Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
File:                     9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft (raw, json)
Hash identifier:          HXg957VxxqwfqRbS3+hUxa8PEQsy8F15ZsQxb9KXWDc=
Subject key identifier:   91:A0:E5:19:B5:2F:15:E6:A2:F7:F5:79:8A:BA:AB:84:A2:9E:D7:A9
Authority key identifier: 9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85
Certificate issuer:       /CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
Certificate serial:       147011CB9DD8B9B4A5AFF7DA7AA98B364E7575F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
Manifest number:          019B
Signing time:             Tue 04 Feb 2025 05:58:20 +0000
Manifest this update:     Tue 04 Feb 2025 05:53:20 +0000
Manifest next update:     Wed 05 Feb 2025 07:11:20 +0000
Files and hashes:         1: 34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (hash: 4OqhzCXvSddMPt+vmOXwPa24eXLfWoS2EWQsDiXKasA=)
                          2: 34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (hash: ial675of+ZesGVVCtl0oHXA8v7Tu2e/aWwmHDmtjs8M=)
                          3: 34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (hash: 5JEQ41mS93qIAQdS67rT4lBibFdkhJ+y7yw43mriUAQ=)
                          4: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (hash: AY+0UKqSeFi+VcA328CtiUwEKZiGPUTg47u6izctak0=)
                          5: 34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (hash: wGNZNggHaM/yBWZqJaTvcpNdRoYux0P6aMXlI344qXg=)
                          6: 323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (hash: MEr3O6ibKU80eMFQUkD/Hv7j++TL7CgWOIDvUfG/vjQ=)
                          7: 9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl (hash: rTw4FO5fY4XKai0DltT1Fcqr7VRQtvOZlSNrcwgYlW4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:70:11:cb:9d:d8:b9:b4:a5:af:f7:da:7a:a9:8b:36:4e:75:75:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
        Validity
            Not Before: Feb  4 05:53:20 2025 GMT
            Not After : Feb  5 07:11:20 2025 GMT
        Subject: CN=91A0E519B52F15E6A2F7F5798ABAAB84A29ED7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:f3:10:15:85:b9:b3:64:d9:ff:5b:11:ee:
                    26:f4:41:a3:31:19:9e:70:4d:42:21:11:3e:1a:8f:
                    8b:1a:47:cb:bd:c3:99:fe:d7:80:94:da:fa:83:ff:
                    2d:f3:30:4f:9c:3f:24:5c:24:eb:05:f1:68:d6:45:
                    7c:90:32:9f:06:b4:c5:c0:cf:c2:ee:8d:92:0d:57:
                    bc:d4:06:81:51:62:9a:66:fb:b8:0a:72:30:b4:3d:
                    20:3c:20:0f:e1:b1:a8:53:25:31:09:90:f4:fc:cc:
                    22:b7:1a:1b:97:07:f1:86:f2:2a:a8:d6:8c:8c:d6:
                    7f:7f:a5:cf:a7:e6:1d:7f:b7:6c:1f:90:3c:8d:48:
                    79:a0:86:e3:1e:25:f0:83:16:72:87:a9:12:e7:53:
                    71:3b:ba:7c:01:da:57:9a:e1:85:04:73:db:90:a4:
                    a6:55:f0:3e:ef:c3:61:94:78:b5:b7:c5:ad:78:38:
                    94:44:9e:87:54:c7:0e:12:af:b2:20:06:e8:15:c2:
                    1d:69:59:bc:62:14:fe:a9:99:9a:62:e3:2b:f5:68:
                    07:82:fb:a8:a2:fa:d4:5c:6a:cc:c4:d6:ca:84:1d:
                    f7:7f:a9:7d:69:40:92:c6:a1:4a:4b:3a:5f:0a:20:
                    fe:66:97:5c:a9:23:72:f0:87:3f:67:32:86:73:bb:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A0:E5:19:B5:2F:15:E6:A2:F7:F5:79:8A:BA:AB:84:A2:9E:D7:A9
            X509v3 Authority Key Identifier:
                keyid:9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:28:2b:ea:55:cc:e5:7d:60:8a:f5:82:22:53:07:03:cb:09:
         da:60:25:ca:06:8a:f8:11:b3:d3:32:c6:ba:8b:5c:4a:39:2b:
         80:92:ec:03:17:86:79:6e:90:e9:c5:32:c6:af:ad:d2:22:90:
         d2:21:66:16:15:38:89:0d:d4:a6:6f:47:ef:37:86:f4:0b:ec:
         6f:49:53:05:2a:08:d3:8c:f8:3d:f2:a9:c9:26:32:81:dc:9b:
         2a:5a:a3:66:53:7d:c9:b0:36:57:e9:1f:d6:f4:44:3f:8f:b5:
         c1:40:f5:fc:1a:22:f1:df:6b:e7:60:1e:0e:5e:4a:07:e6:2f:
         57:ad:e2:bd:31:ca:9a:03:89:ea:d9:34:8d:7f:aa:ab:fc:32:
         06:a9:b4:2b:f3:62:7b:42:5a:c0:4a:66:0b:74:e2:cb:41:3d:
         cd:41:6b:c6:c5:bb:4b:70:bd:80:9b:b4:8b:b6:05:2b:f5:07:
         97:f7:1f:80:6c:6a:54:16:27:40:12:be:27:d7:d1:b4:e7:58:
         8f:4b:df:98:b5:15:47:90:92:9c:70:66:a5:25:cc:31:4f:00:
         80:df:f5:5a:e9:3e:89:76:65:47:bc:e2:2b:a7:00:f8:3d:83:
         c1:10:c2:3d:32:c3:6d:b1:61:b9:1a:68:8f:7c:41:d0:5c:83:
         cb:ab:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:19:55 2025 by rpki-client