Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft
File:                     9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft (raw, json)
Hash identifier:          KaVYG17YVyv/MpIj6qrMi2g7W5/sjANe2iDQ8eO/9bE=
Subject key identifier:   33:94:C5:1C:75:9A:ED:9C:0E:DB:C4:DF:B7:B4:4A:54:26:5C:F4:DB
Authority key identifier: 9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B
Certificate issuer:       /CN=9BAF32552D40CE2A2F1A065983E6605B60B3A17B
Certificate serial:       36B35C71E7AD255046E40E1BA40E09F5E94849D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft
Manifest number:          017E
Signing time:             Wed 15 Jan 2025 16:03:18 +0000
Manifest this update:     Wed 15 Jan 2025 15:58:18 +0000
Manifest next update:     Thu 16 Jan 2025 16:42:18 +0000
Files and hashes:         1: 323830343a336238633a3a2f33322d313238203d3e20323636313536.roa (hash: jl1K4JHep2IBLXyf2RLFUVq0XBf1MeQ38/SAurk883s=)
                          2: 3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa (hash: q7aLt2Inw1Ne1cOD9ikfkm/HrCqcFP6PINfrl2PiL6I=)
                          3: 9BAF32552D40CE2A2F1A065983E6605B60B3A17B.crl (hash: 3GMlMzVkYNF7R4m6db5+bh4/BELQcowZrlTBZFSjjHM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b3:5c:71:e7:ad:25:50:46:e4:0e:1b:a4:0e:09:f5:e9:48:49:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAF32552D40CE2A2F1A065983E6605B60B3A17B
        Validity
            Not Before: Jan 15 15:58:18 2025 GMT
            Not After : Jan 16 16:42:18 2025 GMT
        Subject: CN=3394C51C759AED9C0EDBC4DFB7B44A54265CF4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:21:09:cb:07:4b:c5:29:5f:97:f2:b7:59:
                    a6:62:3b:87:1e:cc:cc:6f:bb:59:62:fd:c9:c9:b1:
                    b3:1d:4c:d5:70:56:74:81:ad:d4:3b:83:8d:7e:d6:
                    cb:76:58:09:e3:9d:57:54:41:d4:45:eb:11:31:cc:
                    fe:ab:60:b7:ba:14:8a:21:48:2c:49:c3:ea:c5:87:
                    a9:dd:e0:c7:63:a2:4f:6e:46:1d:57:39:90:b0:d6:
                    25:00:f2:b1:b3:80:93:6e:44:78:82:4b:39:72:a4:
                    1d:bb:a8:f9:cf:f0:8b:2a:2d:b5:38:1e:fc:47:9e:
                    e7:8b:89:8c:84:99:7b:18:cd:39:4d:9f:0b:cf:7b:
                    c8:16:53:09:ae:ea:c3:e9:69:21:e8:d5:c1:24:e9:
                    5c:45:a0:7a:8c:a9:a6:2d:f4:1d:59:8a:3f:84:05:
                    06:a4:9c:ab:b9:96:53:4d:27:65:f9:a0:bd:b0:98:
                    4a:98:bb:65:6b:0a:5e:85:f2:ac:29:b1:a2:c6:bb:
                    0b:8c:b0:91:78:91:f5:11:ab:8f:c2:60:70:b8:d7:
                    5f:50:0c:e2:68:3b:31:c9:9a:b8:4d:ea:e6:db:9e:
                    81:49:b9:ef:18:bb:6d:91:45:d8:94:7b:ed:fb:52:
                    da:55:6a:c0:b3:f3:38:a3:7d:24:b2:44:9c:82:36:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:94:C5:1C:75:9A:ED:9C:0E:DB:C4:DF:B7:B4:4A:54:26:5C:F4:DB
            X509v3 Authority Key Identifier:
                keyid:9B:AF:32:55:2D:40:CE:2A:2F:1A:06:59:83:E6:60:5B:60:B3:A1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/1/9BAF32552D40CE2A2F1A065983E6605B60B3A17B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:e3:4f:92:eb:e3:5f:ee:56:a3:89:c1:90:01:0d:40:b8:a8:
         ad:6b:bb:43:96:51:98:a0:68:20:67:7f:f4:74:7b:16:c8:24:
         f3:9a:38:cf:1e:01:72:59:ae:21:8d:ca:ee:48:da:81:0e:ba:
         1d:65:33:e5:c4:c5:cf:00:d3:a6:30:8a:21:dc:07:ae:ff:63:
         47:bd:d5:2f:4c:cb:c6:94:bb:cf:5f:19:53:fe:ae:37:14:2a:
         76:01:e6:0c:cc:23:ae:08:3d:9e:9e:02:7f:bc:47:61:f1:c1:
         06:e8:81:d4:c6:ae:ad:fe:fa:3f:df:40:a1:e9:73:f6:e9:33:
         bd:1b:65:3f:d1:97:00:7a:03:72:29:e5:86:91:ac:61:61:c2:
         25:39:b0:72:12:e4:1d:03:65:36:b0:8e:b5:c4:f9:3c:06:e0:
         30:07:65:0c:5f:c2:00:76:fd:9d:a4:2f:48:25:15:92:de:25:
         3e:64:66:6e:72:01:91:eb:85:56:df:5b:24:0d:ce:61:ef:23:
         a3:07:4c:e2:bb:4e:77:32:f2:b8:c1:45:d6:ff:c7:ee:6e:5e:
         b5:7b:8b:b4:3a:72:00:9d:e6:18:b1:b8:0e:3a:a1:70:14:d0:
         af:f2:d9:12:02:2d:88:0d:0f:d8:a0:90:fb:09:3a:00:a4:6f:
         82:39:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:51 2025 by rpki-client