Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
File:                     1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft (raw, json)
Hash identifier:          nqaB1Iga0RbclussstUPRpI2/WZR725LKobZaEvQodc=
Subject key identifier:   5E:4A:91:A7:38:5C:4A:87:E0:35:2C:A0:57:FE:61:3B:7C:56:B8:FB
Authority key identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E
Certificate issuer:       /CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
Certificate serial:       518A46FF505A737EC0203B692016BE2E34BF0E5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
Manifest number:          1E
Signing time:             Mon 17 Feb 2025 15:21:31 +0000
Manifest this update:     Mon 17 Feb 2025 15:16:31 +0000
Manifest next update:     Tue 18 Feb 2025 16:39:31 +0000
Files and hashes:         1: 3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa (hash: hMPwxwIFj7Buq6bAV/HOMwaoPoqeXdLoP8Bcivkp5XU=)
                          2: 3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa (hash: aO0SHpEJrP4XNtQuwqB7tN9pl9DDuzDBSC0/9pYo55g=)
                          3: 323830343a316266633a3a2f33322d313238203d3e203631363332.roa (hash: Q20tO3PH1FdBiNGAf2lmvuYhX5482yPCWn6UjwSAsTA=)
                          4: 1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl (hash: QVc50l2JcnjfylwjCYqcBlv7Hz7Vy4AHgpVg2J6UzjA=)
                          5: 3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa (hash: +QF6r8cJoOgopMXHRk+XYYXKfB6U8fZNhd20Flzrr5U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8a:46:ff:50:5a:73:7e:c0:20:3b:69:20:16:be:2e:34:bf:0e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
        Validity
            Not Before: Feb 17 15:16:31 2025 GMT
            Not After : Feb 18 16:39:31 2025 GMT
        Subject: CN=5E4A91A7385C4A87E0352CA057FE613B7C56B8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:15:02:6b:4d:70:26:33:06:d5:7b:8c:3e:86:
                    0e:14:e6:a6:0a:10:13:aa:7f:31:8e:d4:53:5d:fb:
                    7d:f7:ed:2d:8c:eb:2c:5b:74:b6:7c:c9:12:cc:60:
                    4e:a2:76:bf:2a:69:d3:55:8c:01:3c:c8:cd:29:0e:
                    88:3c:ae:02:a2:af:63:47:27:03:3f:92:64:29:00:
                    4b:1b:46:d9:6f:53:0a:23:26:7f:34:c2:ac:6e:a9:
                    f3:b6:0f:f7:08:1d:46:9f:6d:bf:a1:b1:4c:40:7b:
                    26:c8:df:65:ab:d4:d6:8b:49:14:b9:1a:93:71:d1:
                    1a:00:67:57:b3:9e:3d:86:30:f5:56:c3:0e:73:2e:
                    15:94:d2:cb:d8:b4:1e:9a:68:45:84:8e:15:0e:46:
                    25:d5:dd:5d:7b:9c:c6:d5:aa:31:cf:52:11:a7:dc:
                    fa:9c:6f:0a:ed:ad:a1:f0:c9:75:b9:ac:33:9c:80:
                    2f:5b:29:6d:c7:21:b6:e0:1b:6a:e5:9c:50:16:34:
                    92:c0:95:71:06:96:4a:65:8a:56:29:6a:f7:d4:7a:
                    93:f8:21:8e:cb:09:56:db:1a:80:d3:28:45:4b:e8:
                    59:b4:a5:0c:ac:ce:68:5f:46:0c:ee:2c:c2:06:43:
                    8e:68:7d:74:80:f6:cf:7f:d3:95:5e:45:af:b6:a2:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4A:91:A7:38:5C:4A:87:E0:35:2C:A0:57:FE:61:3B:7C:56:B8:FB
            X509v3 Authority Key Identifier:
                keyid:1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:dc:17:82:4f:dc:43:7e:e3:a4:57:8e:59:28:bb:c2:e1:
         b8:ae:cb:25:1c:c2:8b:65:c7:59:34:a6:8f:90:82:84:6f:cc:
         64:65:e8:4a:4b:b3:53:09:51:e8:c5:4d:05:61:1f:92:8d:f7:
         5c:2f:d9:be:cd:a2:10:51:75:00:0a:14:d5:04:36:ab:0a:0b:
         86:e7:84:44:f6:fe:1f:44:88:0d:50:8f:5f:36:c7:20:17:47:
         35:d2:e1:7b:eb:6c:86:ec:8d:ec:cb:a9:cf:50:8d:9b:0e:71:
         94:f4:44:1f:da:80:98:31:06:cf:63:78:e3:51:cd:3d:a2:6e:
         9c:b1:83:b9:0a:75:07:3d:75:91:06:fb:d9:73:5d:6a:4d:dd:
         9b:cc:8c:c0:bb:77:4c:fa:1e:d5:01:9e:82:91:f2:f1:e7:28:
         2a:56:b5:40:41:3c:25:3a:c6:7a:ea:5e:9c:eb:0e:bc:36:13:
         36:52:83:09:44:3c:ae:90:45:17:e0:72:15:34:58:f3:93:b4:
         30:0c:1c:fd:be:28:e8:25:db:79:5f:95:41:f6:1b:bb:85:98:
         09:f7:99:3f:24:29:18:65:37:f0:c7:4a:e1:9b:3d:07:1a:60:
         60:ea:4a:6a:39:cc:ad:90:b3:1c:68:cb:56:b0:89:52:88:06:
         5d:cb:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:57 2025 by rpki-client