Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/44193E585B74C4D75B7FE4725353647532369A29.mft
File:                     44193E585B74C4D75B7FE4725353647532369A29.mft (raw, json)
Hash identifier:          +PMGKT4lqqSAJQ0JcVEtuqKA7s+ykBXIlsJ5jAz9rHQ=
Subject key identifier:   A9:43:50:EB:57:C6:BF:32:B5:44:A5:2C:8F:B0:F8:88:4A:50:C4:D3
Authority key identifier: 44:19:3E:58:5B:74:C4:D7:5B:7F:E4:72:53:53:64:75:32:36:9A:29
Certificate issuer:       /CN=44193E585B74C4D75B7FE4725353647532369A29
Certificate serial:       4890C47102D5D33C909E2E3F3A0103F0B9578D8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44193E585B74C4D75B7FE4725353647532369A29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/44193E585B74C4D75B7FE4725353647532369A29.mft
Manifest number:          04
Signing time:             Sat 29 Mar 2025 01:18:32 +0000
Manifest this update:     Sat 29 Mar 2025 01:13:32 +0000
Manifest next update:     Sun 30 Mar 2025 01:55:32 +0000
Files and hashes:         1: 34352e352e3131322e302f32322d3234203d3e20323636303934.roa (hash: Psq20IGRjZywQWISSGOrvpxornCdWACIOtz8sSaSRNs=)
                          2: 44193E585B74C4D75B7FE4725353647532369A29.crl (hash: QI1WevQ1KSu0lOH4H+fzQQTfJp+DTpzHCYWP3JfFPjM=)
                          3: 323830343a336138383a3a2f33322d3438203d3e20323636303934.roa (hash: 4qyarmN0CQ02TYoAmk9DzgIuCEWq/yO7gx3Y7Z4iql8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:90:c4:71:02:d5:d3:3c:90:9e:2e:3f:3a:01:03:f0:b9:57:8d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44193E585B74C4D75B7FE4725353647532369A29
        Validity
            Not Before: Mar 29 01:13:32 2025 GMT
            Not After : Mar 30 01:55:32 2025 GMT
        Subject: CN=A94350EB57C6BF32B544A52C8FB0F8884A50C4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:d0:d4:4a:03:cb:2c:67:5b:12:94:a9:4c:
                    8a:02:dd:79:d0:ea:d0:43:81:82:28:c5:a9:ca:a1:
                    87:b9:90:2a:1e:75:20:2b:b6:50:79:56:38:7d:49:
                    84:77:2c:39:a2:e4:b1:25:74:62:94:d7:c2:de:63:
                    00:b0:ad:c2:3c:c0:28:11:e8:8e:0c:9a:a6:ea:bf:
                    2a:9b:46:94:4c:f8:24:2e:80:9c:98:ef:49:0b:b5:
                    f2:be:e9:ab:1b:57:39:78:15:de:16:ac:45:8c:3b:
                    16:00:c8:05:60:9c:e3:4b:b6:a5:b8:4d:8a:40:af:
                    63:a3:a1:57:9a:91:be:dc:dc:fa:75:b1:e9:8b:12:
                    7a:07:42:12:f0:e8:84:32:df:b6:b1:d0:7e:44:25:
                    bf:78:59:92:fd:36:7b:d9:a4:fe:45:5d:c6:de:31:
                    2d:8b:66:bc:cf:cf:4f:65:3f:c9:79:04:f7:71:ed:
                    a0:8b:37:28:18:e4:16:01:cb:a1:b7:f3:5e:15:85:
                    14:b4:42:64:01:39:84:f4:68:70:a1:63:25:57:65:
                    ef:f9:59:80:22:a7:3a:8b:0a:3b:d1:45:ef:26:9f:
                    59:de:09:71:6c:b1:19:cb:0a:bb:90:ae:fb:04:1b:
                    f3:b0:15:4f:40:c4:fb:c1:77:72:c4:b8:e6:37:76:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:50:EB:57:C6:BF:32:B5:44:A5:2C:8F:B0:F8:88:4A:50:C4:D3
            X509v3 Authority Key Identifier:
                keyid:44:19:3E:58:5B:74:C4:D7:5B:7F:E4:72:53:53:64:75:32:36:9A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/44193E585B74C4D75B7FE4725353647532369A29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44193E585B74C4D75B7FE4725353647532369A29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/44193E585B74C4D75B7FE4725353647532369A29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:a0:94:4f:8f:dd:38:35:5b:1e:c1:92:67:a1:e0:2c:7c:
         aa:39:02:9b:79:4f:2a:28:0f:5e:ab:ec:3f:0c:ae:27:e1:eb:
         a0:61:5d:ba:0a:54:9b:a5:35:1b:4b:88:ce:6a:63:9b:de:d7:
         c8:95:f8:c1:48:6c:6a:bf:ec:76:48:e9:02:76:83:36:47:08:
         45:82:91:dd:23:1a:8c:77:ea:b0:bb:76:81:9f:bd:02:81:5f:
         8e:3c:59:a2:7a:f1:d8:82:26:a0:33:ca:58:a5:f6:f6:52:16:
         f5:a0:a1:1b:a0:a5:ae:b7:95:8e:be:44:aa:35:06:4d:3f:92:
         48:19:b1:72:b5:af:25:ef:63:fb:43:29:a6:19:a6:ee:dd:7d:
         3b:33:fd:bc:a4:ab:d6:08:f6:f4:23:a8:0b:c9:15:b6:48:32:
         4d:a3:56:4a:18:1b:d0:a0:f0:85:1f:9c:ff:0a:92:04:9e:6d:
         da:72:e8:5f:fb:fb:6a:49:54:c0:33:f8:26:70:61:92:1b:2d:
         e3:90:5e:4e:59:9b:25:fe:26:ca:a2:4f:3b:1d:37:0a:aa:4c:
         18:a6:6f:5e:fe:1b:bc:24:1e:83:42:13:04:38:a4:5c:35:02:
         44:8c:39:2e:7c:58:b3:30:2e:98:2d:80:51:b9:f3:93:f4:19:
         aa:bb:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:19:52 2025 by rpki-client