Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.mft
File:                     AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.mft (raw, json)
Hash identifier:          LPtN/gqrK7PXpDPHAh/SRTfaJ3ZpJN07UiEUrihw/os=
Subject key identifier:   35:3A:19:06:CA:78:49:E2:66:B4:FB:ED:A0:53:80:02:B3:C0:42:50
Authority key identifier: AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8
Certificate issuer:       /CN=AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8
Certificate serial:       487C336D845CFB7F62A834EA8BE6EC2976295256
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.mft
Manifest number:          03
Signing time:             Thu 20 Mar 2025 18:55:32 +0000
Manifest this update:     Thu 20 Mar 2025 18:50:32 +0000
Manifest next update:     Fri 21 Mar 2025 20:10:32 +0000
Files and hashes:         1: 34352e3233342e3137362e302f32322d3332203d3e20323637333639.roa (hash: dWbov0RA3jj6B2FlK9gsSA7iBcmpeKsuT2Q0wDMC6UM=)
                          2: AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.crl (hash: m3fzkRO+dcnYw3Vbuulm7POFPwVLAYzsQ+xEIV7OpZU=)
                          3: 323830343a346336383a3a2f33322d313238203d3e20323637333639.roa (hash: C26tjZtGDVJ14abJw7U1uBj31aJFCN0Y0/l/nshdnv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7c:33:6d:84:5c:fb:7f:62:a8:34:ea:8b:e6:ec:29:76:29:52:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8
        Validity
            Not Before: Mar 20 18:50:32 2025 GMT
            Not After : Mar 21 20:10:32 2025 GMT
        Subject: CN=353A1906CA7849E266B4FBEDA0538002B3C04250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:7d:b0:ca:ea:cf:e5:1f:43:c7:fe:42:6f:
                    a2:07:10:1e:48:e8:13:3c:98:71:2a:68:30:64:69:
                    29:9c:dc:64:ba:81:00:2b:6c:b9:d9:41:c4:2b:de:
                    d0:9e:17:1f:7a:d7:a9:a5:dd:5f:1c:7f:22:6a:5f:
                    22:cb:9c:43:19:17:31:56:98:e3:e1:93:a4:67:7d:
                    4d:c2:d5:02:b6:35:07:5f:18:18:ac:d2:d7:f1:06:
                    50:ac:e7:e7:0f:2b:c8:ec:5d:03:1a:82:7d:5f:dc:
                    58:5d:40:c8:0d:2e:8a:21:fb:bb:d6:16:c9:d9:8f:
                    aa:ea:f4:07:81:fe:7a:19:8b:a6:7d:68:af:70:40:
                    11:8b:8c:9f:d4:1b:bc:2b:8d:3b:e4:a1:00:0f:47:
                    81:04:22:4f:99:e7:9c:de:2a:bb:96:90:db:ea:52:
                    b5:f7:2e:fe:0f:85:6f:aa:89:14:6b:cb:c7:25:46:
                    77:71:6e:84:0d:a5:26:4c:87:d2:7e:f7:63:e8:45:
                    8c:77:7b:29:69:f7:34:05:e5:c4:e9:00:45:e7:7b:
                    79:20:9a:ef:47:ea:5f:5d:10:21:be:2e:01:bc:b7:
                    d4:aa:27:11:f4:66:99:ce:da:5c:fe:3d:0e:78:fa:
                    89:98:93:e1:50:e5:0e:c6:76:bf:0b:3f:c6:ce:9e:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3A:19:06:CA:78:49:E2:66:B4:FB:ED:A0:53:80:02:B3:C0:42:50
            X509v3 Authority Key Identifier:
                keyid:AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:94:4b:77:c8:03:57:90:ad:0b:3c:c4:67:b7:e7:98:26:e6:
         fd:a8:ff:68:cc:41:f9:c9:c8:e9:b3:f9:c1:f2:68:4d:dd:f6:
         61:f6:fa:59:4f:aa:1a:1e:4c:93:87:2c:30:4d:52:5e:8c:4c:
         d7:d1:78:5c:1a:35:3e:41:f3:d3:e0:37:11:9c:12:b9:44:52:
         66:7d:1c:f3:78:a2:f2:23:22:16:a9:03:2b:13:3b:e4:e3:f3:
         82:4b:81:93:a1:1c:93:36:4d:1e:c4:18:51:66:6b:16:6e:11:
         6b:d1:95:c7:b0:42:c1:71:c7:52:a6:42:7c:ca:d6:e1:ba:40:
         5a:3a:95:8f:1a:a8:ce:7c:d6:b7:97:01:e4:04:a4:21:4b:c3:
         63:11:c0:94:40:b5:55:f8:80:a4:0e:6a:5e:82:5d:bf:e1:73:
         fc:fc:ee:57:1f:b2:a1:50:4b:77:6b:ef:15:e1:67:c1:11:9b:
         47:84:2e:3f:58:83:2f:f2:90:84:f5:47:83:5a:8f:db:47:2b:
         7b:c3:8c:f4:3c:c1:9a:1f:84:91:47:70:44:00:29:e5:83:b7:
         38:32:a2:ce:5d:bf:cb:d2:d4:81:5b:81:e7:2d:54:1c:52:44:
         71:e9:3f:36:ab:d9:9b:91:f6:cb:c8:f0:df:55:df:32:35:69:
         c2:6c:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:27:14 2025 by rpki-client