Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/3522D792545A0E921327122C3F67A5F8EC6EB2AE.mft
File:                     3522D792545A0E921327122C3F67A5F8EC6EB2AE.mft (raw, json)
Hash identifier:          cQwmlWm7lNzwLxrBVpjG+vH0Jgv3OqOlVnO1UDKFjIM=
Subject key identifier:   0D:57:44:20:41:E7:35:BA:93:BE:97:90:B0:5C:F5:31:07:3A:68:F4
Authority key identifier: 35:22:D7:92:54:5A:0E:92:13:27:12:2C:3F:67:A5:F8:EC:6E:B2:AE
Certificate issuer:       /CN=3522D792545A0E921327122C3F67A5F8EC6EB2AE
Certificate serial:       39B05846998AA9F7A4C2FBA3C9943038FD51F6BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3522D792545A0E921327122C3F67A5F8EC6EB2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/3522D792545A0E921327122C3F67A5F8EC6EB2AE.mft
Manifest number:          43
Signing time:             Wed 24 Jul 2024 20:15:35 +0000
Manifest this update:     Wed 24 Jul 2024 20:10:35 +0000
Manifest next update:     Thu 25 Jul 2024 22:04:35 +0000
Files and hashes:         1: 323830343a386665303a3a2f34312d3431203d3e20323733353138.roa (hash: nc2+h8rPuttOU7OEppNNANfhnSilY2gb/agOpo5rNr8=)
                          2: 323830343a386665303a3a2f33322d3332203d3e20323733353138.roa (hash: T8nTD5tSWTj3uHHd5/8NJTlVGxCUIcqg3VBj/rjCzhU=)
                          3: 3522D792545A0E921327122C3F67A5F8EC6EB2AE.crl (hash: HAmbJ/Meqm8OHBmMUmph+4rAWjrhtcBINY8t+SHYHxI=)
                          4: 323830343a386665303a3a2f33332d3333203d3e20323733353138.roa (hash: qD+2H+BwRP8HU9ulGFL7LdEq6uZf4YzfTsf2/bNdee4=)
                          5: 323830343a386665303a383030303a3a2f33332d3333203d3e20323733353138.roa (hash: e1GYMIbWwAZ3E6O7pnTh8SVZAtr4l7gjKE/PKnXpeeQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b0:58:46:99:8a:a9:f7:a4:c2:fb:a3:c9:94:30:38:fd:51:f6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3522D792545A0E921327122C3F67A5F8EC6EB2AE
        Validity
            Not Before: Jul 24 20:10:35 2024 GMT
            Not After : Jul 25 22:04:35 2024 GMT
        Subject: CN=0D57442041E735BA93BE9790B05CF531073A68F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:40:a6:49:27:28:31:a8:52:b9:37:69:58:
                    f0:e9:44:d5:ff:7f:1e:87:6c:18:63:2b:54:a9:fa:
                    8e:e0:f0:62:fb:64:77:7b:c2:2c:6b:5b:b0:da:0a:
                    df:dc:63:5c:82:a6:8c:bb:1d:c4:fc:65:fb:24:b2:
                    9b:3a:90:59:bc:74:5a:cc:8a:10:cc:c5:95:d3:6c:
                    ec:80:65:95:7e:9b:63:bf:17:57:de:9d:12:91:68:
                    5d:5b:33:6d:f6:0b:37:df:c3:70:a4:4c:2a:6a:49:
                    b6:da:04:c3:1e:a8:ff:4e:9a:41:6d:1e:1b:95:f1:
                    00:69:8b:e9:ee:50:f2:fa:39:fc:09:be:d0:df:ff:
                    87:ac:78:6a:59:05:3f:19:66:9c:8f:07:03:d2:9b:
                    03:21:9c:79:0a:cf:2d:28:23:a0:2e:44:dd:36:d5:
                    d6:55:84:53:5a:14:b1:97:3a:13:01:16:f6:30:00:
                    c4:95:59:8b:8c:94:8c:17:60:64:b9:cd:4b:a2:73:
                    1c:7c:be:a6:48:07:ac:fd:c9:26:60:94:ba:49:f9:
                    ea:eb:5c:2b:f6:15:8b:70:a4:8b:67:d2:c9:65:f5:
                    ce:7f:f1:4c:46:23:15:0d:96:99:be:75:71:f4:35:
                    9a:88:6f:a7:a7:65:ed:01:43:b4:37:eb:33:ec:27:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:44:20:41:E7:35:BA:93:BE:97:90:B0:5C:F5:31:07:3A:68:F4
            X509v3 Authority Key Identifier:
                keyid:35:22:D7:92:54:5A:0E:92:13:27:12:2C:3F:67:A5:F8:EC:6E:B2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/3522D792545A0E921327122C3F67A5F8EC6EB2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3522D792545A0E921327122C3F67A5F8EC6EB2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZo8hJajVcxPLYjvu6CZ8pWQBBfgxh7wrMXHLTuJF3GV/0/3522D792545A0E921327122C3F67A5F8EC6EB2AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:0e:74:fc:dd:b2:6c:33:9c:5a:ec:00:30:c8:1c:00:77:
         a8:ee:18:5d:20:11:01:a6:ca:69:e9:92:af:1f:81:1a:7c:eb:
         5c:45:5e:c4:15:4c:46:b4:1e:5f:ad:fe:82:c3:1e:6c:9e:f2:
         35:e8:0d:af:b9:23:bf:ed:a3:bf:5e:90:2f:6a:10:10:52:1a:
         b0:f4:f1:36:e1:11:f0:1d:fd:fa:52:9f:b9:aa:18:4f:cd:7b:
         d5:a3:90:ac:55:1d:ac:92:c5:fa:2e:5d:70:7d:23:98:c2:79:
         01:5a:30:a6:74:27:53:b2:6f:f1:93:b9:e8:06:f6:d1:29:94:
         f9:3a:ef:fa:b6:3f:d4:4b:6a:53:d0:8d:28:54:2b:7d:b4:e4:
         1f:00:69:2e:ee:ea:79:56:d1:22:a0:db:c1:9e:cf:3d:7c:1f:
         d2:44:1e:d0:5c:4f:f6:cc:b5:48:5f:3c:af:04:2b:02:e6:f5:
         0d:25:d3:6e:98:69:6f:ec:7f:71:9f:fb:cf:67:e7:dc:0d:90:
         7c:99:44:f1:1f:da:13:26:2c:dd:40:10:1e:93:c6:a2:aa:d2:
         c2:19:28:7e:84:9a:06:17:61:75:f6:15:3f:b6:e9:50:96:2f:
         a2:c9:4a:d1:88:cd:4e:55:37:d8:be:59:8d:a8:df:af:9c:52:
         79:b7:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:35:38 2025 by rpki-client