Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.mft
File:                     5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.mft (raw, json)
Hash identifier:          S/rQfNjUypvs4z8L34k0jXBHAGIKasXk18kc6vUFEJs=
Subject key identifier:   14:01:0D:B3:B7:85:0D:99:C5:EE:08:A9:EC:1B:29:2E:DF:41:58:97
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Certificate issuer:       /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial:       67298D59EFFC7C6B5A3282C0CD534DA64CECE5E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.mft
Manifest number:          AF
Signing time:             Fri 28 Mar 2025 20:19:17 +0000
Manifest this update:     Fri 28 Mar 2025 20:14:17 +0000
Manifest next update:     Sat 29 Mar 2025 21:57:17 +0000
Files and hashes:         1: 323830343a356236383a3a2f33322d313238203d3e20323638383431.roa (hash: Cs+uq9vFhdRNy+GtyRE6p9XYdlv8fxOVSmG9xn+y5Uw=)
                          2: 34352e3137342e302e302f32322d3332203d3e20323638383431.roa (hash: dIkODrAmCajAgpaeufnz16IdTB09FZGbxPjxUGSxr50=)
                          3: 5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl (hash: AmwpdsflfhHV7p+JNYSi8sYbjJ3kVrz1t8IQl/hA3/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:29:8d:59:ef:fc:7c:6b:5a:32:82:c0:cd:53:4d:a6:4c:ec:e5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
        Validity
            Not Before: Mar 28 20:14:17 2025 GMT
            Not After : Mar 29 21:57:17 2025 GMT
        Subject: CN=14010DB3B7850D99C5EE08A9EC1B292EDF415897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:22:a4:80:6b:d9:63:4d:72:30:30:29:70:
                    51:77:96:d3:30:1e:80:cc:35:e6:ff:2d:fd:55:88:
                    a1:6d:6d:7c:21:83:52:b2:27:cb:44:19:11:eb:79:
                    e2:5f:c7:f9:7d:a4:f9:7a:83:f6:bd:39:c4:12:9b:
                    7d:68:b2:5a:2a:7c:14:99:73:7a:dc:dc:dc:87:85:
                    bb:70:a7:0f:52:27:63:9d:d4:03:a6:be:96:61:e4:
                    c9:23:81:11:3f:7f:0f:6e:5f:7d:22:cb:73:73:be:
                    6c:20:87:18:19:54:8a:16:4c:27:3e:c3:62:1a:6f:
                    4a:57:92:0c:2d:f8:7d:7f:bb:88:7d:1c:6c:2d:b0:
                    1c:e8:8b:8c:79:2e:9d:35:5d:c1:c3:b6:3e:9a:f0:
                    50:b6:57:ca:fb:20:0e:e8:be:b3:3c:dc:f4:ef:a9:
                    a7:37:3e:e2:ca:ab:aa:f4:62:07:b2:df:51:c6:65:
                    ec:e9:63:2c:4f:28:75:11:7b:26:74:93:c7:f6:95:
                    96:92:b7:dd:30:02:0d:40:9d:a4:ee:02:2f:f1:e1:
                    c6:c9:5c:06:73:d9:a9:b4:ad:12:49:b1:9f:f8:ae:
                    32:4d:cb:2d:75:b5:9a:73:47:9f:e3:ae:4b:2a:f2:
                    03:fe:8d:0e:14:91:bb:c5:1b:57:bc:e0:c8:7a:d3:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:0D:B3:B7:85:0D:99:C5:EE:08:A9:EC:1B:29:2E:DF:41:58:97
            X509v3 Authority Key Identifier:
                keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c2:f0:1f:c9:af:9e:e7:32:2b:12:78:78:13:5b:a1:71:fc:
         46:76:2c:3f:47:1f:83:73:2f:91:83:30:13:67:d1:e3:09:a5:
         25:4d:75:06:fc:c5:43:b3:0e:43:4e:ae:f9:ff:d6:73:16:be:
         4c:71:62:67:06:44:4d:64:a1:4a:7f:e0:5a:a3:62:cd:7a:20:
         a5:b0:4f:73:cc:f1:40:50:ea:1b:d5:63:b0:5b:0c:6e:71:5b:
         5d:f8:4a:2b:f9:7f:a8:7b:af:3d:60:bb:ec:87:db:c1:7e:25:
         50:19:26:a1:06:b1:64:7f:a7:75:8d:f6:ca:31:95:6f:0f:42:
         7b:74:39:57:36:d4:a5:11:fd:c3:65:ee:65:59:b2:1a:fd:57:
         ff:70:f6:2a:75:4c:8c:ad:70:bd:f0:fb:82:38:78:bf:ad:18:
         9b:bd:e1:ed:ba:10:27:1c:c9:5f:27:2d:46:56:73:b5:42:d5:
         b4:0b:d1:ec:bf:d5:80:91:4c:46:1b:4a:10:f8:fb:c4:55:62:
         ba:cf:38:0a:bb:20:73:cd:fd:52:32:1d:00:15:be:a6:7b:23:
         9d:7a:80:71:45:fd:65:86:7f:5e:99:d7:46:65:98:e8:89:24:
         a2:cc:d5:1c:c4:41:d7:4e:95:3c:f3:7a:ab:e1:37:5d:76:c0:
         31:c8:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:48 2025 by rpki-client