Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
File:                     5123FB1095A3958EA116FBD4615EF7B626346FBD.mft (raw, json)
Hash identifier:          C4H4FQMRWAi5YXlNOyF7tv4p+9KfqsNEKwEebwYuJDE=
Subject key identifier:   08:1C:02:41:F8:95:18:A8:FB:36:3E:9A:6E:01:B2:F3:A9:E1:3F:44
Authority key identifier: 51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD
Certificate issuer:       /CN=5123FB1095A3958EA116FBD4615EF7B626346FBD
Certificate serial:       726E12248FFFBD7B430E39F1ED82DEC419609A84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft
Manifest number:          0F
Signing time:             Fri 31 Jan 2025 13:27:51 +0000
Manifest this update:     Fri 31 Jan 2025 13:22:51 +0000
Manifest next update:     Sat 01 Feb 2025 15:08:51 +0000
Files and hashes:         1: 5123FB1095A3958EA116FBD4615EF7B626346FBD.crl (hash: FH/3+1Q08gJfeSGWmezaC6vsu0g+RgahL4ciGrGbkpU=)
                          2: 323830343a386231633a3a2f33322d3332203d3e20323733373132.roa (hash: IB5+WuMlTRHx6oMJ1YuC2n9MCqBKQX94bxMY4efgebk=)
                          3: 3137372e31322e3134312e302f32342d3234203d3e20323733373132.roa (hash: +gijL34u95r5yJznPEdZ7rZonx8s0h1ozytTyOKmXJg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:12:24:8f:ff:bd:7b:43:0e:39:f1:ed:82:de:c4:19:60:9a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5123FB1095A3958EA116FBD4615EF7B626346FBD
        Validity
            Not Before: Jan 31 13:22:51 2025 GMT
            Not After : Feb  1 15:08:51 2025 GMT
        Subject: CN=081C0241F89518A8FB363E9A6E01B2F3A9E13F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:d2:13:3e:8b:0a:9f:fd:9f:cf:81:9f:30:
                    c4:fa:9b:24:81:5a:8d:ee:c6:08:8d:52:d8:f5:dd:
                    7d:b6:1e:d7:67:3e:ec:6c:6b:b3:1a:d2:6f:fb:16:
                    ed:3e:44:3e:ce:f5:fb:b3:45:53:51:68:c0:2d:ae:
                    14:f5:6f:20:74:c4:aa:77:8e:aa:3b:3c:19:2b:cd:
                    a1:ac:1a:58:d2:9b:c7:02:88:72:24:fb:43:08:59:
                    99:3c:76:38:23:c5:c5:ff:da:20:a5:cd:2d:5c:df:
                    4d:e6:80:51:08:30:62:80:ee:3d:a5:65:3d:ae:a7:
                    59:cb:19:93:e5:24:0f:ae:85:1d:56:2f:27:50:9d:
                    f2:6c:df:29:07:05:09:01:43:6b:b1:9a:bc:46:ad:
                    c5:25:95:c8:46:2b:26:ec:50:5f:31:75:b2:f8:87:
                    0c:eb:04:29:98:44:06:a3:37:72:3f:e4:8a:50:9d:
                    8d:56:d8:a0:de:22:14:0f:0d:ab:47:84:91:79:54:
                    90:76:d8:41:30:a2:b4:71:21:09:d2:f1:d9:d4:db:
                    2b:e0:47:30:8d:df:e2:94:9e:7d:94:c5:ea:7e:95:
                    72:3d:7c:c7:97:e3:14:f3:2e:f7:5c:80:c3:66:8f:
                    f4:c6:f6:61:87:eb:81:fc:8e:c2:c5:73:79:f2:86:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1C:02:41:F8:95:18:A8:FB:36:3E:9A:6E:01:B2:F3:A9:E1:3F:44
            X509v3 Authority Key Identifier:
                keyid:51:23:FB:10:95:A3:95:8E:A1:16:FB:D4:61:5E:F7:B6:26:34:6F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5123FB1095A3958EA116FBD4615EF7B626346FBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SB6VKoaNd4ZMEcbq2ckgacDC6JENqs9rUWBQSC5Hqud/0/5123FB1095A3958EA116FBD4615EF7B626346FBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:ec:44:d1:97:24:7e:c7:af:ce:6c:8b:2c:a0:5d:52:7d:6b:
         26:8f:2f:e8:0c:52:3a:ea:7c:6a:f8:eb:39:f0:82:c4:ca:5e:
         f8:09:1d:4d:74:ab:3f:ab:d1:eb:39:fe:74:f6:b1:58:a8:7b:
         d6:bc:d0:a4:69:77:87:d8:1c:35:36:0f:a5:09:ea:6a:02:74:
         07:89:93:b9:28:9b:35:41:23:e0:70:25:b3:2e:09:37:7e:1a:
         ca:7e:63:9a:0b:0e:60:98:dd:95:27:2b:0c:8b:d1:fd:53:86:
         54:f0:28:7d:54:a5:79:2f:f3:ca:9b:71:8e:18:f6:5b:a8:f3:
         a7:0d:1e:0f:f2:5f:c9:39:25:f4:39:3e:83:b8:60:c3:46:d3:
         80:60:b4:d2:82:50:1d:8a:88:44:97:32:e5:03:73:8e:7d:0b:
         8a:1c:67:cb:5b:e2:06:47:d6:e9:d1:03:fd:0a:c8:5e:64:e3:
         ac:d4:4e:38:09:62:e0:7b:12:07:e6:40:00:34:1c:f0:af:a9:
         d8:3b:53:fd:19:6e:71:75:51:70:e5:e7:1b:f7:74:c5:56:09:
         04:f5:b6:f0:00:b9:cb:39:00:18:20:bf:96:d3:e1:16:0f:ca:
         13:a0:95:cf:62:84:6f:37:87:49:d4:56:c6:51:bc:61:e3:45:
         64:1c:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:25:14 2025 by rpki-client