Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.mft
File:                     1831D063E0344DB28842F9021C022493CC6A6192.mft (raw, json)
Hash identifier:          OHYHyzl2++sonXGAweEnnFP5wSJe5Pl5ZJNMJxYm4kU=
Subject key identifier:   7B:A4:1C:6E:CB:96:78:42:82:76:3B:30:55:F8:42:EC:6D:BF:F0:73
Authority key identifier: 18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92
Certificate issuer:       /CN=1831D063E0344DB28842F9021C022493CC6A6192
Certificate serial:       65265DEB2A626C4E66993260F1F847EE30A7390C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.mft
Manifest number:          019F
Signing time:             Fri 31 Jan 2025 09:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 08:55:19 +0000
Manifest next update:     Sat 01 Feb 2025 09:54:19 +0000
Files and hashes:         1: 34352e3232362e342e302f32322d3234203d3e20323636393533.roa (hash: lp3Icwy1tSWTlwAXxZ+DnFRHYyTnB5M+iMfFzOlmiGI=)
                          2: 1831D063E0344DB28842F9021C022493CC6A6192.crl (hash: x61HkQTeF3Z3iU0bMKgOOVeX2zzXuPpJNrfP5QovxH8=)
                          3: 323830343a343564383a3a2f33322d3438203d3e20323636393533.roa (hash: KWnDRy2PvQo+6BIRE9vodEMIv2YeGoj1KkhbPPy1gCY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:26:5d:eb:2a:62:6c:4e:66:99:32:60:f1:f8:47:ee:30:a7:39:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1831D063E0344DB28842F9021C022493CC6A6192
        Validity
            Not Before: Jan 31 08:55:19 2025 GMT
            Not After : Feb  1 09:54:19 2025 GMT
        Subject: CN=7BA41C6ECB96784282763B3055F842EC6DBFF073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:1d:00:4c:53:04:de:44:36:06:20:26:75:
                    b0:38:e8:c3:67:e2:a8:fb:68:15:41:47:ab:1b:28:
                    f0:fc:d3:85:73:bd:aa:c2:65:29:47:96:9b:08:4a:
                    60:49:ab:80:8d:82:e0:db:bb:49:30:9e:ee:72:db:
                    33:7f:69:e1:c1:fd:4b:db:5a:86:ee:fa:94:24:83:
                    e6:47:d5:9f:8e:22:6f:c3:a0:15:c4:16:1e:bf:52:
                    5d:48:4a:f4:d8:3a:a5:ef:c0:2c:24:a1:56:6b:09:
                    0c:e2:cb:a4:d2:f2:df:d1:1f:07:0d:c5:bb:c5:5f:
                    56:2a:e4:f9:85:21:19:c2:ce:6e:41:fe:ad:be:5c:
                    a5:b3:15:18:10:2d:71:60:6e:d0:5d:9b:2f:63:99:
                    3a:d1:08:dc:ff:61:bc:9d:9d:ce:84:dc:11:b3:27:
                    cd:14:5f:39:5b:2c:f5:b3:eb:1c:55:b2:32:4c:98:
                    e9:73:ac:a3:69:9e:0c:ad:17:b4:29:f6:65:af:5b:
                    ec:9f:1d:f0:8e:28:d9:f0:e2:2e:05:55:1b:94:b9:
                    53:91:0d:d1:b3:dc:c7:0e:ae:1b:8a:68:00:11:f3:
                    f3:b8:d4:55:20:d7:e7:fe:20:63:ba:bd:b4:7e:2f:
                    50:c9:32:29:4a:fc:ed:f6:39:ef:7b:8b:da:c6:0e:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:1C:6E:CB:96:78:42:82:76:3B:30:55:F8:42:EC:6D:BF:F0:73
            X509v3 Authority Key Identifier:
                keyid:18:31:D0:63:E0:34:4D:B2:88:42:F9:02:1C:02:24:93:CC:6A:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1831D063E0344DB28842F9021C022493CC6A6192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/1/1831D063E0344DB28842F9021C022493CC6A6192.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:1a:13:54:b5:b9:24:b8:68:1d:4f:86:e5:6c:ad:10:8f:
         4e:27:99:16:9f:7c:cd:56:ff:a4:39:a1:57:2e:5e:22:db:22:
         bf:68:bb:bb:d9:48:65:49:7e:be:6c:4f:46:ad:81:46:50:79:
         cd:99:55:23:4c:73:68:fd:00:25:fc:7e:d1:14:33:06:74:de:
         70:0c:cb:e5:13:77:7a:ea:95:83:ab:67:07:29:19:95:61:66:
         80:8a:72:9f:3d:6d:e7:63:55:ab:ac:ba:7d:97:7f:22:4b:dd:
         ae:a3:1d:33:13:f3:02:eb:29:80:40:00:64:35:82:4b:37:b1:
         40:43:30:ca:bb:61:11:36:53:a1:e0:3c:31:e2:22:2f:3b:af:
         d5:f4:2a:38:4a:10:30:0a:c1:62:a2:88:41:3d:9e:7d:7a:cb:
         7b:2c:bd:7c:0a:0c:8f:92:43:4c:08:0e:49:08:c1:91:83:88:
         6e:f7:4b:b3:7d:a2:99:aa:70:ff:16:46:d6:97:a9:0a:58:4f:
         57:79:f8:0b:d5:af:f3:f4:80:ce:2d:3b:2d:45:a9:b0:e0:0d:
         1c:f6:ee:e9:eb:5f:90:8f:9a:9b:71:b1:ff:07:5d:05:55:74:
         60:95:5b:f3:cf:0a:29:2c:43:1a:1c:96:d8:11:94:c1:85:e5:
         e2:68:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:55 2025 by rpki-client