Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File:                     9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier:          cT4PGjW+Hh0jnsPTdlloio5RATZIKX4dd6evzECetoQ=
Subject key identifier:   A9:29:3D:54:31:78:04:17:78:85:E0:C3:F6:EF:0A:A1:16:5A:7F:17
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer:       /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial:       5A8C58FCE24ECB0CCE8B322271C9F51D626DEF99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number:          3C
Signing time:             Fri 31 Jan 2025 17:40:08 +0000
Manifest this update:     Fri 31 Jan 2025 17:35:08 +0000
Manifest next update:     Sat 01 Feb 2025 20:57:08 +0000
Files and hashes:         1: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: riODrVwcpoOAND9VEIlDx5X2FTp6ggN8/jNZLgIKmDg=)
                          2: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=)
                          3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8c:58:fc:e2:4e:cb:0c:ce:8b:32:22:71:c9:f5:1d:62:6d:ef:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
        Validity
            Not Before: Jan 31 17:35:08 2025 GMT
            Not After : Feb  1 20:57:08 2025 GMT
        Subject: CN=A9293D54317804177885E0C3F6EF0AA1165A7F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:f7:f1:39:ea:1e:2f:38:5d:5a:b8:fd:4b:
                    96:88:f1:b4:96:0b:9f:66:d5:79:0b:60:63:6a:30:
                    9c:9d:19:87:5f:94:29:ab:b5:b7:cc:fd:0e:00:b2:
                    e7:3c:4e:21:c8:3b:59:bd:96:67:18:81:02:98:85:
                    5a:71:4b:f4:5f:6b:9b:c6:f5:e4:e9:83:a4:df:be:
                    a2:78:2e:78:33:44:f9:9a:9b:75:96:25:d1:e6:ef:
                    67:07:58:a3:bd:ac:c7:c9:7d:92:c8:ba:9c:e8:1f:
                    23:0e:0b:f9:f9:d7:29:25:98:71:4f:93:b2:5c:24:
                    ef:1c:08:fe:5e:92:a3:72:1f:37:85:f6:63:67:4f:
                    61:6d:9a:f8:b5:1b:a4:85:44:36:f2:b7:43:c3:d9:
                    e2:b5:87:eb:13:cf:8f:da:7a:9d:3c:5e:db:ba:b3:
                    50:07:d3:8b:dc:c5:a1:0c:c5:f9:e5:0c:5a:42:30:
                    35:f5:9c:91:e0:7c:48:4e:2c:d9:ee:c8:16:3e:fc:
                    db:4c:51:cc:c8:3f:06:49:c4:cc:cf:8d:c7:e0:e8:
                    e1:89:fc:0e:df:0d:3a:9d:83:f8:3f:4b:4d:16:c8:
                    89:0b:e6:2c:26:12:35:43:1a:8e:16:81:ae:bb:9f:
                    e4:89:f0:1b:01:fe:42:76:17:1b:72:44:69:4a:77:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:29:3D:54:31:78:04:17:78:85:E0:C3:F6:EF:0A:A1:16:5A:7F:17
            X509v3 Authority Key Identifier:
                keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:5f:24:7c:8d:6a:46:37:17:47:d2:f6:99:37:cf:70:1c:
         1f:db:02:09:c9:23:8c:17:e8:52:6d:52:fc:a2:9f:78:84:bc:
         43:46:23:a9:5a:45:c4:98:d0:24:8b:c7:73:2a:4e:0c:69:3b:
         42:f5:4c:c7:e5:98:36:b4:ea:a0:ce:ac:54:3e:5c:88:a3:58:
         a6:ed:dc:97:9c:ea:99:10:42:64:ef:e7:12:97:26:6d:a9:93:
         46:d8:6c:e3:09:4c:e4:0c:8a:40:30:5f:3a:7f:8e:3e:f5:20:
         90:f4:4c:02:75:15:e5:7d:9e:48:3d:09:4b:32:c7:37:ab:33:
         9c:b0:ce:80:ae:96:e0:c0:5a:df:1d:cf:27:a5:42:85:7f:69:
         a1:03:13:a7:e7:3f:a5:cf:96:1d:ef:1b:5a:17:09:50:e1:8a:
         33:a5:be:02:e5:fe:e2:25:82:22:93:41:6f:18:6c:da:19:fd:
         1a:7f:30:d8:e3:84:e5:0c:c0:23:34:00:d1:04:4d:e2:a1:18:
         25:48:56:e4:92:07:54:1f:00:92:6f:86:d0:28:a7:17:32:70:
         f9:f7:02:c6:ab:40:06:59:d6:d7:32:3f:b4:08:39:da:15:ee:
         30:fe:b0:9f:e9:99:bc:21:54:8f:8e:0f:24:cc:b7:34:43:33:
         6d:0a:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:16:24 2025 by rpki-client