BA2ED486AEDC95BF174A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:f2:25:dc:e5:8c:2c:51:49:be:4d:d1:45:
                    2e:3e:43:98:70:40:05:a7:89:ea:c3:b1:08:99:4d:
                    7c:3e:23:25:6a:bc:06:61:9d:e3:1d:71:b0:ba:1d:
                    7a:84:49:b6:f3:70:73:a5:7e:1f:40:60:35:64:02:
                    85:95:bf:28:61:e7:2c:4b:c5:8b:a5:35:60:db:be:
                    f0:04:08:e1:f0:57:30:20:a9:f6:2c:67:f5:61:ba:
                    72:80:06:e8:78:0f:b8:ef:a0:8e:06:96:1b:dd:7f:
                    27:a0:b8:e7:cd:4d:f8:ef:18:bd:2f:03:e6:e9:9e:
                    12:83:2b:8b:8e:fb:23:62:ac:a1:01:fb:38:2a:d4:
                    d1:87:ba:84:c3:97:13:1d:ab:57:aa:14:68:6a:00:
                    13:1d:a4:47:82:51:07:c3:05:9a:d4:7c:b3:8e:b8:
                    4e:84:48:8a:d7:e6:a4:e5:8c:2e:f5:08:ee:30:4c:
                    9e:d2:68:24:f2:87:66:32:4d:84:59:6a:c0:63:a8:
                    12:91:59:a4:a2:35:c0:0e:d9:13:58:1d:a5:13:c4:
                    95:88:a5:1b:90:63:c5:77:8c:26:19:e6:a8:f1:0c:
                    bf:79:2e:82:48:7f:4d:d2:4f:44:9a:ae:80:8e:40:
                    6e:e9:7d:8d:59:62:4d:cd:ee:7e:90:bf:4e:c2:c3:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:47:39:D5:17:B1:23:56:51:BA:2E:D4:86:AE:DC:95:BF:17:4A:7F
            X509v3 Authority Key Identifier:
                keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:18:9d:0c:9b:ad:e6:37:ac:17:fb:1c:fc:9e:96:bc:3f:
         97:cb:44:31:7b:a4:66:de:0e:f2:18:20:b5:ae:05:d6:76:64:
         43:e1:e0:55:a6:58:ca:94:12:e5:8a:29:14:ff:f6:ec:08:72:
         35:9a:33:3c:0e:e0:f7:00:f8:f6:27:91:1b:f6:49:56:3b:68:
         09:b7:8d:d0:ce:eb:f7:07:c8:3f:8a:ce:c1:8a:bf:f4:9d:67:
         ed:0c:7f:b6:bf:d9:80:40:5d:a4:e3:b6:1f:4d:a3:c6:24:f7:
         7d:a3:d8:b0:5d:e3:e0:81:d3:03:b8:8a:58:06:af:64:6f:ce:
         88:e2:8f:46:4b:45:f7:88:e7:e9:5b:3a:a0:67:d9:22:90:62:
         60:50:08:62:14:af:ed:0f:c0:83:f4:09:96:84:ff:0e:1b:03:
         0a:09:c5:d6:87:ed:84:85:d4:20:d3:59:c0:b8:94:42:27:e0:
         09:29:c7:94:9b:22:63:1b:b9:b5:1c:8d:7a:9c:8c:42:a7:5f:
         f7:ab:93:b6:22:d0:f3:66:00:4c:a5:f4:27:6c:77:f7:28:09:
         48:d1:6d:c0:e1:0b:27:df:d6:33:b9:8c:37:c3:6a:da:0e:0f:
         f9:e1:85:41:34:28:22:59:49:c2:31:97:06:40:f1:aa:23:be:
         da:66:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:20 2025 by rpki-client