Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/4A152848A0A73932BBFCD8A6794FD8534F237DD6.mft
File:                     4A152848A0A73932BBFCD8A6794FD8534F237DD6.mft (raw, json)
Hash identifier:          3p+fjYbHPYEkgvHSn05ekAYAbnOdggIRfLez6XOau4k=
Subject key identifier:   A3:EE:70:27:CF:A1:F1:B2:2F:35:81:51:67:91:D9:A4:07:A5:5D:5C
Authority key identifier: 4A:15:28:48:A0:A7:39:32:BB:FC:D8:A6:79:4F:D8:53:4F:23:7D:D6
Certificate issuer:       /CN=4A152848A0A73932BBFCD8A6794FD8534F237DD6
Certificate serial:       45989234BD7DF6E001B9844C89B1FD02E1FC7B9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A152848A0A73932BBFCD8A6794FD8534F237DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/4A152848A0A73932BBFCD8A6794FD8534F237DD6.mft
Manifest number:          1D
Signing time:             Tue 07 Jan 2025 02:57:28 +0000
Manifest this update:     Tue 07 Jan 2025 02:52:28 +0000
Manifest next update:     Wed 08 Jan 2025 05:48:28 +0000
Files and hashes:         1: 4A152848A0A73932BBFCD8A6794FD8534F237DD6.crl (hash: zQpLXm6jPm8pVDgBbGW08v0IwqL579tbdh2lagZYaRI=)
                          2: 34352e352e3131322e302f32322d3234203d3e20323636303934.roa (hash: FG5YEqlYx8IqFZxqv1nrzOmi4vNzJ6qV0GgInXRmxSk=)
                          3: 323830343a336138383a3a2f33322d3438203d3e20323636303934.roa (hash: Y+q4u3m/DteEYhoQEa06IjaOpMICoZmApYnkWfQkEDw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:98:92:34:bd:7d:f6:e0:01:b9:84:4c:89:b1:fd:02:e1:fc:7b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A152848A0A73932BBFCD8A6794FD8534F237DD6
        Validity
            Not Before: Jan  7 02:52:28 2025 GMT
            Not After : Jan  8 05:48:28 2025 GMT
        Subject: CN=A3EE7027CFA1F1B22F3581516791D9A407A55D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ac:55:61:67:4a:2e:4c:4c:3e:d3:93:0a:ab:
                    7d:ec:14:82:16:1d:31:59:2e:51:c9:64:de:e5:42:
                    fb:59:8f:01:4c:88:ee:9e:9c:23:b4:a5:f7:7d:a0:
                    f2:65:cc:66:46:83:95:ab:31:8f:62:66:31:02:ad:
                    4a:b3:25:8e:fa:d9:40:48:97:b4:5f:78:3e:83:a4:
                    66:60:7c:0f:70:ce:66:8a:a4:ab:85:9a:33:66:c5:
                    34:c7:d3:37:8b:1f:5a:40:f2:3f:17:a5:06:a0:49:
                    dc:8a:3d:c5:bd:7a:ef:bc:9a:29:2a:2a:19:ca:fe:
                    90:4b:0e:6f:bf:9e:2c:5a:d1:f6:87:15:b6:09:e4:
                    7f:30:7b:be:af:52:d5:46:b7:14:97:59:8c:69:17:
                    41:91:68:9a:39:80:30:73:0b:41:c3:f5:99:26:51:
                    9c:33:2f:96:6a:b4:f7:c7:38:b1:ca:8f:95:b4:c7:
                    77:57:f4:4b:74:c2:3b:7b:7e:73:aa:f4:0c:24:4f:
                    4a:92:44:6d:04:0b:4e:2e:a9:f1:7e:84:a2:0f:8a:
                    b6:c8:19:e1:70:31:87:36:f0:bf:18:bd:7b:8e:30:
                    b1:5d:fd:81:4b:01:4e:4e:fb:91:cf:69:e6:51:9f:
                    46:0a:2e:08:81:be:d2:0c:e6:54:a2:b2:de:18:a5:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EE:70:27:CF:A1:F1:B2:2F:35:81:51:67:91:D9:A4:07:A5:5D:5C
            X509v3 Authority Key Identifier:
                keyid:4A:15:28:48:A0:A7:39:32:BB:FC:D8:A6:79:4F:D8:53:4F:23:7D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/4A152848A0A73932BBFCD8A6794FD8534F237DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A152848A0A73932BBFCD8A6794FD8534F237DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/4A152848A0A73932BBFCD8A6794FD8534F237DD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:15:6b:96:54:99:9f:c1:b7:77:d7:a6:95:1a:e5:a3:2d:c4:
         2a:47:b9:81:d0:60:15:2b:06:e5:28:17:a9:38:ab:f7:57:aa:
         5d:76:29:99:66:ad:31:46:5a:ba:a3:cd:7b:ba:5d:e3:47:f9:
         24:77:ed:c5:44:07:05:62:db:bd:6a:c7:ec:4a:e9:db:97:29:
         31:95:89:90:72:0c:14:79:af:2d:b4:b3:f3:ec:24:e6:71:3c:
         00:ba:18:21:92:7b:63:18:95:b7:d5:70:46:f1:9c:35:a6:b4:
         20:31:57:4e:47:04:bd:52:f0:05:d5:33:c7:2e:b8:80:cb:b6:
         23:3f:b7:5d:11:ad:d2:17:69:96:b2:41:68:60:2b:1f:94:13:
         0c:95:92:df:e4:48:3e:ce:b2:01:5e:e2:cc:aa:bc:87:ed:e6:
         7b:90:bd:1b:a4:8f:ef:75:7d:3a:09:32:eb:90:66:ab:07:35:
         a8:65:34:95:12:55:d7:05:1e:a9:33:39:d3:24:c0:bd:5b:c1:
         37:cc:3c:2a:0a:65:06:bd:6a:de:a3:4b:be:d7:4f:09:44:60:
         b7:a0:1d:c4:44:04:6f:f9:c7:48:74:d8:62:9a:53:3d:d5:23:
         f2:47:bc:8a:ce:9a:ff:76:bc:63:bc:ef:ae:e1:a9:d7:39:7f:
         b8:83:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:45:14 2025 by rpki-client