Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
File:                     1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft (raw, json)
Hash identifier:          YZctJrjNyKeXkRGvZcm/1t/KDlhtiMgEfQFTWhwspxY=
Subject key identifier:   88:3C:18:FB:CD:96:E8:47:15:28:FC:30:D8:04:DB:15:9F:12:73:79
Authority key identifier: 1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC
Certificate issuer:       /CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
Certificate serial:       5722CFA5C0C9DCB30FA906D2CC3AA1CA2ACE2B19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
Manifest number:          01E1
Signing time:             Fri 28 Mar 2025 22:19:42 +0000
Manifest this update:     Fri 28 Mar 2025 22:14:42 +0000
Manifest next update:     Sun 30 Mar 2025 00:27:42 +0000
Files and hashes:         1: 1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl (hash: rN+NNo/E2Bwb116OapLoOpz04WCL6l4bJzLHrQO+fTw=)
                          2: 323830343a316262633a3a2f33322d313238203d3e203631373436.roa (hash: zIbE1gzb4KL2dR6A5Igy6RwE0MNboMRQfmyp14gydBE=)
                          3: 3133312e3130302e33322e302f32322d3332203d3e203631373436.roa (hash: orFF+TutPb6kUNSwkmSiLQ0+Jf7+cizfKvfpGz1TEqE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:22:cf:a5:c0:c9:dc:b3:0f:a9:06:d2:cc:3a:a1:ca:2a:ce:2b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
        Validity
            Not Before: Mar 28 22:14:42 2025 GMT
            Not After : Mar 30 00:27:42 2025 GMT
        Subject: CN=883C18FBCD96E8471528FC30D804DB159F127379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:1f:a7:44:61:5b:c3:aa:d4:e7:96:1c:73:
                    85:c8:2f:f6:86:0c:13:be:97:5f:7c:ea:36:9b:02:
                    35:2a:9d:79:e0:32:30:71:64:12:04:61:23:83:c3:
                    d8:83:f0:d1:de:2b:27:12:6a:d5:f3:ba:06:a8:f9:
                    29:8d:1c:c0:f4:7c:a1:cb:05:fa:27:d6:3a:1e:63:
                    80:45:3b:d3:cb:09:56:38:de:ce:80:e5:c6:78:d2:
                    e2:db:e1:83:af:45:4a:35:26:3f:dd:75:c0:3e:9c:
                    bb:ca:08:85:73:67:7f:2d:19:b8:44:ee:fe:c6:3d:
                    16:0c:ee:1c:e9:d9:45:67:37:f4:d2:5e:03:fa:ea:
                    a0:1a:f7:c5:5e:fd:2c:bc:4b:d7:d8:c7:70:5e:63:
                    41:c3:bd:69:00:57:e3:06:d5:c0:db:ef:cc:c0:91:
                    e5:d3:31:97:0b:84:12:48:25:cd:50:c7:c6:3b:c6:
                    0f:eb:14:16:a9:0c:59:3e:20:4e:f0:1d:ec:a2:3a:
                    ed:6f:fa:bf:10:c6:28:de:20:b4:d0:37:c7:94:73:
                    fb:f5:8d:e8:75:55:b2:51:83:4e:c8:92:15:4c:42:
                    0c:90:6e:6e:23:4c:e6:c5:30:fa:40:fb:98:39:bf:
                    61:6f:fb:ce:8e:3e:f9:f2:86:f0:af:8b:c3:ea:b3:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3C:18:FB:CD:96:E8:47:15:28:FC:30:D8:04:DB:15:9F:12:73:79
            X509v3 Authority Key Identifier:
                keyid:1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:65:05:20:17:de:8b:27:1c:dc:e1:1e:87:4b:4a:51:eb:df:
         fd:c3:7b:0f:5f:f0:42:1b:34:35:1e:b0:ab:85:ec:84:d7:4d:
         d5:34:c4:79:10:02:79:da:1d:af:4e:27:3a:53:ad:8b:a6:c1:
         66:15:33:d6:b5:71:b8:0d:0e:2f:c6:8a:03:b8:06:a5:48:17:
         76:bd:26:c8:57:21:3d:1e:e7:6f:7f:e0:e8:a2:7c:64:71:7a:
         75:c1:7d:7f:8d:93:cf:88:8e:53:56:e3:d7:f1:71:7b:c2:c0:
         5b:11:ce:98:40:7f:e3:41:02:77:64:46:e2:21:a7:1b:65:42:
         b8:f3:05:d4:74:a0:94:9c:c9:12:90:d8:79:bb:33:26:fb:69:
         1e:36:de:b7:6f:ad:e9:fe:07:71:47:0f:09:5c:ab:6d:3d:25:
         07:2f:e6:0b:c8:c4:58:55:43:2a:fe:af:c8:e3:68:d1:11:e7:
         b2:27:74:28:3a:56:a6:1c:8a:bf:bb:07:d4:3d:32:48:9c:61:
         8e:5d:52:7b:a6:5d:4a:8e:db:83:51:d9:64:eb:6d:f0:71:43:
         98:5e:db:e5:35:a8:8e:53:c4:60:5e:1d:8f:96:77:5b:15:1b:
         f7:63:49:26:64:2b:a4:f7:8f:7c:3f:55:34:86:d7:41:a5:e6:
         a8:bd:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:16:49 2025 by rpki-client