Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft
File:                     0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft (raw, json)
Hash identifier:          bQmkrGigNDTFkUEN+HkQ3MlYyu8lAIgf7G6uUiZZrrI=
Subject key identifier:   5C:B6:83:F3:A5:97:15:12:94:BF:67:3A:B8:61:BF:39:65:19:4A:AC
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Certificate issuer:       /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial:       4905249D2C1C504EC8F940603BC662415DD33A87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft
Manifest number:          0109
Signing time:             Tue 05 Dec 2023 22:01:30 +0000
Manifest this update:     Tue 05 Dec 2023 21:56:30 +0000
Manifest next update:     Wed 06 Dec 2023 22:02:30 +0000
Files and hashes:         1: 34352e3233392e31322e302f32332d3233203d3e20323638333436.roa (hash: rO5+SY/2PMrT+s8KGWC/1Usp0Fm7GwnrGbBRvJ1LNqA=)
                          2: 323830343a346662633a3a2f33322d3332203d3e20323638333436.roa (hash: kXnjM43cCdu6Nz1D3hs9IbOlvDqu1UZxzAekWzklhrk=)
                          3: 0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl (hash: UD/RLinAWQ44a1PKX9WdzA8PNAMG7kOxyTK5yMmEXck=)
                          4: 34352e3233392e31322e302f32322d3232203d3e20323638333436.roa (hash: zlBpe5r8AqfCJzrjkvy7FKf8XrMuJs36e97NqyAVKQo=)
                          5: 34352e3233392e31342e302f32332d3233203d3e20323638333436.roa (hash: CQrbWyLtx+bF6QPqXUzSSqYzn1TLX2aiJ8sjIIxdWsc=)
                          6: 34352e3233392e31322e302f32342d3234203d3e20323638333436.roa (hash: CRLi/xkefhOumramybQOEVQH+wN2VOqmjPaq8EC8xi8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:05:24:9d:2c:1c:50:4e:c8:f9:40:60:3b:c6:62:41:5d:d3:3a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Validity
            Not Before: Dec  5 21:56:30 2023 GMT
            Not After : Dec  6 22:02:30 2023 GMT
        Subject: CN=5CB683F3A597151294BF673AB861BF3965194AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:8a:99:2e:29:62:23:5a:f1:e1:24:bd:a5:
                    f0:1d:75:78:7c:ef:6c:dc:73:7e:03:f6:dd:9d:18:
                    c9:2f:af:44:c8:b6:1c:a0:f7:d7:d0:3f:7f:01:be:
                    dd:ac:6c:2b:17:1e:a9:5c:f8:e2:91:b7:b6:cf:9d:
                    d0:e4:cf:3c:d3:92:d1:60:d6:ed:c6:a2:e0:5c:b3:
                    c9:4d:2f:16:f3:b3:82:7a:15:96:72:37:b8:b6:4d:
                    48:06:cb:5a:7e:75:02:81:3b:22:cf:02:15:9f:71:
                    e5:5c:71:ef:65:bd:55:99:ee:77:1f:f7:e8:a7:77:
                    59:c8:f5:30:2a:84:e3:f9:c4:b7:76:e2:e9:39:14:
                    2b:3d:5d:ec:a5:2d:ec:dd:e0:d2:71:b5:da:28:47:
                    af:0c:88:73:5a:81:55:8e:9c:0a:dd:3c:2e:13:e5:
                    58:77:82:92:54:70:22:f0:d8:86:4d:18:f6:db:c9:
                    a9:71:bc:9a:9c:eb:18:59:de:32:e7:55:56:b7:bc:
                    37:3b:6a:2b:df:2b:70:2a:21:12:6f:f4:0b:51:12:
                    9c:e5:bf:3b:f1:63:f1:00:ec:ce:87:4b:0e:dc:e3:
                    bb:37:bd:d0:54:2d:c0:57:8a:ee:41:e1:b1:6d:1a:
                    50:8d:7c:bd:66:23:89:34:b6:0b:10:34:45:3a:e2:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:83:F3:A5:97:15:12:94:BF:67:3A:B8:61:BF:39:65:19:4A:AC
            X509v3 Authority Key Identifier:
                keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:10:1c:88:48:ad:5d:95:d5:ad:33:a4:31:be:36:e6:1f:5d:
         21:b9:8c:3f:f2:58:db:75:33:b8:b7:d4:5d:aa:c8:31:c3:0b:
         40:84:5b:b6:4b:fd:16:28:f1:95:a6:0e:3e:c4:19:ef:49:99:
         87:35:9d:65:3e:1a:01:5e:d2:00:37:05:ef:1e:61:ff:eb:0e:
         a5:e2:70:1b:bb:3a:e8:83:a0:fd:19:12:75:d7:41:b2:01:93:
         d7:e6:b2:08:e6:b4:36:ca:7b:bc:c7:41:83:dd:60:4b:79:4b:
         40:17:37:a3:a4:74:35:b1:34:9a:5b:28:b0:a2:9c:77:19:40:
         cf:2e:2b:b5:a1:0a:e7:8e:9d:90:ed:6c:47:c2:d1:2e:70:12:
         54:5f:58:c9:0c:f9:42:4d:58:ad:3d:a2:2a:aa:8a:38:d6:f1:
         b1:f3:5f:fb:9e:e3:48:55:5a:00:6c:2e:31:7c:37:46:5c:de:
         ab:9c:c6:cb:73:40:16:56:08:9e:30:5f:53:e8:6b:d8:fe:db:
         59:24:90:e0:9f:4a:de:3d:94:0f:95:f5:fb:c9:ac:bb:2c:e7:
         43:0a:8f:06:d3:bc:02:7d:94:e2:22:3a:34:7e:f6:e9:18:60:
         81:e4:c0:fe:eb:f4:de:69:6e:0f:f3:0a:08:2c:89:84:45:b2:
         54:c6:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:56 2025 by rpki-client