Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.mft
File:                     5744E945CF5532C0BDD7C4EC46A744AA22A13C70.mft (raw, json)
Hash identifier:          F35zbpPoABUlerrSpywaBDuyPr0TOsEsO7tKZI7SVq4=
Subject key identifier:   71:2E:AE:F9:7B:D2:86:49:EA:39:88:76:FB:21:2A:7D:49:44:2E:69
Authority key identifier: 57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70
Certificate issuer:       /CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
Certificate serial:       3F9A2B51E7947FDF659D6194821B7E5B169E14AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.mft
Manifest number:          D6
Signing time:             Wed 05 Mar 2025 13:35:36 +0000
Manifest this update:     Wed 05 Mar 2025 13:30:36 +0000
Manifest next update:     Thu 06 Mar 2025 17:18:36 +0000
Files and hashes:         1: 5744E945CF5532C0BDD7C4EC46A744AA22A13C70.crl (hash: AFnJHAwC+ahGXJqju7hSOl5p1G2qzFZhxPQoSzNYI+o=)
                          2: 3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa (hash: VnTNvSlCvTfyOIRqKSMk8JJ0PiWny8fpWfRq7c971Jg=)
                          3: 323830343a336338343a3a2f33322d313238203d3e20323636323137.roa (hash: 0bHxyspMkp9+LEh9Ypcr7rDxH6fh82x6ZMDJXQFzhm4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9a:2b:51:e7:94:7f:df:65:9d:61:94:82:1b:7e:5b:16:9e:14:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
        Validity
            Not Before: Mar  5 13:30:36 2025 GMT
            Not After : Mar  6 17:18:36 2025 GMT
        Subject: CN=712EAEF97BD28649EA398876FB212A7D49442E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:12:94:cb:9b:d7:6d:21:7e:0e:dc:24:f8:
                    47:57:9a:f7:b7:fb:28:b3:7b:aa:e9:cd:87:2b:7f:
                    4d:92:a8:27:69:19:11:41:87:b5:14:6c:20:6e:c9:
                    42:e5:ce:2a:a3:e0:a8:85:b4:20:6c:45:17:63:e3:
                    e4:9d:00:68:ae:db:01:56:1a:f1:b8:15:eb:53:b1:
                    ef:84:a5:78:cd:ff:50:94:37:41:e6:b9:34:18:56:
                    51:76:18:84:0d:bb:b2:01:72:ad:69:10:29:4f:35:
                    cf:6b:9a:bc:fa:fe:fc:06:d1:e6:72:ba:a1:4b:cd:
                    4e:39:f3:c6:82:59:a2:55:36:dd:45:13:d4:51:df:
                    24:f4:a5:03:68:f0:05:4d:55:1c:51:e6:1b:9d:0d:
                    34:0c:6c:9b:98:f3:1b:0a:9f:30:a3:0a:e0:08:aa:
                    6e:79:96:f2:bc:34:85:20:48:94:0c:f3:91:9a:74:
                    c7:f6:9d:89:54:0b:8d:8d:ee:c3:8e:be:14:20:64:
                    d3:e2:5d:76:de:07:03:f4:85:31:72:ea:5d:0d:9e:
                    7c:a3:d1:d5:52:a7:06:2b:14:7e:a7:d4:5e:11:c7:
                    b9:b8:69:64:c0:8f:1d:77:73:43:55:54:5d:35:bd:
                    bd:ca:83:92:a8:e4:60:85:d8:24:09:ee:66:0e:9e:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2E:AE:F9:7B:D2:86:49:EA:39:88:76:FB:21:2A:7D:49:44:2E:69
            X509v3 Authority Key Identifier:
                keyid:57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:70:62:4f:5e:6c:e9:51:be:2e:f3:0c:e8:12:03:bb:39:
         41:85:23:04:ca:5e:63:a9:a7:fc:40:92:ee:5d:e9:9a:fd:f4:
         a5:32:c0:68:f7:05:45:65:06:05:38:27:b5:0f:65:2d:05:ed:
         d7:5e:a2:04:99:73:f4:28:dd:00:8a:71:6b:9e:17:49:12:f8:
         41:51:81:f9:28:3e:37:c4:5e:8c:dc:06:0c:94:4e:04:d0:79:
         49:dd:7b:3c:54:fb:c4:4a:a6:ae:82:92:9d:49:88:60:89:32:
         6e:56:ba:14:3c:50:10:45:e9:77:15:0c:2e:f4:9b:26:c8:55:
         52:b4:38:1b:4b:66:8d:c0:ff:1d:6e:b9:83:c1:48:7b:d7:b7:
         e4:88:0b:6c:ae:8a:3f:e6:54:d9:99:1e:72:99:4d:67:51:4e:
         92:10:76:30:13:f8:09:60:7b:62:5f:54:f7:8d:eb:71:55:e6:
         53:14:85:c8:ee:b7:20:f0:52:b4:11:e2:c1:68:69:59:96:61:
         e9:9b:e1:e6:ef:f9:da:98:45:2f:63:d9:86:bd:39:99:a3:14:
         2a:fb:4e:53:86:8d:0e:bd:a2:68:03:e6:cf:d5:92:88:98:99:
         a2:66:7b:3b:e1:5c:af:20:a1:fd:77:a8:9f:d4:ca:15:b9:d6:
         c6:5e:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:48:51 2025 by rpki-client