Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.mft
File:                     84A0648C9B9519DD03662E46C02F5297FC855EEE.mft (raw, json)
Hash identifier:          aZWtH4NpV+WBLJRLyRWVpFb8u3PjzG8+H2AeevT+sZo=
Subject key identifier:   8D:D6:9E:39:C5:52:8B:47:CE:A3:02:98:C3:37:13:E0:08:8F:89:06
Authority key identifier: 84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE
Certificate issuer:       /CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
Certificate serial:       3ADF8B051478C0B8F99A59721868F2F544280848
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.mft
Manifest number:          1E
Signing time:             Tue 04 Feb 2025 22:48:08 +0000
Manifest this update:     Tue 04 Feb 2025 22:43:08 +0000
Manifest next update:     Thu 06 Feb 2025 02:36:08 +0000
Files and hashes:         1: 3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa (hash: ekhGCkCLR0tzLsTQJ5STB+gSAwxFP0YLBUbEr+aHm4E=)
                          2: 84A0648C9B9519DD03662E46C02F5297FC855EEE.crl (hash: 8+b2FeGC0906kJ/fLYiutBVI7MeEXZZw6kIHcVjQvWk=)
                          3: 3137392e34322e3133362e302f32342d3234203d3e20323731323037.roa (hash: 8eTT4lUOyP5bZ3F+1djGsiObdgM7I3l3JVHiGRdO7O8=)
                          4: 3137392e34322e3133382e302f32342d3234203d3e20323731323037.roa (hash: HkAHbjqkTMWIBkr1udNeimsctVcUATBe/3nY0rf+5ZQ=)
                          5: 3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa (hash: GDa9RHeLLD+9TAgWgn71vFe1Y13k/9tVURsuevId9KY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:df:8b:05:14:78:c0:b8:f9:9a:59:72:18:68:f2:f5:44:28:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
        Validity
            Not Before: Feb  4 22:43:08 2025 GMT
            Not After : Feb  6 02:36:08 2025 GMT
        Subject: CN=8DD69E39C5528B47CEA30298C33713E0088F8906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:a1:4b:e1:8a:d0:ca:4d:9b:70:18:98:fd:
                    24:56:a6:46:e2:2d:20:02:76:03:a2:d7:c7:ad:f0:
                    ee:bc:ca:4e:8b:40:08:93:46:fc:c6:ce:0c:c5:a0:
                    07:f7:84:84:4e:3e:a3:67:3f:57:1f:ba:51:84:19:
                    2d:d0:bf:b2:a9:8a:6c:85:e0:cb:fc:d7:00:c9:8d:
                    12:7f:4c:d7:74:75:11:55:8b:e0:18:98:dd:07:79:
                    63:5e:82:3a:1b:d0:5f:a1:b6:e5:3d:b3:f5:fd:19:
                    10:9e:d6:37:9d:b9:5d:83:bc:ca:87:7d:d2:6a:a7:
                    19:dc:04:34:a5:5c:d4:f1:14:65:c9:b5:49:ec:ac:
                    48:ef:f2:25:22:7f:8d:99:6e:75:bf:50:3e:f7:59:
                    24:96:4a:b6:43:df:70:59:7b:2f:99:5a:54:45:c5:
                    f2:3b:c3:3f:ca:b3:ec:33:a9:d9:84:cf:62:21:1d:
                    09:be:dc:d6:15:ec:2a:1f:54:b6:26:b2:bc:b4:a6:
                    27:d6:fd:72:54:f5:0e:ef:39:2b:f3:e9:43:14:3a:
                    6b:b5:bd:a3:0c:23:28:a4:a9:f7:99:94:f0:98:3b:
                    ee:f1:84:e8:b0:90:91:b6:ce:99:b5:3f:64:c1:e1:
                    83:38:66:be:5c:07:26:f0:9a:df:1f:4c:cf:e8:a4:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D6:9E:39:C5:52:8B:47:CE:A3:02:98:C3:37:13:E0:08:8F:89:06
            X509v3 Authority Key Identifier:
                keyid:84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6d:77:e0:d7:65:35:32:63:ee:c5:a9:71:c5:60:30:14:29:
         41:af:07:37:a4:3b:ef:3a:cc:25:58:1f:eb:39:90:ee:6a:9a:
         4b:f1:96:5e:ce:94:62:48:4c:ad:25:09:58:25:c3:88:27:c0:
         d2:48:20:65:e8:91:1f:8f:89:eb:be:58:4a:61:0a:78:1b:65:
         82:f1:12:75:64:8c:ab:4b:0b:59:14:d4:29:6b:9d:8b:4d:04:
         ae:57:17:3f:02:8a:b4:c5:89:ee:cb:70:b1:39:c8:17:fe:f3:
         e9:9a:c8:95:aa:32:a9:f4:47:80:20:d6:9f:a0:c4:49:95:69:
         07:d1:4f:a4:3f:83:9b:37:7a:f6:6d:25:9d:95:0d:4e:26:3a:
         4a:2d:e8:26:5b:33:84:de:6d:94:d8:4f:bf:a5:bb:44:29:e2:
         72:da:d8:d7:8c:76:b5:1c:0f:84:81:8d:0e:78:59:d4:5c:e8:
         72:58:d9:22:8f:5a:b4:ea:b9:9d:23:ca:9e:ec:d8:1c:da:fe:
         ce:10:8d:27:7f:f0:7b:6e:fa:42:4c:66:75:51:1d:21:c1:c1:
         57:ae:18:3e:dd:3f:c9:f7:76:01:7f:09:08:c4:ae:da:78:6b:
         f0:96:5c:b3:29:3f:31:43:3f:a5:6d:52:b6:09:d9:09:d5:02:
         f8:fc:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:16 2025 by rpki-client