Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.mft
File:                     52519D71351C02D14D4BE69A71D2C09F76A4F333.mft (raw, json)
Hash identifier:          r3wf/yC/W86w0T53jGlLRA4N9JFGg3Taa+GTDiucLdY=
Subject key identifier:   E7:40:2B:B0:C6:E2:60:9C:22:AF:E8:59:6B:C2:47:9A:93:CD:44:D7
Authority key identifier: 52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33
Certificate issuer:       /CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
Certificate serial:       32847635E5519B4EBDF952F6538E5A731435523D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.mft
Manifest number:          6D
Signing time:             Tue 15 Apr 2025 09:15:33 +0000
Manifest this update:     Tue 15 Apr 2025 09:10:33 +0000
Manifest next update:     Wed 16 Apr 2025 11:42:33 +0000
Files and hashes:         1: 3137302e3233382e3136302e302f32322d3232203d3e20323636333237.roa (hash: zrMfllHbOzXHIqcpAGduR1OeXICvsRsaqToy/FF3Rtc=)
                          2: 3137302e3233382e3136322e302f32342d3234203d3e20323636333237.roa (hash: J9Tfg6T35TjHhGF+6eKJGBeBEb/OBs9TowNBAr1j8v4=)
                          3: 3137302e3233382e3136312e302f32342d3234203d3e20323636333237.roa (hash: 6Qqkl4nieTT9wrZoTIKOplU+UlQBpaCQ4oqKGWM2NFc=)
                          4: 52519D71351C02D14D4BE69A71D2C09F76A4F333.crl (hash: aTzgRV1CRIZfMZRZPkpmBZMxpEtMJQKt7DCdFCnFvnU=)
                          5: 323830343a333631633a3a2f33322d313238203d3e20323636333237.roa (hash: Anu39deOjIg4PJyptlG+N7uST8BFQaFVIYM0TgPTI4k=)
                          6: 3137302e3233382e3136332e302f32342d3234203d3e20323636333237.roa (hash: ROsnuifiLDkdhfYU5gp11AZexn7oQg+k1YWbEXQpS3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:84:76:35:e5:51:9b:4e:bd:f9:52:f6:53:8e:5a:73:14:35:52:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52519D71351C02D14D4BE69A71D2C09F76A4F333
        Validity
            Not Before: Apr 15 09:10:33 2025 GMT
            Not After : Apr 16 11:42:33 2025 GMT
        Subject: CN=E7402BB0C6E2609C22AFE8596BC2479A93CD44D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:b5:7e:3c:01:a2:a0:90:93:0f:40:dc:a1:
                    60:86:82:f5:70:ba:c3:72:7b:ff:ce:f6:e0:f3:4b:
                    7a:90:16:99:88:36:99:46:8a:11:2a:af:7c:88:c0:
                    93:70:8a:6c:b6:68:c0:96:30:6e:cb:4a:d3:81:70:
                    52:d9:ce:5e:66:f0:b9:3a:26:2b:b9:a2:cb:0c:e4:
                    32:45:95:e5:5f:e5:16:bd:d1:10:6f:2a:8f:38:0b:
                    83:3b:90:9b:4b:4f:39:d8:41:7d:c3:c1:9d:6f:c2:
                    e6:76:b9:38:ee:18:bb:ba:ef:4a:90:48:8d:17:18:
                    84:53:07:f4:80:0a:cb:12:4a:09:3a:c2:51:96:76:
                    c9:f8:3c:df:aa:0e:bb:4d:27:b2:40:72:84:e9:0b:
                    77:98:56:e4:db:a7:ec:ee:8e:85:20:df:77:fb:52:
                    eb:1f:b0:58:53:21:b5:54:d4:f4:cf:11:bb:49:c5:
                    97:c6:a3:95:ae:a3:19:ba:2e:8a:e5:20:a4:cb:57:
                    66:0d:76:1a:93:88:60:77:9e:df:5b:86:0c:91:c4:
                    56:3f:bf:c9:bb:47:7c:2b:78:bd:99:b2:db:f3:47:
                    0e:7f:a0:61:de:20:bf:59:a4:4d:9f:ea:d2:f4:cf:
                    75:c2:96:0f:83:3c:6e:84:c6:83:22:ca:92:5e:ab:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:40:2B:B0:C6:E2:60:9C:22:AF:E8:59:6B:C2:47:9A:93:CD:44:D7
            X509v3 Authority Key Identifier:
                keyid:52:51:9D:71:35:1C:02:D1:4D:4B:E6:9A:71:D2:C0:9F:76:A4:F3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52519D71351C02D14D4BE69A71D2C09F76A4F333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/52519D71351C02D14D4BE69A71D2C09F76A4F333.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:b3:c6:ec:b2:1c:99:89:3c:16:77:32:23:5d:20:38:f1:
         d4:6b:b4:31:d7:0e:54:be:2d:e5:80:f1:18:89:00:83:02:13:
         4a:b5:a1:fd:f6:d2:f5:3c:3e:e9:66:5f:15:fc:ee:b4:50:db:
         9b:44:cc:06:00:47:2b:d6:2a:62:0c:95:8b:cc:42:74:93:60:
         8a:ce:41:8f:48:76:68:b5:10:57:28:eb:e4:cf:20:91:73:25:
         c5:82:dd:87:7f:9c:c3:e6:8a:85:01:21:e7:85:17:75:77:18:
         d4:73:78:70:87:05:e0:26:5c:79:a3:66:3b:18:11:47:bb:67:
         e1:ba:29:3f:20:1d:46:3e:eb:f6:29:22:6e:7f:bb:64:c9:06:
         21:f1:69:be:e1:11:72:32:c0:f5:5d:ca:c8:3f:a2:3c:d8:6a:
         1d:a3:f0:7b:0b:1c:b0:ca:b2:dc:b7:ef:8f:a9:2b:44:21:d0:
         9b:0e:bf:e5:9c:fc:44:b7:b0:32:b2:0f:1a:10:ef:5e:6b:d6:
         85:e9:36:3d:59:a6:c5:49:fb:4f:b4:43:0f:01:69:ee:d8:d1:
         f8:87:44:d8:73:5c:96:9a:10:ca:ab:06:ef:b5:9e:c6:8e:98:
         31:6b:76:90:66:a4:f5:cb:04:d5:ed:57:18:eb:33:ed:3c:00:
         77:4a:9a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:32 2025 by rpki-client on console.sobornost.net