Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft
File:                     4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft (raw, json)
Hash identifier:          q7GOd4wQ8R8QYLrMiA4JBlweSKdliOt+Dwx1c4jp298=
Subject key identifier:   AB:1E:B2:ED:BF:27:AD:B8:EE:85:CE:71:0F:E8:ED:0D:42:A6:9D:56
Authority key identifier: 44:63:AE:E3:1A:D6:DE:D2:C7:FB:94:A0:88:1F:7C:F8:7A:5A:36:23
Certificate issuer:       /CN=4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623
Certificate serial:       2571ACC908BEA2A833804ABB182CEE043316C9F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft
Manifest number:          9A
Signing time:             Fri 31 Jan 2025 04:04:29 +0000
Manifest this update:     Fri 31 Jan 2025 03:59:29 +0000
Manifest next update:     Sat 01 Feb 2025 05:09:29 +0000
Files and hashes:         1: 4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.crl (hash: xrsLC2JtwN/h4VxZj0qSG4PdAi16Zy7CgKOPgpE2EfY=)
                          2: 323830343a386535303a3a2f33322d313238203d3e20323733343137.roa (hash: EBAtzNhsnuMxk7U3yl3wVIlmiy97ZPVycWbq9IeYBlg=)
                          3: 3138372e38362e3136332e302f32342d3332203d3e20323733343137.roa (hash: eRI1ntSG/zMTwxSbRBzZ+Y3SwVsbGeq0ft859G6Z6mU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:71:ac:c9:08:be:a2:a8:33:80:4a:bb:18:2c:ee:04:33:16:c9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623
        Validity
            Not Before: Jan 31 03:59:29 2025 GMT
            Not After : Feb  1 05:09:29 2025 GMT
        Subject: CN=AB1EB2EDBF27ADB8EE85CE710FE8ED0D42A69D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:11:f9:8a:0d:ee:30:c2:6b:2c:79:e7:42:
                    5e:ab:a5:cb:9e:95:03:93:90:aa:31:c1:e5:8c:be:
                    f4:b2:de:67:08:e7:29:b0:07:c3:dd:bd:90:99:a5:
                    7a:7b:b1:df:aa:19:92:5c:a6:20:9a:d3:e3:8c:83:
                    06:df:dd:04:96:e7:30:ef:4d:90:38:dd:f3:97:1d:
                    4f:da:a7:6a:ee:c4:47:de:f2:3e:13:57:68:22:eb:
                    71:01:33:8c:25:7e:07:8a:dd:4d:27:a7:05:96:a4:
                    c4:1a:11:49:03:a7:4c:1c:27:6b:f0:bc:80:25:3b:
                    f4:f9:97:b9:8b:c8:f7:79:a2:ed:e4:c8:e2:4a:1a:
                    b2:b0:ae:9a:1e:e5:4a:d8:2a:0f:5d:34:b6:9c:d5:
                    4b:3f:ef:9b:98:cc:89:85:92:d9:09:9f:dc:1f:50:
                    c3:3d:e5:d5:3d:75:15:d5:8d:31:0a:8c:02:e3:94:
                    b8:5a:e7:37:4d:4d:a6:29:23:ae:5b:81:ae:32:fa:
                    2e:f5:96:ff:77:ea:0e:93:f7:a2:3a:a8:6a:9e:84:
                    3e:64:90:64:c6:db:54:e2:19:f7:df:93:d4:5c:b4:
                    0a:d2:b1:a6:2e:4f:af:6b:e9:05:eb:b5:d7:85:36:
                    b4:f2:e9:e0:c9:dd:62:1d:42:af:c8:07:c7:ea:ea:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1E:B2:ED:BF:27:AD:B8:EE:85:CE:71:0F:E8:ED:0D:42:A6:9D:56
            X509v3 Authority Key Identifier:
                keyid:44:63:AE:E3:1A:D6:DE:D2:C7:FB:94:A0:88:1F:7C:F8:7A:5A:36:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/4463AEE31AD6DED2C7FB94A0881F7CF87A5A3623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:58:7b:26:4c:1b:28:d0:fe:d7:30:29:3a:e8:81:3f:27:
         1f:5b:77:0f:47:9b:34:66:80:f6:35:05:a7:dd:ea:e8:1f:d8:
         68:8b:bc:aa:3a:3d:2f:94:63:56:f5:0b:43:c5:de:9c:bf:12:
         ba:f3:88:49:f6:1b:85:ea:50:43:58:90:7b:73:e7:ff:f8:9a:
         bb:66:03:3d:6c:d0:20:08:a7:18:53:19:e9:a6:a4:87:09:68:
         62:e1:69:d4:97:66:a9:cd:14:42:7a:7e:e5:66:54:f3:ac:c9:
         a7:7b:3b:3c:c2:60:4c:7a:a9:b8:19:73:30:f3:9e:3a:05:3c:
         8a:e7:c7:8e:63:bb:f5:f3:62:bd:a2:05:ca:13:a0:6c:cc:fe:
         62:fd:23:d5:4f:a1:a1:80:d8:6e:12:3d:51:46:d7:93:fc:ff:
         a8:36:e7:1d:8c:10:5f:f1:9f:6e:16:94:20:29:67:cb:39:1f:
         73:11:70:ae:7a:25:b6:c7:52:a2:77:54:c8:39:b4:a4:92:83:
         f7:64:38:ae:77:44:9e:6c:2a:3d:9d:38:31:11:07:e6:be:80:
         5d:3f:70:40:f7:71:5b:bf:de:87:5e:69:0d:6d:31:5e:87:51:
         2b:bc:9d:fb:68:c0:27:84:e6:fa:4e:32:89:9e:75:d4:f3:df:
         30:f1:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:46 2025 by rpki-client