Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          Wu71G3llENQvftKcA1aQ0awk15YvibvRJSn0+FufhrU=
Subject key identifier:   22:4E:05:96:7F:42:86:94:70:A9:FD:0D:E0:1A:36:7C:E3:8B:68:11
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       4A855A3306997A9C0F5B1FBBC98665A574A9963C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          F7
Signing time:             Fri 31 Jan 2025 12:01:50 +0000
Manifest this update:     Fri 31 Jan 2025 11:56:50 +0000
Manifest next update:     Sat 01 Feb 2025 12:32:50 +0000
Files and hashes:         1: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=)
                          2: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: 7IhoL/NNPVjto3brihUcouB52KxeHiBJal/+SQElMhY=)
                          3: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=)
                          4: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=)
                          5: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=)
                          6: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=)
                          7: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:85:5a:33:06:99:7a:9c:0f:5b:1f:bb:c9:86:65:a5:74:a9:96:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jan 31 11:56:50 2025 GMT
            Not After : Feb  1 12:32:50 2025 GMT
        Subject: CN=224E05967F42869470A9FD0DE01A367CE38B6811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:8b:f3:39:c0:9c:63:07:14:11:52:99:ab:
                    52:fd:cd:03:7c:74:af:09:1d:ca:fb:a5:2b:31:59:
                    57:79:b7:f4:90:54:6a:bb:fd:88:f9:db:cd:bc:8a:
                    1c:c1:89:79:8c:2a:f1:b0:54:9c:f3:1c:5a:1e:d6:
                    93:d7:fa:09:a9:39:cd:64:13:56:3e:0f:6b:1d:79:
                    0b:4b:63:58:f9:e3:8c:0a:22:a9:55:51:e6:f2:fe:
                    59:c5:60:8c:1e:e5:fa:1b:44:53:01:99:9e:18:de:
                    b5:ce:d3:c9:5f:fc:5e:cc:3a:99:89:b1:f8:ee:33:
                    b9:3c:83:6b:dd:23:29:f5:e8:f6:6f:72:a7:29:97:
                    4a:e6:e9:ff:48:cd:dd:67:fc:4b:19:54:aa:84:50:
                    f2:1b:e1:d6:60:79:14:f1:0c:c4:ac:23:25:40:47:
                    92:ba:6e:61:a4:7d:6f:2f:5e:b0:f2:31:b1:02:1b:
                    07:f6:ee:b3:ba:7d:2a:4c:48:66:a6:30:fa:30:74:
                    06:f2:e5:6f:ba:68:7a:7f:9d:f9:2e:58:db:d0:cf:
                    f8:2a:27:ee:5b:df:ee:dd:78:3a:6c:ed:bb:a5:7b:
                    34:cf:68:ea:b6:a8:ce:8c:80:f0:41:6e:9a:97:b5:
                    77:71:ce:49:77:b4:63:b9:c9:d2:b9:f1:49:2f:10:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4E:05:96:7F:42:86:94:70:A9:FD:0D:E0:1A:36:7C:E3:8B:68:11
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:b1:d8:cc:01:74:55:b9:48:5d:d2:59:10:7a:51:f0:0c:
         2a:8c:98:31:40:83:8a:d6:62:23:c8:9b:2e:48:3f:1d:b8:a7:
         02:82:7d:bc:8c:60:ba:fc:79:72:30:e8:bc:c3:49:dd:be:95:
         25:37:05:6d:a7:25:60:ed:05:49:49:cf:6b:7e:85:05:da:31:
         0b:39:6d:8d:54:d7:be:f5:01:a6:dc:9e:0e:08:c2:33:29:52:
         22:07:8d:fc:58:3c:9d:39:b4:97:e2:e5:dc:03:9e:a8:b0:86:
         29:e4:f5:7f:8c:dd:d5:72:76:f7:8b:8f:60:31:80:cc:47:92:
         b0:df:70:6d:90:95:de:23:13:14:d0:25:42:f9:73:20:fc:03:
         81:f7:e1:67:4b:b2:08:a4:9f:45:8c:73:35:52:1f:b0:27:e0:
         5a:f9:08:cc:82:dc:16:d2:85:d9:ad:34:c2:4e:1c:c6:5a:fb:
         dc:23:a7:eb:d9:fd:12:b8:5e:72:02:70:6c:f8:2f:a3:9e:b0:
         38:cf:8a:d7:ee:2d:62:3c:02:e6:ba:a1:e3:49:25:db:8b:f1:
         19:29:ab:44:fd:5a:61:a3:e9:51:d1:0b:b2:6f:b8:14:15:c4:
         63:b4:d6:17:a1:da:c1:42:a7:d8:4f:95:89:d3:ef:ff:3c:47:
         42:be:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:50:58 2025 by rpki-client