Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.mft
File:                     AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.mft (raw, json)
Hash identifier:          xnU9/OI58bbVtSC97uLKem+35kAbZ0NpfwXO1ITHxqA=
Subject key identifier:   00:0E:C8:81:BA:5C:7C:33:13:21:2A:7E:0D:E9:E0:B3:A4:33:F7:DB
Authority key identifier: AE:5E:9F:FA:E5:87:AF:4B:85:74:7F:A1:35:0E:E9:1C:3D:55:5D:B6
Certificate issuer:       /CN=AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6
Certificate serial:       4153C149FDEF645B96C3B2829F12A95B95D89DBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.mft
Manifest number:          0143
Signing time:             Sat 29 Mar 2025 02:05:54 +0000
Manifest this update:     Sat 29 Mar 2025 02:00:54 +0000
Manifest next update:     Sun 30 Mar 2025 04:46:54 +0000
Files and hashes:         1: AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.crl (hash: ZFK90NM7skmJB9Hl+8Bvh9hJ0xrfOIaKeE2xKVxySuA=)
                          2: 34352e352e3139362e302f32322d3234203d3e20323636313035.roa (hash: 9NAcBCXgr5iPPrjBj93kXIsKhrqTbH1xH5yVSEOW/AE=)
                          3: 323830343a336162383a3a2f33322d3438203d3e20323636313035.roa (hash: U242Og3vaOlnPFs7OIBjz3j2vDzSB416t1Zcszh+wp4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:53:c1:49:fd:ef:64:5b:96:c3:b2:82:9f:12:a9:5b:95:d8:9d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6
        Validity
            Not Before: Mar 29 02:00:54 2025 GMT
            Not After : Mar 30 04:46:54 2025 GMT
        Subject: CN=000EC881BA5C7C3313212A7E0DE9E0B3A433F7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:ef:09:46:f2:4b:e8:49:42:1a:80:12:4d:
                    c7:70:9d:10:4d:0a:e5:31:3a:df:c5:59:5c:10:db:
                    ea:7d:2a:c4:40:cc:39:e2:d9:90:fb:3b:2f:10:62:
                    1d:dd:a0:64:21:ee:b6:09:b2:d0:9f:f8:b4:a9:96:
                    b5:d9:69:73:ab:de:c1:4d:7c:40:2f:fe:3d:93:7b:
                    30:a1:d2:ea:ef:db:66:0e:eb:38:83:c1:01:ce:b5:
                    05:79:05:a9:fc:89:7f:80:cb:f5:81:1b:8d:a1:51:
                    df:c6:df:02:19:e6:1b:3f:00:41:ab:7f:d5:45:c9:
                    d3:e2:26:be:2f:66:e5:bf:4b:4f:f3:3a:51:11:32:
                    08:73:36:84:cd:f9:af:35:06:6f:cc:af:f0:a9:a3:
                    5f:bd:e1:87:ff:d5:b2:26:1e:95:81:3a:96:39:8f:
                    af:f8:4a:b1:5e:4e:3e:e7:e5:e7:06:2a:c9:78:fc:
                    64:51:70:9d:9e:4d:70:ef:f4:40:3c:93:a1:52:17:
                    ae:36:46:8a:58:eb:ba:de:d7:6f:86:d7:46:1c:56:
                    6d:67:0b:c1:5d:9f:00:80:9f:09:ad:02:a3:bc:ba:
                    9a:0e:f5:23:68:42:21:d1:c6:6c:48:9b:77:1a:5a:
                    0c:b6:64:59:55:0a:cb:36:04:f0:80:be:ad:55:a2:
                    95:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:C8:81:BA:5C:7C:33:13:21:2A:7E:0D:E9:E0:B3:A4:33:F7:DB
            X509v3 Authority Key Identifier:
                keyid:AE:5E:9F:FA:E5:87:AF:4B:85:74:7F:A1:35:0E:E9:1C:3D:55:5D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/AE5E9FFAE587AF4B85747FA1350EE91C3D555DB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b1:a7:a3:f2:8a:b2:7a:bf:06:10:78:2a:89:dd:b2:9e:9d:
         f5:8b:c6:62:f9:43:6f:81:9f:fd:ad:42:89:7b:68:21:44:23:
         5f:7f:ed:a5:5c:8e:a7:40:47:5c:ab:b9:2f:60:9d:0b:9a:09:
         2c:31:96:df:d7:e5:b9:d6:46:76:0f:03:1e:e6:0f:90:94:31:
         01:8e:cd:2e:3d:3c:cd:a7:18:56:46:25:5f:54:ed:e2:f3:be:
         43:45:38:7f:f0:6b:a0:1a:69:f8:48:cb:e4:6e:21:fe:84:cc:
         44:0d:f9:fc:65:cf:22:c6:2d:91:de:f4:cd:92:86:76:cb:06:
         35:09:1c:46:b9:82:54:39:d3:3f:11:cf:c5:bf:ef:e5:46:e9:
         07:76:c6:75:6a:3a:79:c8:dd:b9:03:1d:c9:0e:59:3e:98:43:
         eb:c4:3e:07:e1:9d:c9:94:d4:e8:14:10:ae:d1:c5:43:09:87:
         2d:37:5d:36:ab:1f:f2:54:c7:96:2a:5b:97:42:47:53:9f:b7:
         96:c9:44:30:d2:79:8b:cf:89:4f:ea:41:d6:62:c4:6f:9a:29:
         78:96:76:29:1b:3f:88:5f:5c:db:d9:af:37:8a:c5:2f:bb:b0:
         be:5f:fb:46:9f:f8:94:65:2e:18:82:f5:5f:87:f4:ab:f7:df:
         ec:15:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:11:37 2025 by rpki-client