Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
File:                     99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft (raw, json)
Hash identifier:          ggmsuznmynQtJOmHut7IDUrB27N4o1WtVf61rhEowSs=
Subject key identifier:   F8:15:B4:94:C3:85:61:4B:15:38:6D:9A:CE:A3:EF:FA:C1:FF:39:D3
Authority key identifier: 99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
Certificate issuer:       /CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
Certificate serial:       691C2435AA8A667C0BF5C5BA890D12C614CC0733
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
Manifest number:          94
Signing time:             Fri 31 Jan 2025 06:20:00 +0000
Manifest this update:     Fri 31 Jan 2025 06:15:00 +0000
Manifest next update:     Sat 01 Feb 2025 08:15:00 +0000
Files and hashes:         1: 323830343a376639343a3a2f33322d313238203d3e20323632343733.roa (hash: aZspTiADTFpJNNJdM4EOQhFSlyaHWPqGsaaI6EF4RLU=)
                          2: 99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl (hash: NxQL793eB1Hpic6DqP/IvZjL6zcxitYvhkmQPaFSplE=)
                          3: 3137372e34372e3230382e302f32302d3234203d3e20323632343733.roa (hash: 6sePJQFcpPjqdR9mrTzZbtwzYPQrz3Sy9dVOFDqw0kg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1c:24:35:aa:8a:66:7c:0b:f5:c5:ba:89:0d:12:c6:14:cc:07:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
        Validity
            Not Before: Jan 31 06:15:00 2025 GMT
            Not After : Feb  1 08:15:00 2025 GMT
        Subject: CN=F815B494C385614B15386D9ACEA3EFFAC1FF39D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:f5:e8:e1:c9:e0:53:0d:ab:81:ff:96:d9:
                    eb:de:e8:8d:97:5d:9d:40:19:1b:05:ca:e1:45:c2:
                    8b:92:be:b0:74:50:75:56:4d:6b:72:f4:8f:95:d8:
                    08:cd:00:a9:8e:6f:04:76:5d:eb:ea:bb:10:98:99:
                    9e:d0:7f:77:79:a0:32:5e:3a:a7:63:f6:df:75:2d:
                    94:35:e2:fa:fe:00:13:78:ca:3c:f9:eb:38:89:83:
                    af:78:89:cc:9a:3c:ab:3c:bb:c9:41:01:74:89:7f:
                    54:6a:1b:1d:e0:8a:3f:55:b0:e5:88:33:cd:67:67:
                    a9:69:1e:08:c6:40:49:a3:80:20:71:c7:a2:ec:b4:
                    79:8f:7a:da:04:a5:ed:5e:70:e3:2c:8c:f8:97:24:
                    63:89:c8:1a:2a:70:5d:a0:e3:09:26:f3:bf:c7:75:
                    66:79:25:fa:7f:d0:72:99:1d:01:47:c5:51:bd:18:
                    50:4c:68:a6:af:b6:27:94:9b:dc:a0:86:19:62:42:
                    a5:68:67:5a:0c:c9:a2:56:cd:4a:86:31:dc:40:98:
                    e5:ca:10:50:60:7a:0d:fe:55:17:c9:1e:37:f4:72:
                    69:37:7e:c8:76:07:65:c2:37:37:39:92:9d:a5:c2:
                    7f:18:71:98:e6:f3:30:36:1a:ad:5c:42:39:6b:79:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:B4:94:C3:85:61:4B:15:38:6D:9A:CE:A3:EF:FA:C1:FF:39:D3
            X509v3 Authority Key Identifier:
                keyid:99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:44:ab:a1:51:22:b8:2a:02:f7:2e:30:be:b8:52:61:d5:
         fd:f1:40:db:f2:de:ab:e3:e7:5a:d7:5e:0a:33:c0:66:f4:52:
         1a:e9:99:4f:ed:87:dc:b0:5b:b3:33:c3:15:73:f4:2c:be:d4:
         e9:07:31:3b:0c:f6:3e:cb:ec:a5:8c:ac:75:fe:71:76:05:27:
         03:2c:ee:c3:13:0e:96:96:30:50:d7:5a:66:e6:07:e0:ee:3d:
         d0:15:a5:a5:cc:19:62:98:d0:90:76:b5:1d:87:4f:2f:47:f7:
         93:6a:b5:a2:fb:ce:9d:69:e4:f0:f0:cd:89:05:a7:d0:13:fb:
         53:88:2b:ea:4e:46:7e:10:25:14:7e:3d:36:5e:2a:1f:a0:9c:
         41:90:c7:af:fb:89:b5:07:d0:02:34:ce:3b:ba:75:cf:79:8e:
         33:f5:f5:93:1b:d4:21:4f:86:d2:3a:f2:b7:82:64:c7:fb:05:
         e6:79:bf:78:ec:8c:33:db:f7:5d:4a:d5:20:dd:95:58:2c:0a:
         3f:85:6f:0e:8f:46:8b:05:9c:8f:40:af:be:c7:e7:bf:ed:84:
         27:47:a9:31:77:de:aa:2f:b7:dd:9a:de:fb:ef:df:e9:83:35:
         b0:52:aa:b5:2a:de:76:cc:38:f7:fe:23:51:75:a6:4d:98:a5:
         c7:20:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:25 2025 by rpki-client