Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft
File:                     52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft (raw, json)
Hash identifier:          ukQFDQojmdDDXNglIo/Rjjdn+ETOsm0IuBK8R5FBtbA=
Subject key identifier:   13:CC:2C:C9:70:A3:F2:57:71:FF:46:85:94:61:79:4D:96:21:3D:FF
Authority key identifier: 52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
Certificate issuer:       /CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Certificate serial:       22978B26B338B253F9986A7C54F8E15394552693
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft
Manifest number:          0D
Signing time:             Thu 20 Feb 2025 18:57:58 +0000
Manifest this update:     Thu 20 Feb 2025 18:52:58 +0000
Manifest next update:     Fri 21 Feb 2025 21:47:58 +0000
Files and hashes:         1: 34352e3233352e37342e302f32332d3233203d3e20323637343039.roa (hash: 3Fw+miy9x794pAsd6bg1VNJtZVS51gEs09kJ5uja93Q=)
                          2: 52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl (hash: kIv/tsUIq9tK3ZgRbbGT7jZtsULLjcQD5+RwDiJgNIo=)
                          3: 34352e3233352e37352e302f32342d3234203d3e20323637343039.roa (hash: vrRt8xhDLtQYNDhqrBDEzR/ICKrB/M5QAGyGi/EBf58=)
                          4: 34352e3136362e3130342e302f32322d3332203d3e20323637343039.roa (hash: Hol6yTjenap3Ca+GpOMwPXCwgjnE/BqdXAkXWxlW/cI=)
                          5: 34352e3233352e37322e302f32332d3233203d3e20323637343039.roa (hash: 415EsUb0rrjQOE3Fzl42O/BI592sTNBdzTHMHswregc=)
                          6: 34352e3233352e37342e302f32342d3234203d3e20323637343039.roa (hash: aCFwq4FCFkApjwfTU+M1EoSZgbMY5D9GXL3mGcTeWTI=)
                          7: 34352e3233352e37322e302f32322d3232203d3e20323637343039.roa (hash: +6yUgGsEvidpH2y0atP/Yxkwh9pcLe87M21MATZFUV8=)
                          8: 323830343a346430633a3a2f33322d313238203d3e20323637343039.roa (hash: Z/cIOWJ5eBP7lpXjelyxj5JgvviuGIIsXOhO73dNghg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:97:8b:26:b3:38:b2:53:f9:98:6a:7c:54:f8:e1:53:94:55:26:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
        Validity
            Not Before: Feb 20 18:52:58 2025 GMT
            Not After : Feb 21 21:47:58 2025 GMT
        Subject: CN=13CC2CC970A3F25771FF46859461794D96213DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:20:60:fb:cc:10:26:ff:98:3d:e6:4b:43:
                    d7:ab:6e:69:37:19:94:f4:90:6f:49:19:e5:e2:22:
                    16:18:ac:5d:15:ad:d1:8b:b0:8d:f3:86:48:15:c1:
                    af:d8:f2:c8:42:3f:f0:f9:fc:3c:6f:5b:87:88:c7:
                    9f:e3:50:cd:de:ae:35:b6:b7:05:8b:ef:76:6e:e0:
                    31:af:ba:49:5a:7a:fd:0d:92:01:5b:b5:e9:d2:0e:
                    21:12:3b:f6:78:cc:37:61:a7:4e:40:53:67:54:5f:
                    5e:a7:1a:a5:4c:3f:34:04:ca:e5:13:67:64:92:da:
                    27:06:13:0f:f4:07:bb:5b:c0:97:a2:b9:1c:21:9e:
                    9c:1f:53:6e:85:38:21:92:eb:7d:d3:12:15:cf:96:
                    ad:75:0c:42:3c:52:e4:26:0c:23:72:49:ae:fa:be:
                    78:aa:66:81:d9:03:3e:23:8e:42:4d:0a:f0:f7:84:
                    84:00:d8:b4:27:e2:96:9f:68:47:c1:b7:d9:cc:18:
                    97:b2:8e:8b:01:c8:30:cc:aa:b9:42:05:41:ac:fb:
                    e7:9e:8b:d6:f6:a3:01:0d:21:7b:90:26:b9:a0:04:
                    e8:7c:53:78:a7:a2:cf:94:05:c0:28:12:0b:b3:ca:
                    fe:56:ff:e8:63:63:5d:30:a8:6e:d2:30:4d:3d:e7:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CC:2C:C9:70:A3:F2:57:71:FF:46:85:94:61:79:4D:96:21:3D:FF
            X509v3 Authority Key Identifier:
                keyid:52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:02:82:c6:20:42:dd:86:80:09:50:b1:96:26:3e:6b:6e:e0:
         7a:4f:e2:76:89:b7:64:bf:bb:79:8c:67:c4:c1:e1:b4:7f:4c:
         87:1b:20:33:32:26:de:f7:1b:cf:d4:9c:d7:5d:f1:ff:65:78:
         e4:48:17:ad:0d:e8:ba:97:f2:51:d0:a6:2f:66:d5:8e:64:a7:
         4b:44:da:f9:aa:e3:a0:ab:0b:b1:3a:fe:e1:9e:4b:f6:25:fd:
         9d:67:3d:0b:6f:9e:02:29:18:2c:d1:60:3a:88:0e:99:0a:59:
         33:ca:fe:23:94:fa:a1:93:8f:23:93:a9:cf:e1:2f:dc:4c:45:
         59:81:90:f3:a0:5d:b3:31:60:18:5b:77:d0:79:8b:1f:6b:76:
         3b:b7:41:44:92:20:2a:88:bb:2c:3a:33:9d:9e:32:ac:94:db:
         a2:92:b5:c8:30:81:ff:1c:e7:9f:d9:55:6d:ea:b9:33:8c:49:
         98:69:f4:48:b7:89:2d:18:05:2a:59:be:23:98:3d:10:66:47:
         78:0d:a7:ca:07:e1:6b:e1:dc:f8:5e:98:cc:e1:0c:b4:d4:2c:
         a8:80:41:73:00:47:68:3c:36:fb:d4:a8:bf:61:ac:8a:ed:f9:
         40:70:ea:c4:d7:95:c6:f8:69:e1:3b:54:2a:da:6c:38:e6:cc:
         cf:23:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:39:48 2025 by rpki-client