Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft
File:                     A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft (raw, json)
Hash identifier:          qSZG+1fJqefCYyod/5339lwoJnweU4deiBTPGURI/h4=
Subject key identifier:   AF:6A:86:13:02:22:B4:A0:CD:40:E6:AC:C2:C7:F4:DB:3D:AA:28:E9
Authority key identifier: A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F
Certificate issuer:       /CN=A5D7C61DBB9645C282D594045FD27D9E265B6A5F
Certificate serial:       B39A0581B9BF2023EADF7E6BFB4FDD9A1350A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft
Manifest number:          20
Signing time:             Fri 07 Feb 2025 09:12:12 +0000
Manifest this update:     Fri 07 Feb 2025 09:07:12 +0000
Manifest next update:     Sat 08 Feb 2025 10:47:12 +0000
Files and hashes:         1: A5D7C61DBB9645C282D594045FD27D9E265B6A5F.crl (hash: RjjDXIS9doXO7uf3rFzJsIc/3piJhW0WXBNbhQgtrTg=)
                          2: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: q3ycRynzJnT3HY8sjI8CsEdtDdcL7HGnLY1kn02NNTg=)
                          3: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: uXWPOiQNSmtMcn7q5XeKg+PYtDPJSsTsQ1H9tWRPUas=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b3:9a:05:81:b9:bf:20:23:ea:df:7e:6b:fb:4f:dd:9a:13:50:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D7C61DBB9645C282D594045FD27D9E265B6A5F
        Validity
            Not Before: Feb  7 09:07:12 2025 GMT
            Not After : Feb  8 10:47:12 2025 GMT
        Subject: CN=AF6A86130222B4A0CD40E6ACC2C7F4DB3DAA28E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:06:81:0b:44:1c:07:94:9f:c0:ef:45:04:
                    ef:52:a4:fb:df:75:f0:0d:79:55:b7:5c:92:29:f5:
                    01:50:a5:c3:dc:c6:50:a6:49:4f:8b:a0:78:89:75:
                    8e:0a:fb:21:76:dd:b5:05:83:41:07:d7:3c:dc:c6:
                    62:79:14:34:42:cf:09:a6:46:7d:3d:55:1e:4c:ee:
                    64:7f:51:b8:df:0d:a5:fb:7e:38:e6:a3:8a:e2:a7:
                    29:e0:2c:41:58:47:dc:f9:a8:fb:60:6c:d6:04:e5:
                    44:a9:df:8a:61:8d:31:0d:cf:05:63:d2:76:b3:ff:
                    d4:27:76:4f:f4:bb:a1:83:ec:c3:b5:78:ad:c8:1b:
                    da:1a:15:bb:55:91:c9:23:08:88:c4:96:f7:d0:ad:
                    08:1f:8d:98:5a:84:fb:1c:58:26:6f:a4:25:8f:9e:
                    42:3b:43:fe:de:f8:7e:a4:64:32:cb:73:33:e1:54:
                    59:9d:7a:93:e7:6f:a1:de:85:46:44:31:39:7b:6b:
                    3d:97:90:80:75:bc:79:a3:7f:cc:a3:23:64:7c:4e:
                    dd:e6:27:b4:d1:f7:09:7c:05:e3:e1:6c:75:c9:ed:
                    de:34:de:e4:1e:8f:a1:b4:89:74:68:6c:c9:a2:75:
                    fb:72:73:0c:10:99:f1:fc:d2:0a:b7:a7:58:36:02:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:86:13:02:22:B4:A0:CD:40:E6:AC:C2:C7:F4:DB:3D:AA:28:E9
            X509v3 Authority Key Identifier:
                keyid:A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:14:bb:bc:1a:2c:7b:cf:4b:10:d0:5c:ad:0c:0f:e2:ed:
         ee:98:f5:e9:0f:39:50:5d:9e:0d:c1:ec:68:84:72:57:c1:8a:
         1a:22:65:ee:13:11:27:b6:22:4e:e2:ce:18:c5:e9:e2:1f:40:
         45:54:7b:0c:ff:d0:c2:f1:c3:ba:a7:66:35:4b:c0:db:74:52:
         df:a2:97:35:c6:67:e6:a8:c3:fa:71:67:74:e2:db:a1:53:c4:
         6b:27:18:3c:a9:93:92:bf:80:e8:84:5f:27:2a:b9:15:52:aa:
         7c:27:3f:db:56:8a:c6:b7:d8:d1:11:ca:d3:c8:a0:31:40:29:
         4b:65:6c:a1:39:94:47:11:55:b0:65:6c:34:ae:d8:df:e3:13:
         26:28:42:c1:32:25:74:fa:4f:b0:b0:d1:c0:1b:40:82:92:29:
         18:78:79:ff:81:e4:c9:ca:47:2a:59:bc:9c:0b:be:ce:62:67:
         c7:24:ad:36:d6:98:14:ea:7f:28:b9:c1:9d:b5:7e:56:0d:8a:
         8e:b7:3d:0a:66:ab:a1:6b:9c:3d:7c:48:11:8c:f0:e0:c5:e5:
         95:b4:98:ed:a4:c0:46:0b:57:00:c7:bc:43:57:71:04:e4:a6:
         0e:02:90:be:1b:e1:d3:cd:0e:48:68:ef:af:9c:b6:dd:0e:e4:
         b4:e0:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:15:06 2025 by rpki-client