Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.mft
File:                     1AF8EF98196B4BF9759D4778A8E265C6E12D3314.mft (raw, json)
Hash identifier:          FEshj+ymQh8FlxFbEeM8Rknr1Ux6074PDWnPDpJ5F18=
Subject key identifier:   DE:F2:75:0B:45:08:88:77:68:20:84:5E:22:C0:F3:1D:84:1F:CC:81
Authority key identifier: 1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14
Certificate issuer:       /CN=1AF8EF98196B4BF9759D4778A8E265C6E12D3314
Certificate serial:       68ABDB002F25B9C3BA1D8A35666B40E8B79CC188
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.mft
Manifest number:          04
Signing time:             Sat 29 Mar 2025 00:15:15 +0000
Manifest this update:     Sat 29 Mar 2025 00:10:15 +0000
Manifest next update:     Sun 30 Mar 2025 02:50:15 +0000
Files and hashes:         1: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: bgATyLhGQzrVoyhWXiawG0q8ugeWTjHILMnumMrO5hk=)
                          2: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: J4zgwhLThquK3Kt/wr4koXWMmkUIBts4WDUmgKnb9f8=)
                          3: 1AF8EF98196B4BF9759D4778A8E265C6E12D3314.crl (hash: HQYV8eWnIATwrCUJwwDFOTH3GpJsSsGxCJBxivukJso=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ab:db:00:2f:25:b9:c3:ba:1d:8a:35:66:6b:40:e8:b7:9c:c1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF8EF98196B4BF9759D4778A8E265C6E12D3314
        Validity
            Not Before: Mar 29 00:10:15 2025 GMT
            Not After : Mar 30 02:50:15 2025 GMT
        Subject: CN=DEF2750B450888776820845E22C0F31D841FCC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:5d:00:67:d1:82:02:c9:57:09:b3:59:08:
                    cf:d0:3c:35:3d:c2:84:f6:dd:ec:72:6d:ce:6e:f3:
                    e2:0e:fc:42:19:ed:5a:ad:6a:e0:c5:95:73:b4:14:
                    d6:2c:a3:7b:45:b3:e0:c2:a6:cd:2d:9e:6f:b4:72:
                    4f:f2:ef:6d:f6:04:fb:cd:59:4f:2c:49:89:ea:4e:
                    77:95:75:37:7f:eb:54:0d:72:43:6b:f7:f6:8c:c7:
                    5d:c7:79:66:a7:50:ec:12:71:9b:10:c8:da:36:7f:
                    6f:c0:17:ae:12:2d:2e:0f:5c:b6:c6:7e:ae:7a:29:
                    59:5b:5e:8a:9b:9e:6d:c8:cf:e3:0d:c4:bc:2c:3f:
                    e6:15:57:56:2f:92:a3:16:9c:de:f4:68:03:a9:f8:
                    bd:b3:a7:b0:0f:a9:17:ed:a8:44:a8:98:36:f0:67:
                    9d:3e:a6:65:fc:39:2c:56:a0:53:46:93:36:6d:86:
                    04:2c:21:9e:70:40:13:b7:81:2a:12:f8:4c:b3:3b:
                    7a:4d:13:e8:59:7d:7a:37:7d:e6:63:fa:ce:dd:dc:
                    87:0b:91:c0:63:58:f5:be:b2:18:ec:b2:a9:4c:d7:
                    2d:5f:7a:cc:d9:67:7b:8b:0a:85:eb:16:f6:7e:19:
                    8a:19:10:12:99:38:21:d2:03:51:3c:07:1c:27:55:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F2:75:0B:45:08:88:77:68:20:84:5E:22:C0:F3:1D:84:1F:CC:81
            X509v3 Authority Key Identifier:
                keyid:1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:92:89:f3:83:06:2b:01:30:0c:2f:98:d7:81:d5:f8:b3:cc:
         b4:f0:ee:82:1f:26:8e:3d:1a:14:df:f1:7d:19:11:84:4f:cc:
         52:9a:21:e3:39:a0:10:b5:20:0c:60:3f:d1:f2:e3:9a:9f:c3:
         43:3e:d2:af:98:df:10:42:15:e3:42:33:81:df:ac:b6:7f:dd:
         5a:67:56:19:42:10:63:92:6c:75:63:ac:c7:32:d6:86:2f:a1:
         16:71:bf:c6:73:d7:6b:64:ed:8d:0f:d0:bd:bd:89:6e:23:00:
         3b:f5:d8:3a:b0:c8:71:fd:fa:a3:6d:9f:53:f3:6d:93:62:73:
         f4:1a:7a:ad:08:64:c4:7d:3d:14:38:f6:61:ea:6c:a4:c0:da:
         47:b1:8b:67:9a:ed:c9:a0:f6:40:60:3d:55:63:d8:d2:f8:1f:
         28:63:21:75:6a:67:be:9c:c5:d8:8b:85:5f:3a:f8:53:e3:dd:
         b9:58:71:9d:44:f2:c0:e9:ef:c2:8f:2a:f4:74:61:80:10:b8:
         6f:75:a8:17:f4:43:70:7c:57:65:db:a4:2a:4d:2e:f8:83:9c:
         11:46:ba:fe:74:45:8a:3f:ab:82:fc:ad:a7:d6:0a:3b:92:38:
         bc:01:0d:14:2b:0f:97:6d:a7:8f:08:61:ef:fa:55:2d:f2:68:
         8c:c7:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:03 2025 by rpki-client