Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
File:                     CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json)
Hash identifier:          irZLWJxNKvoEAy42zg1DkdNA2wcy2w5/uptOFe6BmQM=
Subject key identifier:   24:C9:C9:88:7B:8F:57:42:85:09:F6:7F:44:3F:DB:3D:C1:1A:39:32
Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA
Certificate issuer:       /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
Certificate serial:       2A34227590D66FAEC12CCDBAD0E70550008A383F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 03:35:19 +0000
Manifest this update:     Fri 31 Jan 2025 03:30:19 +0000
Manifest next update:     Sat 01 Feb 2025 07:04:19 +0000
Files and hashes:         1: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: 3uUIDh/n2Yk+a80/DU/nM5gU5c/HAxZ8biWudvwKpbs=)
                          2: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: 1c2Tl6RmJvVv8VzTeRVR7JPQisAfMzkYaPK9HGDl4Kc=)
                          3: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: 2fRdFE0Y4ApTT7xaf8dMR3qh37WAS/hlv4UfvSiCsXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:34:22:75:90:d6:6f:ae:c1:2c:cd:ba:d0:e7:05:50:00:8a:38:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA
        Validity
            Not Before: Jan 31 03:30:19 2025 GMT
            Not After : Feb  1 07:04:19 2025 GMT
        Subject: CN=24C9C9887B8F57428509F67F443FDB3DC11A3932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:f6:be:a0:0f:92:c6:40:53:6d:b3:d6:92:
                    f3:22:78:5d:5d:95:ba:ea:a6:d1:f7:c7:0f:6c:bd:
                    1b:2f:22:43:d3:94:ab:d9:8e:3d:c2:61:36:16:2f:
                    e0:f7:c9:ea:1e:d3:6f:0e:5c:5a:e2:f1:35:e4:66:
                    26:e2:5f:ca:41:4d:5e:3a:e3:a7:f2:e5:41:f0:02:
                    de:d7:99:21:aa:69:94:4f:24:b5:ee:97:89:76:80:
                    b9:8a:e8:4a:dd:a8:ed:d1:3a:16:87:f4:8d:84:5e:
                    0e:2b:05:37:61:f4:66:b4:d3:ae:30:4a:4d:fc:fa:
                    aa:2b:f3:0b:e4:a1:6b:a6:75:00:83:78:ae:43:42:
                    ed:7a:aa:10:56:fe:b4:7e:89:78:9a:65:af:63:b6:
                    96:07:b3:8f:d4:0e:b8:d2:25:5a:19:fe:b9:4e:4a:
                    7d:48:56:f6:b5:7b:8a:fa:9a:99:97:69:76:d3:2d:
                    38:ff:9d:94:9f:02:a4:51:a0:c3:3b:41:3b:8e:17:
                    33:90:ed:fa:3d:58:61:09:05:c7:ab:8a:f8:9e:fc:
                    fa:e5:3f:ee:e9:fb:6e:ad:4b:20:d6:dd:51:7f:a7:
                    49:e1:1b:63:6e:80:bc:71:e7:65:82:46:a9:1e:2d:
                    01:bf:de:8e:2b:dd:21:cb:b1:cb:74:c5:e2:4a:85:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:C9:88:7B:8F:57:42:85:09:F6:7F:44:3F:DB:3D:C1:1A:39:32
            X509v3 Authority Key Identifier:
                keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1e:2f:77:73:8f:83:93:61:03:5b:a0:0f:c5:13:be:d7:40:
         5d:20:04:b7:70:1e:9b:9f:2c:37:f4:39:7a:cb:80:e0:24:11:
         9e:89:2b:35:9d:45:cf:9a:13:b5:46:8c:7b:95:fb:05:f2:a2:
         a4:3a:dd:49:ed:9f:c8:b1:8e:9c:bb:6e:35:ad:5a:b2:6d:5c:
         71:ce:f1:25:ee:d8:4c:31:aa:05:30:ed:90:13:98:33:f6:e3:
         7f:16:ca:ec:7a:a9:90:45:10:ad:2a:15:bc:fb:af:b3:94:be:
         f5:0a:51:b6:b8:26:75:fb:6d:7a:c3:f0:c1:c3:f0:38:b9:c9:
         23:74:c2:99:75:44:03:c6:bd:40:34:ec:f9:28:a7:7c:09:ef:
         6f:09:91:7f:79:1f:61:16:33:a0:a9:e3:da:3c:24:4e:4b:87:
         71:ff:7d:0a:d0:6f:68:82:3d:dd:b0:9d:78:10:73:5a:7a:17:
         e3:54:04:44:77:4d:8a:83:c0:69:b2:42:6a:6e:c4:ca:cb:89:
         d3:5c:8a:a3:be:ee:af:05:91:ac:99:94:70:ac:9e:fd:80:a2:
         41:0b:3c:77:3c:52:87:54:e1:99:d0:e3:8f:0a:04:0b:0f:fe:
         62:ea:06:c9:9e:55:9a:57:73:44:92:99:a2:d1:6b:a7:26:c8:
         d7:c7:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:59:49 2025 by rpki-client