Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
File:                     45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft (raw, json)
Hash identifier:          SXBc+UI9ZqkWAX5pqrbMY81e9cqzMT3dmsYIuY1uzHE=
Subject key identifier:   10:16:33:9C:D5:8E:10:28:ED:71:A1:E0:6D:BA:25:FB:E9:70:1F:55
Authority key identifier: 45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16
Certificate issuer:       /CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
Certificate serial:       5436BB098EC949B338451E8E46F1223E67E8A6F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
Manifest number:          014C
Signing time:             Fri 31 Jan 2025 03:07:09 +0000
Manifest this update:     Fri 31 Jan 2025 03:02:09 +0000
Manifest next update:     Sat 01 Feb 2025 05:19:09 +0000
Files and hashes:         1: 45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl (hash: oQrO4lWhoXk89QVmEqg2THEVa3r2EwnAV8GXv4+nZ/4=)
                          2: 34352e3138362e36302e302f32322d3332203d3e20323639343133.roa (hash: k58Ok2hOOp1D2VUBay6FcD7H0WrVVggXcfU9s7FO8aE=)
                          3: 323830343a363433343a3a2f33322d313238203d3e20323639343133.roa (hash: nMJJYPA3WqnOzRMt5cBVC9XsUJNRNuWX1gh013emNx0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:bb:09:8e:c9:49:b3:38:45:1e:8e:46:f1:22:3e:67:e8:a6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
        Validity
            Not Before: Jan 31 03:02:09 2025 GMT
            Not After : Feb  1 05:19:09 2025 GMT
        Subject: CN=1016339CD58E1028ED71A1E06DBA25FBE9701F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:03:33:ba:32:c3:86:e0:ab:2c:10:ce:e9:
                    a0:93:40:4c:00:1b:22:55:87:01:4c:7b:e6:7a:c7:
                    9c:69:c4:18:07:8f:56:98:6c:64:93:b5:9b:9d:91:
                    f3:27:a2:06:2a:a5:2f:09:e0:9f:01:62:29:da:35:
                    48:d6:c6:f6:40:5a:7e:47:d2:6d:44:9c:a9:5b:af:
                    c6:24:a8:a9:79:fa:5b:52:86:ab:30:22:a4:ac:f8:
                    1f:29:ec:2b:60:8c:4b:2d:e3:48:77:c6:c4:67:6f:
                    ff:ab:1f:6e:44:4d:76:77:a0:b9:ca:6a:29:5d:12:
                    7e:1e:aa:02:c4:63:da:d5:0e:0a:7d:60:b0:2d:9a:
                    8b:ab:a3:eb:8b:13:d7:ed:42:ee:c4:c3:44:d1:67:
                    65:d1:7b:d8:d4:9b:34:36:64:f7:42:85:75:92:69:
                    31:3a:02:65:1e:bc:e6:12:e1:80:ae:df:e5:b1:7c:
                    86:34:01:79:52:98:a0:9f:53:84:64:9f:05:d6:67:
                    8d:45:b0:65:e2:ac:2b:e6:1c:e6:cd:31:b6:f0:47:
                    3d:a6:b7:e8:1c:3f:88:5a:e1:09:b4:dc:f2:0c:1b:
                    91:de:06:33:78:f9:e3:99:6c:20:88:0e:c3:eb:6b:
                    03:fc:a8:70:be:52:1d:4a:c4:46:ee:0e:64:f7:c5:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:16:33:9C:D5:8E:10:28:ED:71:A1:E0:6D:BA:25:FB:E9:70:1F:55
            X509v3 Authority Key Identifier:
                keyid:45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:30:80:cb:51:2b:9e:03:88:9f:b7:19:f2:e3:05:e8:08:a7:
         8f:6a:cf:5f:5d:f7:cc:9b:3e:bb:9e:7b:02:df:e5:04:d1:11:
         a9:f0:f2:f1:6d:de:32:d0:b5:e6:d2:1e:a4:04:5f:8a:59:2c:
         5e:40:a3:eb:25:a7:18:9f:f4:ba:c1:64:c7:d0:8b:00:64:70:
         b1:75:36:4b:b0:0a:36:e1:a4:94:8f:d5:95:bc:e4:33:81:42:
         e1:a4:a8:43:0f:82:6e:17:9f:05:75:8d:00:9d:94:38:96:0b:
         97:5e:af:93:60:13:12:01:8d:1d:ca:f7:9a:d3:26:c7:20:ca:
         28:35:21:7e:5d:dc:09:20:b7:56:81:53:95:78:de:9d:14:70:
         f4:1b:c7:5e:1e:e6:45:52:89:cb:27:ee:63:12:b7:e9:b3:ac:
         2f:2b:e8:4d:55:ea:34:30:21:73:f6:f6:5e:07:17:ab:10:8a:
         d3:f5:53:2d:17:08:26:cb:00:e2:91:74:cf:de:92:58:8b:da:
         79:94:5a:dd:c7:c7:29:4b:21:7f:3d:71:75:82:1d:9c:ec:49:
         86:a9:30:fd:b2:fc:19:7c:67:fa:94:2f:82:fd:d6:70:8e:8e:
         f6:67:b5:cf:f5:67:4c:8a:a2:a9:90:d8:14:3f:7a:80:5e:14:
         7b:63:d7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:59 2025 by rpki-client