Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.mft
File:                     5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.mft (raw, json)
Hash identifier:          kKXapus1goKnGKYcQ1fnsdFLwkyfSdziVQu9G+L67oQ=
Subject key identifier:   D9:F5:44:AF:B5:59:6A:A4:96:15:DC:05:91:7F:64:B9:92:10:46:83
Authority key identifier: 52:29:C7:B7:5F:B4:FC:E3:85:3F:8B:9C:79:AE:67:49:16:8F:4D:E2
Certificate issuer:       /CN=5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2
Certificate serial:       0DFC512D32AAC58C5E07AE286E7CF3824242D1E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.mft
Manifest number:          FF
Signing time:             Wed 08 Jan 2025 02:43:17 +0000
Manifest this update:     Wed 08 Jan 2025 02:38:17 +0000
Manifest next update:     Thu 09 Jan 2025 05:13:17 +0000
Files and hashes:         1: 3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa (hash: eX2OVGWHt73r1fdwv1GGdeChX4zwj6kmVxYn+5dbxi4=)
                          2: 3137372e37352e33322e302f32312d3234203d3e20323632383038.roa (hash: VCSE6vUcR/9/ayOQ65IkY7DghYqWfHjlblXcUwIyP7E=)
                          3: 3138392e39302e3131322e302f32302d3234203d3e20323632383038.roa (hash: dNRE1LiklOEuM6VTsVR0I5rVg0e7iipbaM3cH85gb2s=)
                          4: 5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.crl (hash: MOn41tp/9JxQmokdriE2ZQI/OO+ekPChNcbpsXVjzCk=)
                          5: 3137372e33372e3131322e302f32302d3234203d3e20323632383038.roa (hash: 20ivw3cQpcxuysNR2znigLIQVIxRJby6Fyfloj/8BI8=)
                          6: 323830343a313336383a3a2f33322d3438203d3e20323632383038.roa (hash: +sQx7dgxQSC43Gz37Mb/5q+bout5P7IpmPmgaI8tzp0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fc:51:2d:32:aa:c5:8c:5e:07:ae:28:6e:7c:f3:82:42:42:d1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2
        Validity
            Not Before: Jan  8 02:38:17 2025 GMT
            Not After : Jan  9 05:13:17 2025 GMT
        Subject: CN=D9F544AFB5596AA49615DC05917F64B992104683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:83:e5:39:9e:e8:97:8c:49:0c:a8:96:3f:
                    0b:5a:33:45:f2:6e:40:c3:ae:69:5f:9c:8a:c3:fa:
                    5e:d0:20:79:31:b4:bb:01:e2:a9:59:06:77:35:60:
                    ff:78:0e:cb:15:48:ec:e9:76:54:03:fe:18:22:cd:
                    60:ef:6a:fc:f5:de:56:d8:d7:cc:2c:bf:0e:75:3e:
                    9a:eb:a3:c2:3a:29:8a:59:ea:b7:6b:d6:93:4f:ae:
                    12:a8:c8:61:8f:d0:3e:f0:8f:0f:12:4e:7e:0b:5f:
                    ec:c2:c2:4c:00:db:65:92:12:18:61:ef:f3:e7:29:
                    0d:c0:7f:ae:c8:8c:c4:f3:38:b9:0c:1e:bf:45:ef:
                    8d:b4:3d:75:83:51:43:38:14:70:83:0f:fe:6a:2f:
                    3d:8e:e0:f4:62:04:07:64:3f:5b:8c:7d:3a:ee:3e:
                    7c:e4:51:6f:73:3c:fd:8c:f7:4b:eb:41:98:4a:6d:
                    2f:d6:2d:7c:71:58:bc:ea:94:49:13:c0:78:07:da:
                    68:27:73:7e:79:74:11:8a:15:4d:78:db:7d:78:8b:
                    59:3e:5f:e1:07:52:31:6c:48:67:69:7f:e0:1b:2b:
                    1c:9f:40:8f:3b:2f:36:1b:c0:d5:73:f4:5b:e2:92:
                    d8:3a:35:a2:f7:92:50:98:a0:1a:cd:e1:6a:84:5c:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F5:44:AF:B5:59:6A:A4:96:15:DC:05:91:7F:64:B9:92:10:46:83
            X509v3 Authority Key Identifier:
                keyid:52:29:C7:B7:5F:B4:FC:E3:85:3F:8B:9C:79:AE:67:49:16:8F:4D:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d7:b4:13:20:7b:7e:0c:d7:6b:44:04:78:48:73:4a:c0:73:
         be:d2:c6:05:b6:35:86:5d:37:d4:1f:5f:6c:fb:20:71:50:b7:
         02:80:9b:5a:26:d2:69:b5:33:eb:e7:04:21:2e:13:52:02:6d:
         6d:cc:6e:ab:42:bc:16:70:7c:db:e0:f5:d0:d7:22:fa:18:aa:
         0f:8c:bf:07:60:bb:a0:45:35:fd:77:8e:ef:12:28:e8:fe:39:
         fb:0f:44:c0:6f:d1:1d:9e:b8:76:67:05:6a:ec:aa:5c:b2:93:
         dd:fa:c4:66:5e:4b:72:ff:35:0c:72:da:00:b5:7c:66:a7:f1:
         e8:3a:2d:9d:83:59:be:82:77:8f:8e:65:9d:9e:3d:f7:d6:ef:
         1d:e8:ec:66:54:49:e3:cd:ca:73:84:ca:b7:ca:d9:57:42:98:
         53:36:be:75:be:00:47:27:34:75:bd:bf:84:63:e1:54:c7:bc:
         4f:86:18:15:48:12:59:e6:29:c4:7c:a7:af:5b:8e:d3:3d:f1:
         b0:9c:ca:f2:1d:a0:32:c5:ef:5d:d5:80:11:32:05:97:26:58:
         3a:14:d2:7c:d2:40:c5:cf:2f:a4:c7:5c:87:b3:ac:2f:fd:12:
         fa:11:b7:99:a7:f3:99:b7:fa:65:75:7c:62:6a:45:2f:e1:3a:
         a0:11:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:37:24 2025 by rpki-client