Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.mft
File:                     19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.mft (raw, json)
Hash identifier:          xLNVKMOEWb+rr1u7Yt3EGuJ6DET81cdmCNzz7+Xdx0A=
Subject key identifier:   AF:C0:C1:81:40:CA:14:44:45:56:01:BD:37:41:D6:74:38:5E:9E:3F
Authority key identifier: 19:A7:33:DE:5B:44:DD:36:F1:A8:6E:3C:04:4D:C5:03:6B:AD:7D:00
Certificate issuer:       /CN=19A733DE5B44DD36F1A86E3C044DC5036BAD7D00
Certificate serial:       4B0C47D330599ECB725692030D159630B73B7207
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.mft
Manifest number:          73
Signing time:             Fri 28 Mar 2025 21:01:06 +0000
Manifest this update:     Fri 28 Mar 2025 20:56:06 +0000
Manifest next update:     Sat 29 Mar 2025 22:47:06 +0000
Files and hashes:         1: 3137372e32302e3137362e302f32312d3332203d3e20323633303335.roa (hash: CQq54uRWk8thIOQqwEr/glsvFIlqQWq2eEufbiC4nTE=)
                          2: 19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.crl (hash: YiOM1Kzr2wop6eyQJKNlDvrHnBHx4Cn9d4UdRrYYS3I=)
                          3: 323830343a6133383a3a2f33322d313238203d3e20323633303335.roa (hash: cEmT6jxAFYTI46kr/sA8i8czyQVKjZQ5u2lSpq3iTWQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:47:d3:30:59:9e:cb:72:56:92:03:0d:15:96:30:b7:3b:72:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A733DE5B44DD36F1A86E3C044DC5036BAD7D00
        Validity
            Not Before: Mar 28 20:56:06 2025 GMT
            Not After : Mar 29 22:47:06 2025 GMT
        Subject: CN=AFC0C18140CA1444455601BD3741D674385E9E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:be:b7:4c:e6:1e:f5:46:f4:f7:3d:3d:a3:
                    80:1e:02:a4:f4:1c:b8:48:55:3d:ec:d6:c1:39:61:
                    ae:ec:3c:01:f4:2c:47:6c:91:0e:9d:1e:c2:97:ea:
                    d4:b3:f7:98:87:3a:64:14:de:3b:c8:16:38:1b:d2:
                    93:16:ab:df:eb:96:c7:50:7f:75:f8:9e:e8:7e:c1:
                    ec:48:5b:8f:fa:4c:3e:34:74:9b:51:9f:79:db:bb:
                    60:cc:2a:ed:d0:2a:f0:08:cb:8f:6f:70:98:fe:06:
                    0a:c7:04:ba:e5:a7:14:71:46:f9:d7:90:06:53:a0:
                    d7:f1:24:36:23:4d:81:90:13:66:f5:9a:3e:0c:85:
                    41:e5:38:1b:cf:32:c3:0f:f8:9e:29:e3:30:9c:73:
                    d0:80:29:76:38:43:0e:bc:33:85:a1:71:23:4f:1f:
                    fb:c5:0b:79:84:96:e8:ea:c4:47:90:06:83:f9:e6:
                    17:f7:9e:4c:1e:17:8c:ff:32:1a:b5:d2:ab:43:31:
                    48:1c:c1:fb:d5:cb:3a:06:c6:fc:c5:44:44:ad:4f:
                    c6:36:36:50:d4:90:47:9d:de:75:d7:9b:9e:d6:5b:
                    d7:8f:12:b4:f9:83:cb:e3:a5:42:94:c8:80:1a:cf:
                    76:33:35:9b:82:36:b3:14:98:1f:f0:56:b5:79:0b:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C0:C1:81:40:CA:14:44:45:56:01:BD:37:41:D6:74:38:5E:9E:3F
            X509v3 Authority Key Identifier:
                keyid:19:A7:33:DE:5B:44:DD:36:F1:A8:6E:3C:04:4D:C5:03:6B:AD:7D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:46:be:7f:36:27:2a:54:fb:e2:9a:93:e6:e7:18:05:32:fa:
         13:9a:fb:ba:2f:f7:75:50:44:82:b2:95:bf:f7:8a:e6:55:8d:
         cd:f1:78:a0:de:3f:c0:cc:2d:04:2d:56:27:31:f2:2f:6f:bd:
         66:16:26:fd:65:5c:6c:05:c1:c0:f7:eb:5c:a4:90:ae:9b:ec:
         c4:f9:97:a2:0a:a3:2d:46:f1:6c:88:e5:ab:45:cc:15:e8:ed:
         73:ea:7c:a4:b3:ae:6b:b4:1e:eb:e3:b2:01:bc:a3:52:0d:72:
         3c:b7:db:32:c5:26:88:32:55:c8:5f:6d:fa:c6:fc:55:25:4b:
         58:24:43:f6:93:85:96:4c:80:f4:f0:46:f9:e6:50:48:9e:b5:
         01:b1:a8:f1:e8:38:98:e6:41:9a:5f:5f:b4:98:19:f4:77:73:
         f2:e7:f6:2e:84:1f:ea:9a:4c:c4:66:a9:f3:98:d6:b7:2a:07:
         81:db:4d:3a:52:68:e8:a0:04:cd:6a:92:43:e4:8e:83:a3:b6:
         8f:01:89:5d:92:2c:c9:7f:f2:5e:41:eb:df:2c:33:2f:ce:22:
         8f:3a:ee:c0:fc:cf:f1:d1:30:64:6c:99:1a:27:6b:4e:9e:e4:
         00:5b:2d:f0:4d:45:50:a3:65:fc:43:50:cf:6b:1d:74:99:4a:
         d0:cf:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:13 2025 by rpki-client