Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
File:                     B191F3F408D040D446471CC8A3AEA811CB825DF0.mft (raw, json)
Hash identifier:          mHuHF90FDrJgrpF05MZ6NK9o3/65Wa1BphZmu7aUo5Y=
Subject key identifier:   E1:18:0D:1F:86:E2:FD:6F:7C:A1:DB:72:71:57:03:4C:07:8D:0C:54
Authority key identifier: B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0
Certificate issuer:       /CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
Certificate serial:       12E149776B622934688BB28D3CA90A7D0BA276F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
Manifest number:          0195
Signing time:             Sat 29 Mar 2025 10:05:42 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:42 +0000
Manifest next update:     Sun 30 Mar 2025 11:00:42 +0000
Files and hashes:         1: B191F3F408D040D446471CC8A3AEA811CB825DF0.crl (hash: nIZAf8mmDuMm9AW8Zl2xQ54q6/SQYu7HgZW9ghwEgkM=)
                          2: 34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa (hash: om7vfxi0qkXNfAt10bpvyoe/KPP114CX0wikw2J3PiA=)
                          3: 323830343a346338303a3a2f33322d3332203d3e20323637333734.roa (hash: XOxnK2XgqfrETVcvgNpmBdpBdg8OsFIOYCOkAFMF3s4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e1:49:77:6b:62:29:34:68:8b:b2:8d:3c:a9:0a:7d:0b:a2:76:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
        Validity
            Not Before: Mar 29 10:00:42 2025 GMT
            Not After : Mar 30 11:00:42 2025 GMT
        Subject: CN=E1180D1F86E2FD6F7CA1DB727157034C078D0C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:fd:4b:d1:68:1c:99:87:e9:cd:cf:c3:3b:
                    61:68:74:d3:53:d8:3b:bb:8c:cd:a0:e9:81:8d:27:
                    3e:52:a4:12:54:38:70:14:65:2b:84:80:cb:2c:d3:
                    12:7c:28:46:81:4a:19:38:6f:c6:53:8b:d9:63:0d:
                    97:a2:73:d6:45:5f:5e:a5:a7:91:38:cf:0b:03:9f:
                    d0:a1:31:55:25:be:ef:e7:f5:74:a8:1f:e4:43:e0:
                    8c:27:8e:51:81:79:df:81:37:84:62:76:ec:d3:20:
                    39:84:4b:d7:a9:f5:09:d7:20:38:dd:81:1b:12:be:
                    0b:06:06:17:bc:a5:91:03:18:8b:ce:ec:86:e1:a8:
                    b9:47:28:59:80:b6:9e:b0:80:3c:7c:cb:42:54:8e:
                    8a:f1:92:20:dd:85:14:48:ec:02:a8:53:b0:9b:d7:
                    3d:bb:e0:84:db:f7:ea:1a:1b:d8:26:e9:e3:98:a8:
                    7e:97:a0:74:71:b7:31:5f:a6:60:c8:ad:8a:c7:22:
                    af:df:b6:d6:2c:8e:11:53:53:69:ae:9d:b3:ab:25:
                    c9:2a:0f:c0:5a:6b:bd:66:1a:54:e2:1f:28:5f:ca:
                    21:7e:a7:7d:df:1a:5f:ea:bb:f3:a8:d8:e8:3f:15:
                    33:5f:5c:80:33:c7:92:f9:2f:f6:77:26:ce:42:6e:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:18:0D:1F:86:E2:FD:6F:7C:A1:DB:72:71:57:03:4C:07:8D:0C:54
            X509v3 Authority Key Identifier:
                keyid:B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:c5:7f:14:4f:89:10:d9:e0:43:7e:73:4a:72:42:2d:85:
         6f:25:53:8b:5d:a5:bc:d8:20:a1:c2:24:cc:f7:80:e7:40:21:
         e6:3f:b9:5a:10:5b:22:fe:d2:e1:1b:b7:11:73:49:a9:82:54:
         8f:ab:52:f8:d3:c0:20:63:72:da:47:77:ab:de:1e:c8:50:f4:
         e3:f0:a3:a2:ba:ce:23:a2:b6:78:7a:8a:32:94:1a:5c:5d:f1:
         b5:2d:9e:30:2d:c2:82:cb:fc:ac:c1:c4:81:f3:79:c4:1e:35:
         1b:8d:14:bc:69:29:ad:ed:81:ea:a8:84:2d:8d:2f:aa:2b:35:
         d7:26:d3:3e:8a:1e:13:14:f5:df:0d:5e:4c:76:e5:00:d5:1c:
         b6:07:58:1f:4a:6a:d2:ca:ce:b3:f5:70:f0:90:d4:50:42:1a:
         6c:18:4c:94:83:f0:6c:e4:9c:86:88:90:21:f9:4d:87:22:c9:
         6d:25:ca:2f:fd:3e:17:ca:0b:e6:e2:ed:4b:09:e7:66:1b:8c:
         3a:04:96:dc:95:a1:ac:b1:ba:15:44:58:7a:30:37:46:0c:a9:
         77:60:3e:63:b2:9e:c1:60:3d:c1:e1:b8:88:be:79:02:63:3d:
         59:ab:4c:30:bf:eb:f9:cb:de:9e:98:56:92:4f:95:f2:7e:98:
         d6:60:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:25:50 2025 by rpki-client