Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.mft
File:                     01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.mft (raw, json)
Hash identifier:          zsCwyc1oTSBmYLax86oelB7a6CNmxxJePBfsOvty4Tg=
Subject key identifier:   63:FD:14:44:10:CB:D8:28:1B:40:AD:E5:9B:E8:F3:8D:31:C6:79:B8
Authority key identifier: 01:DF:53:2E:9B:AD:DC:5B:96:BE:01:73:6B:6C:89:1B:FA:2F:4C:89
Certificate issuer:       /CN=01DF532E9BADDC5B96BE01736B6C891BFA2F4C89
Certificate serial:       4F92CE6582B19EB4EBDF13CC864C53F6FA58FC57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.mft
Manifest number:          1A
Signing time:             Sat 24 Aug 2024 03:59:51 +0000
Manifest this update:     Sat 24 Aug 2024 03:54:51 +0000
Manifest next update:     Sun 25 Aug 2024 05:17:51 +0000
Files and hashes:         1: 323830343a326537303a3a2f33322d313238203d3e20323635333436.roa (hash: r30wbjInxKOjg7iMN6AM51Vzc4uabX1uHt39I5b2qxo=)
                          2: 01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.crl (hash: MjoSD1QXs0+8oZBDk0RyPQFS0zRAAT/n8+u+WT53pCQ=)
                          3: 3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa (hash: ofvUQJ6PSj4rnQh6KW127rXxvl++ftHxWPUg3GxL63o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:92:ce:65:82:b1:9e:b4:eb:df:13:cc:86:4c:53:f6:fa:58:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DF532E9BADDC5B96BE01736B6C891BFA2F4C89
        Validity
            Not Before: Aug 24 03:54:51 2024 GMT
            Not After : Aug 25 05:17:51 2024 GMT
        Subject: CN=63FD144410CBD8281B40ADE59BE8F38D31C679B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:25:44:67:32:28:52:e4:ef:80:a5:c6:6b:
                    f9:17:4a:06:02:55:b9:b6:4a:bd:96:87:01:a7:de:
                    82:cb:fc:8a:e3:f0:64:83:b0:6b:0d:c4:1d:47:dd:
                    a1:17:e9:71:ad:77:24:a6:f2:3c:69:2f:0f:0e:f1:
                    2d:02:1a:4b:65:53:d0:4f:48:33:c8:88:9f:83:04:
                    4b:fd:ad:e3:06:8c:30:d0:a7:15:f7:0f:91:82:a4:
                    5c:b2:c6:86:1f:ed:b6:05:1e:ae:28:61:8d:51:78:
                    39:98:e7:3d:f0:4d:19:9a:c1:f6:95:7b:07:43:7e:
                    e2:5b:83:c2:14:31:66:57:c4:86:2d:97:63:a6:85:
                    9c:aa:64:71:12:7e:57:9a:6c:69:46:ab:23:d1:9a:
                    bb:34:de:e1:b8:18:49:03:59:4e:c0:3f:92:79:8e:
                    42:5a:91:5e:b9:4c:b1:e7:db:75:1f:7f:b6:db:b9:
                    ff:4f:b0:a4:46:a7:f8:e9:6d:40:e8:24:b0:88:92:
                    01:22:ba:d5:e4:42:3f:54:9f:16:10:46:9d:60:6b:
                    53:f7:f9:9e:94:29:96:03:79:02:d0:3a:2f:27:9c:
                    b8:4f:4a:0e:1e:8a:0a:22:db:ad:29:91:90:55:75:
                    24:0f:cf:0a:c9:59:38:9f:c2:14:ad:78:09:5b:88:
                    55:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FD:14:44:10:CB:D8:28:1B:40:AD:E5:9B:E8:F3:8D:31:C6:79:B8
            X509v3 Authority Key Identifier:
                keyid:01:DF:53:2E:9B:AD:DC:5B:96:BE:01:73:6B:6C:89:1B:FA:2F:4C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/01DF532E9BADDC5B96BE01736B6C891BFA2F4C89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c9:0e:9c:f7:51:ff:43:3b:59:69:27:ef:ee:0c:36:b7:fe:
         31:e9:79:bf:27:ce:28:de:ff:ba:fc:0d:87:bb:91:25:d4:b4:
         6e:20:5f:77:3a:e1:00:81:13:ac:29:8f:13:b5:ff:6e:f3:9d:
         93:b4:37:c4:dd:7b:78:7b:32:ca:0c:e4:ce:cf:9b:8e:08:68:
         83:fa:79:1c:8c:c3:28:97:b3:d4:35:e4:11:68:ef:60:6a:83:
         eb:3a:97:b6:f8:70:53:4a:4b:0d:a4:36:6a:00:ad:6c:3a:ce:
         31:a1:06:63:9f:60:f2:fd:85:94:7e:9d:d9:4e:fd:ea:a5:f7:
         f5:f4:c4:d6:ce:cd:3a:53:dc:32:c1:70:cb:ef:a2:d5:29:c3:
         cb:c7:70:e5:a4:4e:6e:50:5b:15:d1:ba:f1:c4:c5:af:99:cc:
         2b:ea:91:05:e8:d2:ae:93:97:6b:f6:48:a9:47:6f:68:ef:6b:
         5c:df:30:6e:a8:51:18:8c:9a:77:4e:0d:48:9f:c5:94:1b:ae:
         57:4b:48:ae:ba:71:c2:06:50:26:62:b9:0e:41:a1:aa:2a:b8:
         e3:92:27:d1:4b:fd:f6:96:84:e0:1b:ca:7f:79:ba:fa:c7:79:
         ac:4d:aa:8f:1b:bd:74:14:37:54:9f:ce:a2:af:05:ae:fd:5f:
         22:b2:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:43 2025 by rpki-client