Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/D64432622045CF88FC9FB1F1E231D035D6488056.mft
File:                     D64432622045CF88FC9FB1F1E231D035D6488056.mft (raw, json)
Hash identifier:          AfEtkuhKa6sfiKpV3A7K2AN371zEj2gt3hgpD9eXYHA=
Subject key identifier:   65:71:D6:89:F7:E3:D0:5E:3B:04:F8:2E:20:9B:98:45:8E:5E:AA:1E
Authority key identifier: D6:44:32:62:20:45:CF:88:FC:9F:B1:F1:E2:31:D0:35:D6:48:80:56
Certificate issuer:       /CN=D64432622045CF88FC9FB1F1E231D035D6488056
Certificate serial:       1F5145951B591471F56A3DD836369B7FB51ED8F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64432622045CF88FC9FB1F1E231D035D6488056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/D64432622045CF88FC9FB1F1E231D035D6488056.mft
Manifest number:          19
Signing time:             Sun 05 Jan 2025 19:49:31 +0000
Manifest this update:     Sun 05 Jan 2025 19:44:31 +0000
Manifest next update:     Mon 06 Jan 2025 22:21:31 +0000
Files and hashes:         1: 34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa (hash: uZmAGjgwcjXlSrA/7q2dN9thOHgz+PFHiio2ghthHTU=)
                          2: 34352e3137332e3232302e302f32322d3234203d3e20323638383239.roa (hash: hO4yjxku6mOIsjRCXGm9QqC526KxVNrZ/XgKF7bcJhE=)
                          3: D64432622045CF88FC9FB1F1E231D035D6488056.crl (hash: dBRmyi1NZc+pe5tMVCHibSM+YSu4RH4sq99mdwQEUJM=)
                          4: 323830343a356234303a3a2f33322d3336203d3e20323638383239.roa (hash: hZRzVUVgCJG3jPZRAVPLDj+HNnDbQS1wtL7JEwFzxD0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:51:45:95:1b:59:14:71:f5:6a:3d:d8:36:36:9b:7f:b5:1e:d8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64432622045CF88FC9FB1F1E231D035D6488056
        Validity
            Not Before: Jan  5 19:44:31 2025 GMT
            Not After : Jan  6 22:21:31 2025 GMT
        Subject: CN=6571D689F7E3D05E3B04F82E209B98458E5EAA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:da:22:9e:b1:01:a5:ae:87:19:fd:cf:74:
                    52:b6:83:bb:f8:02:f9:88:4f:e9:0c:55:60:ac:79:
                    75:dd:b3:39:e8:25:2c:97:4d:68:1c:2b:96:f6:e9:
                    41:bf:b2:30:24:6c:e1:5c:d6:71:d0:25:8b:22:18:
                    91:4d:1a:5a:ef:04:43:fd:12:c3:46:da:15:ba:09:
                    6d:01:e5:1a:7e:43:e0:16:6d:96:34:67:b4:2f:74:
                    a3:32:a6:cb:fd:82:c0:5b:33:1a:0f:57:2d:d8:0e:
                    1f:4b:8c:8e:97:8d:2e:0e:a6:ed:38:5d:9d:8a:2b:
                    c8:d8:b4:8d:48:16:62:9c:f5:67:ae:17:6a:f0:29:
                    ce:1f:a5:cd:26:34:cb:f3:95:f1:9a:99:eb:ab:06:
                    ce:1b:3a:21:46:c6:c1:65:db:12:29:2a:02:97:e8:
                    92:ed:6a:20:c0:9f:af:a1:1b:d3:95:3e:fd:30:58:
                    c6:41:8a:6b:e0:3b:20:f5:93:cd:7a:c8:45:32:81:
                    4b:e1:29:5b:a5:a9:b8:c2:3d:23:f7:a0:a0:2f:53:
                    7d:ce:25:31:aa:27:07:82:7c:b8:d3:1a:71:c0:22:
                    4f:0e:dd:63:27:01:b6:be:41:8e:e5:be:dd:2c:49:
                    d6:c6:84:a9:7a:35:5e:24:c5:fd:36:dc:e0:25:39:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:D6:89:F7:E3:D0:5E:3B:04:F8:2E:20:9B:98:45:8E:5E:AA:1E
            X509v3 Authority Key Identifier:
                keyid:D6:44:32:62:20:45:CF:88:FC:9F:B1:F1:E2:31:D0:35:D6:48:80:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/D64432622045CF88FC9FB1F1E231D035D6488056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64432622045CF88FC9FB1F1E231D035D6488056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/D64432622045CF88FC9FB1F1E231D035D6488056.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:09:86:87:8f:2a:6e:74:bb:1b:d8:30:b5:64:c6:3a:62:
         5d:97:5e:3c:e4:ab:04:13:2f:35:12:2f:4f:ea:c9:c9:60:8f:
         a9:20:a8:97:23:b9:d0:84:36:45:d7:0a:f1:d9:ec:6c:43:10:
         be:8c:67:d0:05:f4:99:1f:af:1a:95:5a:3e:b4:4f:7e:36:b1:
         ba:fb:68:06:14:2c:ba:70:85:71:76:0f:68:76:0e:80:eb:ff:
         86:73:47:61:45:8a:32:bb:15:32:d0:d7:21:0e:29:44:bb:31:
         a2:96:45:dc:9a:86:f7:60:a3:bf:b1:2e:84:19:cd:9e:83:bb:
         14:f4:32:35:d1:bd:4e:fd:d6:29:83:e7:da:1d:be:2c:04:d7:
         27:91:57:56:48:b8:85:66:26:6a:00:ec:65:5c:0d:ee:e3:db:
         34:df:86:cf:30:83:3f:21:50:73:9b:11:bb:0d:b1:f7:0c:3b:
         9f:de:fc:be:07:1a:52:2c:05:3d:0a:d8:49:b2:d5:3b:a6:be:
         dc:de:e3:1b:19:5f:b0:09:3e:4c:c9:1d:79:c1:1b:44:61:04:
         51:f1:8f:71:13:0c:07:77:99:56:f2:d0:70:d0:92:e6:a0:54:
         f5:98:8d:a8:a1:70:c2:44:61:6c:0e:b2:a6:fa:b2:4c:03:3a:
         ee:1a:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:28:48 2025 by rpki-client