Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.mft
File:                     A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.mft (raw, json)
Hash identifier:          hs+enD4HHSgDXloNWki3EuNtVIq69R51QlGCyfMKM7k=
Subject key identifier:   16:97:65:03:9C:E8:9E:E2:86:43:77:FC:19:D5:B8:C6:5D:10:0E:D1
Authority key identifier: A8:FC:27:8A:9D:F8:FB:85:83:D4:E2:45:CE:C5:08:39:A8:C8:9E:E6
Certificate issuer:       /CN=A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6
Certificate serial:       58F388BA75D44372807051477E5D0BBC18EE6521
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.mft
Manifest number:          22
Signing time:             Tue 14 Jan 2025 01:01:55 +0000
Manifest this update:     Tue 14 Jan 2025 00:56:55 +0000
Manifest next update:     Wed 15 Jan 2025 01:04:55 +0000
Files and hashes:         1: 34352e3139312e3132362e302f32332d3233203d3e20323639363731.roa (hash: VT0heoxNDqR0pwlnkPBnOfPz5ahmkqcpAQpBNMXWqBk=)
                          2: 323830343a363832343a3a2f33322d3332203d3e20323639363731.roa (hash: lUgcYiHvjBYmpDXXCpCqeWV+dK9viXwAoiyv87Z0mhQ=)
                          3: 323830343a363832343a383030303a3a2f33332d3333203d3e20323639363731.roa (hash: 2u3YN0gRqpz0sJqciNUOJ5Op14/iDFcVbcoW/KoJNXI=)
                          4: A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.crl (hash: TlpltkA33ym79eHfaC4NgxhuSEvKls4Ko08kAvJ9CHI=)
                          5: 34352e3139312e3132342e302f32322d3232203d3e20323639363731.roa (hash: 2Pk75eJnIcp7k3DOIWOdYR7ycuqgpXOIu7SqkHnaEtE=)
                          6: 323830343a363832343a3a2f33332d3333203d3e20323639363731.roa (hash: Vwuc93CL32dGIRqHOmNM+xqMhWnZH7TUDLB68qes81Y=)
                          7: 34352e3139312e3132342e302f32332d3233203d3e20323639363731.roa (hash: OEexmrN15KCnPM8RqVvUVyf06pZwDXZgjyAJmYxdIYE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f3:88:ba:75:d4:43:72:80:70:51:47:7e:5d:0b:bc:18:ee:65:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6
        Validity
            Not Before: Jan 14 00:56:55 2025 GMT
            Not After : Jan 15 01:04:55 2025 GMT
        Subject: CN=169765039CE89EE2864377FC19D5B8C65D100ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:ce:16:ff:0f:b6:1c:e5:78:99:bb:8d:fa:
                    73:3e:d8:a1:21:a9:12:e6:87:03:df:92:e0:99:49:
                    33:c4:01:61:b8:96:d1:74:e7:a5:30:0f:3d:1e:c1:
                    75:b3:76:ee:0c:be:fe:11:44:24:59:0f:45:df:81:
                    4c:02:30:4b:00:7c:dc:73:4e:45:cf:99:e0:18:ae:
                    e0:6f:32:c6:b0:8e:36:bd:65:47:ad:65:28:f5:c1:
                    12:e2:2b:15:e7:cf:36:e2:65:78:d0:08:49:2d:bd:
                    a0:63:5c:5c:56:02:07:1e:68:fb:06:f7:fd:1c:a6:
                    aa:64:03:9e:9b:6c:34:ee:6f:48:3d:7a:bd:4b:69:
                    ac:72:f1:ca:4f:94:27:08:a4:47:72:05:d0:75:2c:
                    b8:38:e0:ba:40:23:cf:ea:ec:c2:60:04:29:a7:81:
                    aa:23:72:da:0a:66:2b:4f:34:f8:60:9d:9f:02:a0:
                    6a:6d:be:e3:cf:43:81:4d:31:73:4f:ba:0f:bc:94:
                    96:62:23:8c:a8:74:33:26:4c:4b:5d:86:84:4c:c7:
                    7c:d8:0b:e1:28:13:90:49:60:c1:01:95:ef:e5:1c:
                    1b:d1:da:35:04:46:2d:1a:73:cd:85:3a:b1:ff:65:
                    23:43:88:5c:bb:2b:75:14:92:3f:57:a1:0d:c1:95:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:97:65:03:9C:E8:9E:E2:86:43:77:FC:19:D5:B8:C6:5D:10:0E:D1
            X509v3 Authority Key Identifier:
                keyid:A8:FC:27:8A:9D:F8:FB:85:83:D4:E2:45:CE:C5:08:39:A8:C8:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/A8FC278A9DF8FB8583D4E245CEC50839A8C89EE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:f2:a7:d3:90:0a:26:12:01:24:ee:18:94:4f:d1:48:63:d6:
         53:08:a8:40:c7:55:58:04:c0:a9:cf:96:62:dd:e6:a7:ae:ae:
         e9:73:9a:5b:11:91:30:1c:d0:8e:79:bc:a0:2f:db:32:b6:09:
         0a:e1:0b:01:93:de:69:c3:64:83:be:8d:75:ca:ba:71:c6:a2:
         ae:b8:c9:1d:b3:74:51:a7:ae:fe:f1:b5:23:b7:20:48:ac:6d:
         ec:93:52:57:58:1f:6e:ac:c4:83:81:2f:13:61:37:db:22:19:
         05:cd:de:d4:a7:41:9c:d4:08:46:5b:74:8b:b1:73:f5:fa:5c:
         a1:12:52:03:b0:57:79:c6:de:82:8e:d8:34:7f:0c:bc:f2:10:
         5e:39:66:1d:f2:64:65:1b:1c:cf:6e:a7:17:6c:7d:2d:77:ff:
         a8:f7:48:82:6b:35:d1:93:6f:09:95:21:ea:60:4d:20:cf:bb:
         59:62:14:c3:6f:82:8a:bc:2a:8f:07:8d:9d:ea:b2:6d:17:a8:
         c8:a9:75:33:b6:eb:a7:bd:50:09:3b:6a:20:51:b8:8a:40:0d:
         1c:94:6e:1e:be:8e:ff:fe:42:e9:a2:2b:df:b6:fc:69:c7:01:
         8b:6c:7c:9c:80:cf:fb:b0:9e:55:a4:0e:07:da:59:96:3c:8f:
         7c:f0:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:52:13 2025 by rpki-client