Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
File:                     DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json)
Hash identifier:          tWaAI4/Evl5ha0zEk7qjY4axc1b3lMRCyCBMmEnVMbk=
Subject key identifier:   BD:B4:86:DF:61:08:4E:60:E2:FE:CE:CF:B9:C3:A8:6A:01:D2:44:49
Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF
Certificate issuer:       /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
Certificate serial:       4921C402E56A26C4B23652AD4AE643F879037C19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft
Manifest number:          86
Signing time:             Fri 31 Jan 2025 10:11:12 +0000
Manifest this update:     Fri 31 Jan 2025 10:06:12 +0000
Manifest next update:     Sat 01 Feb 2025 13:47:12 +0000
Files and hashes:         1: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: 3amzwyg3JtmpHjLsGYT1Ylihai+j4QHw4Iv2HmnWt0k=)
                          2: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: vJYpbFKDG5EmV9QMMdTFqA46wT66HypzJLY2Ne3qpo4=)
                          3: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: Us/qMtaBQT31jKRuL2J9Elh5GZUUnTD2YjkN5CM1wrA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:c4:02:e5:6a:26:c4:b2:36:52:ad:4a:e6:43:f8:79:03:7c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF
        Validity
            Not Before: Jan 31 10:06:12 2025 GMT
            Not After : Feb  1 13:47:12 2025 GMT
        Subject: CN=BDB486DF61084E60E2FECECFB9C3A86A01D24449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:14:88:c4:77:70:62:74:b5:73:ce:6f:ed:
                    d2:2a:27:bc:50:e3:5d:0b:ba:46:8b:c9:f1:82:15:
                    2d:02:8c:eb:a9:25:42:cb:6d:c0:01:d7:25:02:3d:
                    21:89:10:b2:fe:2a:2c:29:fa:cc:44:fe:4c:29:26:
                    8f:b4:54:73:d8:76:e3:98:86:ac:1a:e1:04:76:e1:
                    a6:ef:26:4d:8c:16:8d:da:6d:58:98:98:d6:42:86:
                    4a:37:65:2a:6f:e7:fe:b1:ad:c2:91:ea:22:68:0a:
                    5d:8b:1e:28:5a:cc:17:03:5e:98:2f:2f:27:d4:d7:
                    b2:87:c1:d5:3a:9d:14:10:70:01:69:d2:e1:92:fd:
                    b8:71:6e:cc:b9:3b:0b:59:5c:fd:73:26:c4:18:bf:
                    48:fb:1d:9b:42:5e:ce:ef:65:88:f8:24:da:c8:95:
                    90:0f:51:b4:fa:6f:3c:77:cc:2c:a4:3e:e2:5d:69:
                    8e:2a:8f:59:81:49:75:05:44:e4:87:c6:5e:99:1e:
                    a3:58:ab:0d:27:05:63:16:60:9a:71:d6:0a:66:22:
                    03:d1:87:b5:3b:32:dc:23:25:e9:b2:c5:a6:74:7e:
                    02:e6:80:77:c8:f8:60:c2:55:fa:78:23:8e:5d:bf:
                    b9:8e:2c:87:17:4c:e8:75:18:fc:3f:be:12:84:10:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B4:86:DF:61:08:4E:60:E2:FE:CE:CF:B9:C3:A8:6A:01:D2:44:49
            X509v3 Authority Key Identifier:
                keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:5a:38:2a:48:73:ba:8a:15:f2:d0:a7:62:66:c6:8d:a5:
         4b:57:19:25:d3:ad:0a:4f:89:19:a9:de:aa:70:cc:93:a4:a9:
         1c:a1:1c:0c:69:44:a5:ad:ec:ee:a1:24:a8:73:7f:40:74:f1:
         e6:3c:d4:86:fa:79:5f:20:82:5d:d2:49:98:8f:4d:67:18:68:
         47:ac:5d:1b:75:2f:4d:7b:5d:80:46:e6:80:a4:15:b4:6e:16:
         eb:da:bf:bd:8f:b0:a6:06:27:cf:36:ca:94:89:d0:71:df:84:
         09:e9:71:53:1b:0d:c7:cc:8b:0d:2a:6d:53:d5:c9:e9:d5:21:
         33:fc:1f:9b:89:b3:00:33:9a:7b:d6:1c:db:da:8e:2d:de:6a:
         b7:d2:5a:68:45:14:8e:ee:cd:bc:ec:2d:28:0d:7b:3d:6f:1f:
         cc:df:7b:43:e4:b2:58:1e:f8:b2:62:35:54:ae:0e:3b:2e:0d:
         e4:3d:1b:63:30:9a:8d:dd:f1:f3:e3:8e:ca:5f:d1:99:9a:9f:
         2f:49:28:fe:dd:65:df:c3:3a:63:cb:83:a3:6c:c2:f7:57:b2:
         37:43:00:d3:da:01:5a:8b:7d:62:c9:37:11:54:5e:86:7a:4f:
         c9:75:37:a6:35:c9:15:5b:43:7e:b3:83:84:77:19:30:6a:cf:
         fc:88:4b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:37 2025 by rpki-client