Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A83552DD491BD00AFE7312837A02580BDFA873A3.mft
File:                     A83552DD491BD00AFE7312837A02580BDFA873A3.mft (raw, json)
Hash identifier:          t+AJ6NhB+R2lJvWKUGHzG1afKibnSdhg4RKiyiDo8F0=
Subject key identifier:   A1:BE:1E:9A:AE:B2:21:AE:93:93:D8:9C:1D:BF:79:E9:94:9E:E0:2B
Authority key identifier: A8:35:52:DD:49:1B:D0:0A:FE:73:12:83:7A:02:58:0B:DF:A8:73:A3
Certificate issuer:       /CN=A83552DD491BD00AFE7312837A02580BDFA873A3
Certificate serial:       2E79CE908CA24D1C87458AB0764D6952FF008592
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83552DD491BD00AFE7312837A02580BDFA873A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A83552DD491BD00AFE7312837A02580BDFA873A3.mft
Manifest number:          0D
Signing time:             Sat 11 Jan 2025 21:45:33 +0000
Manifest this update:     Sat 11 Jan 2025 21:40:33 +0000
Manifest next update:     Mon 13 Jan 2025 00:27:33 +0000
Files and hashes:         1: A83552DD491BD00AFE7312837A02580BDFA873A3.crl (hash: yG68QOFPVq+kfcuOlyZPJNhwnvwwkXs67COMqER0aOk=)
                          2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: BLdbF9H8xINFvyXGTrwhpFfwCWIwMiD1MXiolm4xv6g=)
                          3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: 1glenHcy7DFeDJJm4qjjamzaoDpBqIay2LXikA2OKz4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:79:ce:90:8c:a2:4d:1c:87:45:8a:b0:76:4d:69:52:ff:00:85:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A83552DD491BD00AFE7312837A02580BDFA873A3
        Validity
            Not Before: Jan 11 21:40:33 2025 GMT
            Not After : Jan 13 00:27:33 2025 GMT
        Subject: CN=A1BE1E9AAEB221AE9393D89C1DBF79E9949EE02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:20:04:d1:73:a3:f9:f3:c4:13:e1:d9:85:
                    db:ab:e7:da:b9:85:d3:71:5f:56:80:a7:25:ea:41:
                    4f:44:03:55:fd:e6:d8:13:7e:95:27:55:4b:4c:d5:
                    9e:aa:33:3c:b5:ea:c6:18:8c:07:73:af:2d:e1:b9:
                    dc:73:cc:af:f4:3b:d8:b1:bd:d2:02:2f:01:83:e4:
                    6d:8d:d3:42:f2:39:4d:eb:0d:56:52:ff:43:f0:42:
                    4b:c4:25:3c:75:d3:ab:7b:db:10:80:99:8d:5d:5d:
                    5b:d3:76:bf:61:96:92:63:68:13:70:24:96:c5:dc:
                    01:22:fd:ca:01:f6:33:ea:eb:e6:3b:c0:ca:15:06:
                    68:b1:69:c2:6a:3d:fd:46:5e:ea:63:1b:76:91:16:
                    bb:11:e4:06:67:8f:01:ff:5c:0c:a2:ba:be:de:71:
                    72:48:93:a9:29:0c:30:37:84:e1:f9:ce:ba:7e:62:
                    a0:77:a7:b1:79:85:29:69:fc:ec:ab:73:12:8d:a7:
                    d3:e6:3f:27:59:5e:1e:45:47:70:ed:59:78:3a:f9:
                    97:dc:aa:e1:b5:ce:bf:81:89:3d:95:ab:d4:31:4d:
                    bd:3e:b2:8c:ae:61:f0:6a:b5:7c:22:8b:7e:87:6d:
                    25:66:db:2d:db:c5:dc:33:b1:85:ea:22:c0:44:d8:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:1E:9A:AE:B2:21:AE:93:93:D8:9C:1D:BF:79:E9:94:9E:E0:2B
            X509v3 Authority Key Identifier:
                keyid:A8:35:52:DD:49:1B:D0:0A:FE:73:12:83:7A:02:58:0B:DF:A8:73:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A83552DD491BD00AFE7312837A02580BDFA873A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83552DD491BD00AFE7312837A02580BDFA873A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A83552DD491BD00AFE7312837A02580BDFA873A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:eb:49:a3:16:e4:cc:b4:c3:86:f4:af:de:60:de:57:9c:48:
         3a:63:84:ed:59:40:1b:77:1a:bc:03:e6:89:92:4f:05:e5:bc:
         11:84:f6:2c:96:1c:e5:03:fa:2b:7c:be:ee:de:09:41:27:57:
         ce:99:88:ab:d5:23:a1:53:83:36:0e:87:ff:9a:79:5b:d6:02:
         e0:a3:76:bb:9e:96:c7:38:c5:68:1b:26:01:0e:5e:34:13:8a:
         ef:61:25:2f:57:7d:7f:e6:06:04:8c:06:66:9d:0d:2e:54:f3:
         5d:db:0a:35:c1:8f:90:6e:d4:e6:2b:47:3b:43:7f:42:31:81:
         db:97:a3:2e:5b:0c:b9:4e:20:df:c7:98:18:1b:bb:b1:a4:fc:
         29:96:f4:eb:1f:ff:15:6e:8f:c3:c5:8a:e8:c2:26:15:de:e6:
         0b:dd:3a:10:33:44:d2:54:1d:58:64:eb:47:d8:c4:5d:f0:92:
         ac:72:71:34:e2:55:20:4b:72:96:4e:ef:fb:90:df:c5:4b:85:
         fd:05:05:8f:2e:5e:fe:e2:42:4f:ed:43:e8:9e:77:b1:80:9b:
         bf:c9:53:dc:f2:7e:76:fc:12:f2:dc:ec:bb:64:af:31:22:51:
         e8:cd:00:1f:17:be:51:1f:0e:4a:e5:cd:5a:35:12:e8:83:2d:
         17:13:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:10 2025 by rpki-client