Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.mft
File:                     1AFAA32A4C291B7BD8C6E429F97A286694BFE576.mft (raw, json)
Hash identifier:          iGCV4Up87iXdSehOhc5KM43CDmyqngcUlkyuUvKYkHA=
Subject key identifier:   8E:98:7C:03:11:DA:2F:C3:8E:3B:F5:55:61:4D:63:80:8A:E9:E1:C2
Authority key identifier: 1A:FA:A3:2A:4C:29:1B:7B:D8:C6:E4:29:F9:7A:28:66:94:BF:E5:76
Certificate issuer:       /CN=1AFAA32A4C291B7BD8C6E429F97A286694BFE576
Certificate serial:       0652240CE1DFA4D4BA77933528010789278F5435
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.mft
Manifest number:          52
Signing time:             Thu 06 Apr 2023 11:47:28 +0000
Manifest this update:     Thu 06 Apr 2023 11:42:28 +0000
Manifest next update:     Fri 07 Apr 2023 13:13:28 +0000
Files and hashes:         1: 34352e3136372e35302e302f32342d3234203d3e20323637393935.roa (hash: lFxA4NTD+VuhheXtDxd9BMBV/f5VFY9c0v2B+fE8lXA=)
                          2: 1AFAA32A4C291B7BD8C6E429F97A286694BFE576.crl (hash: PHZ66XUzXOzzua1PPKnIyCrbGo+nnXs8/YtTokklItU=)
                          3: 323830343a353636343a3a2f33322d3438203d3e20323637393935.roa (hash: AsQn23eip7ir3kCRCmOJbdZxLawgwz8y3EAZRrc7rNQ=)
                          4: 34352e3136372e34382e302f32342d3234203d3e20323637393935.roa (hash: SavOOCXY5ct3ardo8ebWuqOE7Fvy9/ylaMXJKnregyk=)
                          5: 34352e3136372e34392e302f32342d3234203d3e20323637393935.roa (hash: 9whvDtPlq9ViM3RXBEV+Jg2NgtWOQtqePCK/ZnZNZzg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:52:24:0c:e1:df:a4:d4:ba:77:93:35:28:01:07:89:27:8f:54:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFAA32A4C291B7BD8C6E429F97A286694BFE576
        Validity
            Not Before: Apr  6 11:42:28 2023 GMT
            Not After : Apr  7 13:13:28 2023 GMT
        Subject: CN=8E987C0311DA2FC38E3BF555614D63808AE9E1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:50:87:3b:32:6a:71:92:e4:e1:b6:0a:4a:
                    4d:e9:bc:f6:1b:04:bc:a5:58:85:9a:ac:df:0f:0e:
                    79:91:6d:12:52:0f:92:33:6e:2d:05:26:c9:24:8a:
                    10:42:3b:e5:89:34:fc:a8:97:d7:d1:65:87:ea:3d:
                    d6:9e:c4:3d:a3:b8:9c:05:d1:d0:20:a2:a8:ee:52:
                    23:fe:73:b5:46:6b:ea:d4:6a:7d:e0:38:87:63:33:
                    f6:fd:59:68:91:a8:1f:8b:c2:87:dd:3c:f1:ec:a6:
                    e3:f3:f1:16:c0:52:47:5a:c9:e6:9f:00:9c:f2:82:
                    73:6e:61:c0:ec:12:42:96:91:87:59:85:30:bb:22:
                    c2:74:9e:0d:1a:04:c9:b4:f1:ed:26:4a:38:0c:8f:
                    16:6f:cf:43:46:e3:ed:85:9d:c5:e5:fd:e0:97:79:
                    1c:52:6e:eb:0a:9f:f7:36:4b:1a:88:53:9b:20:87:
                    90:bc:64:1c:2a:df:fd:17:a0:1f:47:29:ad:f1:4c:
                    68:3e:d0:99:62:7c:1f:d7:89:2d:e9:d3:94:11:42:
                    91:bc:63:42:74:5f:8d:e9:c0:4f:85:f6:2e:3d:99:
                    3b:3c:33:87:95:83:9e:fe:6b:20:3e:48:d2:1e:6b:
                    de:ce:78:35:07:6a:9d:7a:64:a6:e0:10:3b:0c:00:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:98:7C:03:11:DA:2F:C3:8E:3B:F5:55:61:4D:63:80:8A:E9:E1:C2
            X509v3 Authority Key Identifier:
                keyid:1A:FA:A3:2A:4C:29:1B:7B:D8:C6:E4:29:F9:7A:28:66:94:BF:E5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/1AFAA32A4C291B7BD8C6E429F97A286694BFE576.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:1d:3a:45:b3:67:da:89:e9:ea:8c:3d:2d:8c:d5:43:b8:1a:
         92:53:ed:2c:fd:e6:6b:d1:bf:99:4c:ef:51:00:c3:71:4d:17:
         c8:1e:4f:f0:1c:d8:5c:b7:6b:17:1c:f4:65:cc:90:d4:12:76:
         46:82:75:21:e6:b2:72:e4:b8:ff:95:61:f5:4d:67:db:aa:a2:
         2e:b1:4a:5c:8d:6a:a4:bd:66:4f:10:3c:5a:5b:9e:e7:72:a6:
         6c:5f:c7:fa:9b:b1:33:cb:26:3c:2c:4c:8e:52:ac:85:91:eb:
         30:a1:5d:a6:ce:9d:51:a2:24:ff:67:3e:8f:ec:64:c4:ed:bb:
         32:71:b6:65:26:e3:24:33:0c:d5:6b:09:b5:3c:a4:cf:29:40:
         76:3f:be:06:d3:aa:31:8c:5d:b3:25:fd:e7:fe:fd:83:e1:e1:
         d7:49:5f:f6:d1:ad:59:e0:00:d0:17:9e:f7:a7:df:62:92:8b:
         78:65:72:d5:61:83:02:84:5f:61:b9:42:38:7b:59:b0:be:96:
         e4:db:f3:ca:df:98:26:13:76:2b:37:12:26:1e:c9:cd:29:ab:
         f1:88:78:3e:b7:8c:71:81:fa:3f:fe:0d:7a:0a:40:3e:4f:cd:
         e0:8d:c3:6e:c4:ee:d3:b4:5c:83:76:19:87:72:0b:b8:7b:c8:
         ed:4c:70:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:22 2025 by rpki-client