Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/925696159919E2F97A353FB581F0ED123D7C7E8E.mft
File:                     925696159919E2F97A353FB581F0ED123D7C7E8E.mft (raw, json)
Hash identifier:          +3utfHVnuYz91ywpA2QTfWDY6aWc7Pox4IEVC9AoLFE=
Subject key identifier:   D5:6C:30:C7:2C:D9:51:F1:55:95:90:DE:8D:C1:DD:73:EA:43:6C:48
Authority key identifier: 92:56:96:15:99:19:E2:F9:7A:35:3F:B5:81:F0:ED:12:3D:7C:7E:8E
Certificate issuer:       /CN=925696159919E2F97A353FB581F0ED123D7C7E8E
Certificate serial:       6D0CF4A13750B8930D9C75613945CC0290349E73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925696159919E2F97A353FB581F0ED123D7C7E8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/925696159919E2F97A353FB581F0ED123D7C7E8E.mft
Manifest number:          20
Signing time:             Thu 02 Jan 2025 16:38:09 +0000
Manifest this update:     Thu 02 Jan 2025 16:33:09 +0000
Manifest next update:     Fri 03 Jan 2025 19:41:09 +0000
Files and hashes:         1: 323830343a333031633a3a2f33322d313238203d3e20323634393330.roa (hash: CuVvTl8BpxCp2qNQRAki5/zU+VRA+qeAwLqQCynXbbY=)
                          2: 925696159919E2F97A353FB581F0ED123D7C7E8E.crl (hash: mlDb4rGiQz7iWAdqJu4LVHhnlTP4QAyQs5Cr2vxhGJg=)
                          3: 3136382e3232382e3231322e302f32322d3332203d3e20323634393330.roa (hash: fE5kM93RcVWpzDXNEL06iVIvcAdgaB3bgQs1ivP3eCc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0c:f4:a1:37:50:b8:93:0d:9c:75:61:39:45:cc:02:90:34:9e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925696159919E2F97A353FB581F0ED123D7C7E8E
        Validity
            Not Before: Jan  2 16:33:09 2025 GMT
            Not After : Jan  3 19:41:09 2025 GMT
        Subject: CN=D56C30C72CD951F1559590DE8DC1DD73EA436C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:9f:61:5e:76:16:5c:92:c3:4f:b8:e5:21:
                    a0:1f:70:03:a9:3a:07:84:83:90:63:13:a1:63:b4:
                    63:46:6d:f9:6a:60:db:b0:c0:14:1b:b6:bd:76:4a:
                    0d:d2:6c:93:81:b0:1e:22:83:d7:b2:5e:d9:1b:1f:
                    ad:19:8e:ac:54:89:d4:6e:76:79:63:2e:5e:d7:d1:
                    00:dc:89:9f:56:09:b3:c3:c4:63:a9:ec:af:9e:7c:
                    f1:42:19:ac:6f:f4:15:bd:f6:7f:79:eb:0b:90:74:
                    ce:05:3f:6e:68:f4:56:05:6d:61:f9:6d:fb:de:b5:
                    d2:d6:71:0e:e7:1c:74:ab:0d:63:5d:9e:9e:4a:37:
                    17:10:1f:b7:55:fc:bd:3b:40:02:34:f3:35:89:ab:
                    7e:34:e0:32:ea:b6:0d:3e:77:98:a6:61:00:b4:f1:
                    67:fa:54:a2:fc:3a:c2:4c:43:f3:d6:3c:8c:0a:a3:
                    44:d1:9b:85:f8:32:9e:41:8a:f3:4a:a4:93:2f:65:
                    9f:8b:bd:9d:90:b0:4a:03:08:9a:cf:26:33:bb:65:
                    69:b8:6c:f9:54:06:8c:40:95:6d:f3:52:d3:25:f7:
                    3b:91:c3:f7:29:5d:94:8d:8f:78:e5:40:f8:d1:e7:
                    49:58:37:97:d6:88:af:b2:02:27:ce:d5:f7:90:b7:
                    2d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6C:30:C7:2C:D9:51:F1:55:95:90:DE:8D:C1:DD:73:EA:43:6C:48
            X509v3 Authority Key Identifier:
                keyid:92:56:96:15:99:19:E2:F9:7A:35:3F:B5:81:F0:ED:12:3D:7C:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/925696159919E2F97A353FB581F0ED123D7C7E8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925696159919E2F97A353FB581F0ED123D7C7E8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/925696159919E2F97A353FB581F0ED123D7C7E8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:97:50:5d:d2:e2:07:41:b1:53:7f:7d:1f:94:0a:ed:63:8d:
         08:63:32:db:34:8e:80:a4:7d:5f:5f:eb:44:70:1f:40:91:01:
         d0:60:47:db:9f:41:3b:7f:a0:b0:8d:6e:d0:a6:f7:c2:c4:d7:
         5c:7c:48:61:f9:f9:55:31:c6:39:1c:a9:96:cb:da:e9:c9:70:
         33:ca:e8:26:23:f7:02:33:83:8d:c3:85:f1:b5:02:0b:1b:33:
         1c:29:cc:b5:25:6a:f6:ae:0e:37:6a:55:44:7e:43:41:e9:52:
         31:f1:e0:77:53:b1:18:62:2c:35:8c:e0:1f:bc:47:08:0b:27:
         3e:48:ef:88:d5:98:40:db:b9:b0:6a:d1:d4:03:87:f3:cd:3b:
         6a:d0:9f:5c:a9:6c:09:db:d6:c5:d1:23:f5:31:c0:d8:f0:90:
         21:67:7e:9d:69:4e:c9:5e:17:ee:d3:a2:9b:87:9c:f6:61:44:
         76:d3:5a:04:45:21:af:0e:0f:66:25:f5:c6:8f:ef:39:17:9a:
         7a:19:89:ad:bd:a4:7c:99:e0:cd:e8:c2:64:5f:d2:9f:33:25:
         5b:86:36:29:0a:3e:74:c7:60:da:14:7d:ef:16:01:e5:79:76:
         e7:f2:49:d3:29:4e:b8:0a:bd:6f:3a:3b:a2:5c:00:ca:01:17:
         8f:d5:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:09:04 2025 by rpki-client