Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/4BB72199A694618FCF018DF5F87E174F59B764D8.mft
File:                     4BB72199A694618FCF018DF5F87E174F59B764D8.mft (raw, json)
Hash identifier:          u7UJQOWggnTQAFKY8UAhL8RE4yqkO9TXuNICANG8S4U=
Subject key identifier:   BF:2D:42:B9:B0:84:72:A1:B0:09:AF:3D:08:A2:B6:CE:D8:88:59:68
Authority key identifier: 4B:B7:21:99:A6:94:61:8F:CF:01:8D:F5:F8:7E:17:4F:59:B7:64:D8
Certificate issuer:       /CN=4BB72199A694618FCF018DF5F87E174F59B764D8
Certificate serial:       4E41233AD98FED1B25CE7ECC4ED4910EBA9C7162
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BB72199A694618FCF018DF5F87E174F59B764D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/4BB72199A694618FCF018DF5F87E174F59B764D8.mft
Manifest number:          0191
Signing time:             Fri 31 Jan 2025 10:52:01 +0000
Manifest this update:     Fri 31 Jan 2025 10:47:01 +0000
Manifest next update:     Sat 01 Feb 2025 11:30:01 +0000
Files and hashes:         1: 3133312e3235352e3133312e302f32342d3234203d3e20323731363538.roa (hash: /b6uJnIj9LSr+om981N8e8gZqy26SMxGgQRuRYeuioA=)
                          2: 4BB72199A694618FCF018DF5F87E174F59B764D8.crl (hash: 7BRCNM6SOnbu4DagGR6QiK2xBZ19ABR17X/kwhDAx8w=)
                          3: 323830343a376566383a3a2f33322d3332203d3e20323731363538.roa (hash: T7OeLn8NZFfjiKDSoVWfPQsdcCJKbIXDoFTg3uMMZB4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:41:23:3a:d9:8f:ed:1b:25:ce:7e:cc:4e:d4:91:0e:ba:9c:71:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BB72199A694618FCF018DF5F87E174F59B764D8
        Validity
            Not Before: Jan 31 10:47:01 2025 GMT
            Not After : Feb  1 11:30:01 2025 GMT
        Subject: CN=BF2D42B9B08472A1B009AF3D08A2B6CED8885968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:de:55:20:06:e3:3f:d7:f6:ac:3a:85:1e:
                    07:3a:ed:66:37:21:83:18:34:17:fb:49:ed:8f:b2:
                    f5:1a:13:70:ba:56:ae:bf:c9:86:24:9f:66:12:d4:
                    5f:04:7b:b4:79:bf:38:bb:97:8a:3c:27:62:62:6b:
                    70:85:67:3d:8b:8e:61:7e:4d:38:8e:94:84:4b:5d:
                    d1:aa:96:b5:d4:f1:11:d0:48:80:81:75:c6:e5:ef:
                    fe:52:98:14:5c:1a:4a:27:a7:82:87:cd:b3:98:2b:
                    68:25:76:16:77:ec:bd:dd:66:a8:e8:23:67:4e:eb:
                    6d:3e:0b:2b:ad:8c:fd:b2:d4:98:90:ee:77:04:66:
                    bd:e7:e6:ef:66:57:bc:61:13:46:97:d7:66:e0:83:
                    4e:3e:ec:e5:f1:b7:a8:b7:79:92:e7:9d:0a:62:e2:
                    da:01:23:bc:ba:55:2d:bb:24:df:2b:bb:f5:4d:3c:
                    0c:8d:b0:7e:b6:8a:aa:7b:ec:71:f8:f0:4f:c2:d9:
                    2f:ac:32:76:f2:2b:d7:20:05:27:bc:af:86:22:8a:
                    c7:ab:52:4d:e9:11:95:0b:ef:01:13:6e:25:b1:8a:
                    2f:36:7f:31:ec:43:48:80:1f:60:86:35:a2:78:a3:
                    01:60:f3:74:f4:43:51:c3:5e:bd:04:47:64:e8:a9:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2D:42:B9:B0:84:72:A1:B0:09:AF:3D:08:A2:B6:CE:D8:88:59:68
            X509v3 Authority Key Identifier:
                keyid:4B:B7:21:99:A6:94:61:8F:CF:01:8D:F5:F8:7E:17:4F:59:B7:64:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/4BB72199A694618FCF018DF5F87E174F59B764D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BB72199A694618FCF018DF5F87E174F59B764D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/1/4BB72199A694618FCF018DF5F87E174F59B764D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:36:b6:05:03:90:7a:0b:0f:d5:2d:be:7e:8b:6d:19:f5:
         6e:fd:56:04:d7:93:89:aa:bd:84:4c:c0:bf:ad:2c:6b:d7:05:
         30:ee:c5:af:09:ed:0f:9d:5f:1c:74:0a:12:0f:2f:65:b7:23:
         59:40:d8:93:f8:f9:99:d5:c9:b3:40:6e:6e:37:ff:c0:5a:4c:
         46:24:03:f9:06:6c:45:9c:67:22:44:06:5e:9b:f9:a7:b1:c0:
         f5:a4:53:df:e9:46:77:4b:d3:8c:3a:27:8d:e4:d0:12:06:3d:
         aa:4d:35:68:de:cb:e6:d3:8c:90:6a:52:ee:56:c9:41:21:69:
         bb:63:95:0b:f0:23:01:0b:c3:39:e8:40:aa:96:1d:bc:9b:f3:
         ad:c2:1c:0c:c5:f0:df:b3:6d:3c:5f:68:5b:1f:b9:59:92:bb:
         80:78:a6:16:7d:5f:7b:44:21:35:13:ee:29:45:e4:67:56:f5:
         5f:69:b3:34:f6:2b:9e:43:d7:4f:a7:ac:f4:06:a4:10:99:7d:
         89:b4:73:6e:5c:10:75:eb:5e:30:3a:00:6e:f6:fc:4d:45:31:
         f5:93:3f:ec:48:34:e0:aa:b1:89:7b:4d:d3:fa:25:91:d2:ed:
         76:ac:72:75:37:a5:17:36:12:83:96:63:2e:71:24:7b:da:f8:
         c5:77:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:47 2025 by rpki-client