Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
File:                     436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft (raw, json)
Hash identifier:          cNIifJO1SzNa19kuiIVmQ+SowwvxcqdOU61ZKak309g=
Subject key identifier:   17:2A:25:6F:59:18:88:4F:02:DF:AD:99:D8:A7:C0:4A:2D:B9:1D:E6
Authority key identifier: 43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61
Certificate issuer:       /CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
Certificate serial:       1CA487D0F4671F9A9A262D49BD310B37F4C4E758
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
Manifest number:          0199
Signing time:             Tue 04 Feb 2025 07:06:41 +0000
Manifest this update:     Tue 04 Feb 2025 07:01:41 +0000
Manifest next update:     Wed 05 Feb 2025 08:36:41 +0000
Files and hashes:         1: 3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (hash: eNLph14H+t/K0Hzr4wOPzbzNNB/0Es152wrjMpx8SSo=)
                          2: 436CDA1F9370BE6E582FE8897E382D5816B0AE61.crl (hash: twgJAmABn2Lps8/zL06HsYjO4yxhZcRDLkDjLKezrYA=)
                          3: 323830343a333564383a3a2f33322d3332203d3e20323636333130.roa (hash: NlomxSQuCyKGj1B/gLuGOUjTGq8ZIOu+BZSjoD5uTrU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a4:87:d0:f4:67:1f:9a:9a:26:2d:49:bd:31:0b:37:f4:c4:e7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
        Validity
            Not Before: Feb  4 07:01:41 2025 GMT
            Not After : Feb  5 08:36:41 2025 GMT
        Subject: CN=172A256F5918884F02DFAD99D8A7C04A2DB91DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:1e:32:b1:27:c3:ff:17:9a:d4:0e:15:a7:
                    8d:dc:c9:8e:ec:28:2e:68:09:94:f5:b8:ec:c4:7e:
                    92:e3:29:a2:e1:e2:ee:b8:b3:d7:1b:4d:0a:df:76:
                    ad:46:ee:09:cd:ab:9c:f2:9a:b9:0f:3c:94:21:33:
                    62:00:f0:cf:1d:04:41:41:e5:37:87:c4:e2:57:d5:
                    f0:e3:31:34:5a:07:2b:a2:55:d5:48:80:5c:cc:7b:
                    97:74:16:4e:fe:04:83:6e:78:49:f4:7b:20:ef:22:
                    84:8a:f0:9c:6a:3d:f5:96:bc:8e:c9:02:1a:0f:51:
                    5b:d9:24:a0:9b:d1:86:2b:42:a1:ca:84:df:e2:2c:
                    33:86:09:28:3c:98:43:66:ae:33:01:da:8a:85:69:
                    1a:35:48:d7:92:11:7d:f0:87:4e:24:8c:6a:ef:36:
                    21:16:65:b4:f8:5e:39:f6:61:3d:75:0a:36:00:c1:
                    3c:9e:d3:4e:6c:ab:f3:94:09:64:12:57:2c:6b:69:
                    e1:fa:00:e8:ac:2f:68:d7:af:46:29:38:64:c6:c8:
                    02:ec:1b:f6:d1:d5:17:63:0b:82:ac:b3:20:18:b9:
                    dd:60:7c:f0:67:5d:f6:84:e9:44:01:76:03:8f:88:
                    8e:b3:bf:d6:1e:61:0f:f6:23:a3:33:06:21:b1:8d:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2A:25:6F:59:18:88:4F:02:DF:AD:99:D8:A7:C0:4A:2D:B9:1D:E6
            X509v3 Authority Key Identifier:
                keyid:43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b9:67:90:ba:25:7e:b6:a3:ee:63:87:d7:10:0d:34:c5:b4:
         0a:f5:e8:12:70:95:28:68:c5:fe:27:49:c6:fc:76:76:7c:7d:
         b8:67:42:1a:8c:77:ec:5c:a5:a1:ab:c3:45:b7:29:8a:cc:54:
         c6:76:6d:2a:50:c4:fb:29:04:50:f8:18:e2:61:38:b6:37:36:
         0c:bb:39:c7:a2:8d:a0:c4:f6:95:7c:36:aa:20:43:16:64:98:
         72:76:61:88:4a:c3:b4:d4:59:dc:98:3d:f3:3d:fe:10:7a:66:
         0a:09:af:16:d8:04:87:6b:9c:08:7c:2d:a8:7e:0d:d7:aa:2d:
         6d:b8:84:25:84:5b:67:a3:25:d1:10:43:62:1d:16:23:da:c2:
         f7:46:75:29:81:c6:68:50:48:b5:d6:0e:68:5b:32:fe:95:aa:
         11:b9:76:10:0b:58:5d:b6:1d:55:7f:a6:01:6d:d2:28:ea:40:
         b7:85:8a:af:49:b8:4d:70:ff:0b:d4:24:ba:e8:d3:ee:56:f2:
         0d:83:18:aa:e6:d5:50:a2:65:e7:04:5a:25:96:fb:eb:c6:26:
         f1:64:39:48:d4:42:0d:ff:00:7e:23:22:a7:76:d1:aa:d4:c6:
         df:20:bc:00:ec:20:a4:9b:ec:4a:4e:05:a9:ae:ef:3b:cc:eb:
         24:8e:c9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:55 2025 by rpki-client