Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.mft
File:                     9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.mft (raw, json)
Hash identifier:          TPe295myIQjUC6xbLixV8IC/Le378zVvI1L9lv9AZqs=
Subject key identifier:   0E:29:D9:5C:48:1A:36:97:0D:10:A1:D1:F7:E5:9A:46:A7:15:E5:A4
Authority key identifier: 91:31:EF:4D:B8:9B:41:21:0E:2B:A1:BD:8C:79:B4:1D:7A:FC:1F:E7
Certificate issuer:       /CN=9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7
Certificate serial:       19FABB0DDEBA4B1B993B3C73FB848DFC148419C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.mft
Manifest number:          32
Signing time:             Wed 15 Jan 2025 11:40:36 +0000
Manifest this update:     Wed 15 Jan 2025 11:35:36 +0000
Manifest next update:     Thu 16 Jan 2025 12:08:36 +0000
Files and hashes:         1: 323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (hash: 4LiNJXLNx0wi6ISjMoj2dDc0CgT064DGd7HJgP4CbcI=)
                          2: 9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.crl (hash: eSHFmrDJgCfTH9i0gqRNLfO9dKWo3bSgfpXAr3UJqrc=)
                          3: 3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (hash: 1jf7CjjbmrhIcRXxJjawx3s+liHIPkXVBvBEw6+JICk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fa:bb:0d:de:ba:4b:1b:99:3b:3c:73:fb:84:8d:fc:14:84:19:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7
        Validity
            Not Before: Jan 15 11:35:36 2025 GMT
            Not After : Jan 16 12:08:36 2025 GMT
        Subject: CN=0E29D95C481A36970D10A1D1F7E59A46A715E5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:00:50:5c:d5:44:97:2a:9a:5f:9d:93:3d:
                    94:01:8a:1c:4b:2c:6d:d3:f0:f9:76:be:b5:cb:32:
                    87:4b:32:26:81:d1:50:80:27:41:57:85:a4:98:59:
                    cb:70:34:89:2e:94:ee:67:c4:b7:76:5b:50:2f:9c:
                    93:82:58:64:7a:b8:c7:04:9e:a8:5f:07:a4:54:4e:
                    91:53:1d:4a:84:7b:cc:14:11:6b:2c:5a:cf:e6:14:
                    bb:c2:d1:66:35:91:1c:70:f8:f1:27:f5:2a:96:00:
                    6c:2d:5d:6d:43:57:0f:85:e6:b0:bb:6c:26:7e:db:
                    ef:80:88:74:02:6b:da:97:d6:39:13:00:81:ce:f9:
                    0d:23:28:47:fc:39:36:75:bd:95:75:48:30:55:3d:
                    f1:58:4f:a2:d7:b3:37:db:a5:fa:a6:6f:a9:f1:fb:
                    48:5c:5a:a4:0b:64:86:7e:43:9e:27:e5:fb:c8:c6:
                    e4:b8:92:c2:f1:2a:27:d3:7f:86:8d:f4:d5:d2:79:
                    f6:f7:7b:cd:f0:26:7d:db:f7:83:cf:18:b8:9a:d2:
                    b6:dd:36:3b:23:a1:5f:c9:fb:5a:96:7c:f9:32:ab:
                    14:c5:b7:df:d9:b6:d8:76:99:35:e2:05:ff:df:ba:
                    56:94:b2:63:c9:65:fc:d4:44:ae:af:34:50:76:a7:
                    f1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:D9:5C:48:1A:36:97:0D:10:A1:D1:F7:E5:9A:46:A7:15:E5:A4
            X509v3 Authority Key Identifier:
                keyid:91:31:EF:4D:B8:9B:41:21:0E:2B:A1:BD:8C:79:B4:1D:7A:FC:1F:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/9131EF4DB89B41210E2BA1BD8C79B41D7AFC1FE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:aa:c4:17:6e:75:9f:4a:d3:4c:70:18:71:a4:3e:42:d7:d2:
         2d:85:d6:63:16:75:6b:ed:c1:20:57:e9:17:74:47:1b:dd:52:
         07:16:1f:db:71:83:80:21:70:6c:62:e1:98:04:26:b8:b1:4a:
         ef:79:47:68:eb:02:42:60:10:84:8b:8b:82:7a:8c:db:f9:32:
         f2:7e:2c:51:ea:d3:13:41:9b:68:8f:3c:a8:0b:f6:72:10:68:
         e7:cf:58:04:c3:a8:d4:90:0f:4f:6f:ad:18:39:4f:28:bb:73:
         c1:e9:d8:55:73:38:9d:d2:85:78:8d:26:42:51:05:69:54:a8:
         4a:09:eb:f6:54:aa:0c:50:03:96:7d:d5:18:22:29:19:a8:6f:
         87:74:c9:32:e9:f2:32:4c:9c:20:54:82:2a:23:45:2d:5c:b6:
         1a:09:b8:04:85:d8:1f:03:a6:45:9c:68:46:bb:cd:fc:af:47:
         d1:2c:d1:02:00:75:bf:3e:e3:d9:6c:c8:07:ac:50:ae:39:1d:
         e4:fd:6e:60:29:52:a5:d3:15:13:33:ad:21:0a:ec:aa:ea:80:
         cb:d6:e5:2d:58:6a:e6:2a:7a:37:01:d2:fa:e4:4b:07:db:66:
         b1:53:3f:db:44:c5:24:8b:fe:8e:4a:46:36:73:bc:73:06:5d:
         b4:80:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:51 2025 by rpki-client