Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.mft
File:                     5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.mft (raw, json)
Hash identifier:          /P2FVDBThHxiBmWfIONsQvV+GeZ8VIbODlo7G7vxXMs=
Subject key identifier:   34:23:40:68:A4:C9:47:76:96:90:33:5A:30:F7:CE:69:17:B2:34:FF
Authority key identifier: 5B:7E:15:31:CE:C2:54:26:5D:57:4B:E0:F0:DB:E2:82:5A:BB:D6:D0
Certificate issuer:       /CN=5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0
Certificate serial:       1A4EE60A41EE8FB8F5BB4490D084F8F9815D413F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.mft
Manifest number:          E1
Signing time:             Sun 09 Mar 2025 20:11:04 +0000
Manifest this update:     Sun 09 Mar 2025 20:06:04 +0000
Manifest next update:     Mon 10 Mar 2025 22:31:04 +0000
Files and hashes:         1: 5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.crl (hash: E/phL4WnWKWxdNCrbzAZo0g++ombaZtOxL1vkHo7V3Q=)
                          2: 323830343a373430303a3a2f33322d3438203d3e20323730393531.roa (hash: c+LsLIcUXndH6nweA4766GFo14dIA6ZtG7lsr9WJrKQ=)
                          3: 3137372e33362e36382e302f32322d3234203d3e20323730393531.roa (hash: c4+pvIPHISOcpC4UCmMa+0w+eZR/hRPZoKvkl6I4mCI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4e:e6:0a:41:ee:8f:b8:f5:bb:44:90:d0:84:f8:f9:81:5d:41:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0
        Validity
            Not Before: Mar  9 20:06:04 2025 GMT
            Not After : Mar 10 22:31:04 2025 GMT
        Subject: CN=34234068A4C947769690335A30F7CE6917B234FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:a6:23:0f:21:a1:97:e1:fc:a4:b7:79:51:
                    4c:89:7c:97:66:cb:ee:ec:c9:af:cb:76:cc:d8:da:
                    ec:d6:23:14:25:05:f7:5f:f9:7e:c4:db:77:38:4f:
                    4c:fd:bf:13:ab:9b:2e:f8:bc:55:80:86:12:cd:37:
                    26:b2:e6:55:47:20:ca:ad:16:8a:8d:d6:40:c3:32:
                    4e:43:1c:49:76:f7:5e:ff:d0:78:49:ae:02:97:9a:
                    e2:0e:56:42:cc:92:6d:c0:b5:23:3b:92:ec:64:be:
                    3e:08:54:38:ef:fe:b4:90:cf:a0:12:aa:e3:98:6d:
                    19:d2:8b:dd:f1:4a:ec:f5:a2:97:c7:a8:e0:aa:0a:
                    41:c0:2c:cb:b6:17:6c:e7:a8:a8:ea:0d:9e:86:43:
                    e7:ca:76:36:7f:79:33:c9:8d:a1:6b:55:54:86:63:
                    6e:90:50:70:7a:95:5a:e1:2a:4f:00:6a:a6:a0:db:
                    43:34:74:30:d2:75:9b:da:53:bf:81:e0:1f:ea:b1:
                    7f:d2:fc:3b:08:ff:d9:15:f0:d6:4c:f5:61:0a:64:
                    3b:70:51:7b:77:b8:c5:29:5a:ad:c4:1f:1a:b1:6a:
                    6d:37:1b:ff:f9:a4:b2:4c:b2:37:75:1c:d8:85:78:
                    97:cd:f7:73:e6:58:c3:b5:24:b4:30:51:ef:b0:44:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:40:68:A4:C9:47:76:96:90:33:5A:30:F7:CE:69:17:B2:34:FF
            X509v3 Authority Key Identifier:
                keyid:5B:7E:15:31:CE:C2:54:26:5D:57:4B:E0:F0:DB:E2:82:5A:BB:D6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:e9:a3:23:0a:24:34:6a:24:57:a8:0b:37:f8:a1:fc:f7:
         cc:b7:3d:c3:75:8f:c7:f2:9d:4d:67:f9:fa:38:a4:52:48:35:
         72:cb:ed:b3:b3:b7:cd:c5:72:24:00:0d:0b:9f:d9:7c:a5:9f:
         02:99:60:b4:65:6f:68:ba:ae:77:3f:38:93:85:d5:aa:1f:ce:
         53:0c:2e:d6:73:61:8b:dd:f5:f6:f4:ef:34:d8:d7:1f:79:92:
         5b:39:02:89:7f:b3:f2:be:6a:e0:ec:96:40:21:30:b1:1e:fa:
         f2:ab:99:59:d8:81:1f:49:f0:2e:ae:cf:a8:a9:6d:c8:95:68:
         00:fe:ff:09:e9:57:6c:67:03:fb:8c:b4:36:d1:80:8e:c3:33:
         d2:8c:0b:f4:50:0e:14:ea:21:dc:32:b9:d3:af:aa:42:3b:71:
         ab:ae:26:e3:08:b5:6b:89:fe:3f:1c:29:e9:14:64:53:0e:d1:
         25:f1:af:5a:bb:98:9e:92:d7:74:11:61:e1:09:9b:46:29:58:
         2a:ca:42:7e:d8:4e:9c:61:bc:90:59:6c:5e:e3:39:b2:55:9e:
         bd:6c:54:50:65:2d:81:6a:0a:f8:97:26:13:c7:32:6e:ff:1c:
         c4:23:52:af:72:03:df:1a:76:79:66:2b:dd:40:a0:40:ea:80:
         dd:59:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----