Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
File:                     0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft (raw, json)
Hash identifier:          8Ys6zq3GHMUd6v9rPLf9TV3fCLe7vMN+BEsYWqjXFg8=
Subject key identifier:   7E:55:89:43:A5:47:01:1E:04:45:C1:DB:AF:85:CD:BB:0F:E6:85:0B
Authority key identifier: 0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
Certificate issuer:       /CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
Certificate serial:       5B0529B86E8D44F9F639392A867B23901C026899
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft
Manifest number:          72
Signing time:             Fri 31 Jan 2025 12:46:44 +0000
Manifest this update:     Fri 31 Jan 2025 12:41:44 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:44 +0000
Files and hashes:         1: 3136382e3233322e38342e302f32322d3235203d3e20323634353632.roa (hash: IwPy8cJnRbIeNAaOwXPjbV7hLJS0yRkVjKHBPB1d+6w=)
                          2: 34352e3233392e382e302f32322d3235203d3e20323634353632.roa (hash: s9+YYnGcqro2z6EgY2o9lsyYglwFCCQ1QtyYnqh5dyk=)
                          3: 323830343a323139303a3a2f33322d3438203d3e20323634353632.roa (hash: VrZuPNAbPVqLyGGFDvEABBLvwHuXnVb6IdEUzbV8zm4=)
                          4: 3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa (hash: e6e5Lg+QGVSi7TERvy2MUUKY8wIQe1UD2GuznUI7JH4=)
                          5: 3133382e33362e302e302f32322d3235203d3e20323634353632.roa (hash: TIPF3ML7nX64Ev8dDpk41OgYBBU2M889STRTLQ2o/mk=)
                          6: 323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (hash: jYqZ76I964kaOaMmsQpy6u6eL4PFlKvQfLtN2IpqrVY=)
                          7: 34352e3137342e3138382e302f32322d3235203d3e20323634353632.roa (hash: 6s36JvyTeHB1Rv+U02USvWCPrDk9cuNiHpjC6zdThQk=)
                          8: 0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl (hash: tB+kDDO0CyYaUipOpDbGJLqIBg3W1WdMAC5mj+w1K1M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:05:29:b8:6e:8d:44:f9:f6:39:39:2a:86:7b:23:90:1c:02:68:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
        Validity
            Not Before: Jan 31 12:41:44 2025 GMT
            Not After : Feb  1 14:00:44 2025 GMT
        Subject: CN=7E558943A547011E0445C1DBAF85CDBB0FE6850B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:bd:aa:8f:84:dc:78:c5:13:8a:e9:ba:d9:
                    c4:eb:cf:3e:5b:cf:83:58:8a:84:f3:8c:b5:a7:52:
                    03:00:c4:cc:03:17:15:b9:ea:ff:50:6a:e0:95:e5:
                    12:45:c0:2c:7c:61:c6:08:09:8b:96:6b:c5:26:bc:
                    f6:da:55:e1:f7:7c:a1:83:c8:98:82:e5:78:b2:13:
                    ca:6e:ea:b7:24:ad:82:b9:0e:bf:85:34:c9:92:d9:
                    79:c3:59:d2:ca:90:8b:ad:7b:63:f8:17:27:eb:a0:
                    c0:bf:ab:2c:5f:6c:67:8f:01:99:9b:70:14:74:dc:
                    11:00:41:cf:ee:22:52:2c:ad:b5:4c:3e:15:e4:ab:
                    dd:61:db:4b:4a:0f:f0:4d:04:38:6e:71:fb:8f:63:
                    27:12:23:df:35:81:d9:e1:2e:fd:76:fa:5b:87:81:
                    76:ea:45:76:c9:0f:af:c3:a9:45:f6:16:d9:2b:af:
                    38:7e:32:08:00:b7:ec:82:f2:07:47:74:47:05:4e:
                    11:fd:a8:b1:34:e7:3a:18:98:44:06:74:96:31:44:
                    63:49:43:75:18:76:19:e7:f8:37:41:da:ad:28:34:
                    b0:39:1d:2c:ab:ae:9a:42:3b:bd:40:a6:1b:70:ab:
                    e4:a3:32:1c:97:72:4a:9b:62:ae:6e:a4:79:ca:f5:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:55:89:43:A5:47:01:1E:04:45:C1:DB:AF:85:CD:BB:0F:E6:85:0B
            X509v3 Authority Key Identifier:
                keyid:0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:9e:26:91:e5:9a:36:20:38:10:c7:3e:45:43:c6:bb:ae:
         39:7e:e7:88:b7:52:3d:15:32:c2:b0:fe:4f:7a:28:07:fc:a6:
         a1:b4:6d:4a:2b:1d:e4:5e:33:07:cf:6b:0d:43:ef:e3:ad:ce:
         26:e6:b8:2e:e4:7c:ba:66:54:9a:02:04:a1:d9:f4:99:6e:28:
         77:32:d6:25:c4:96:af:5d:81:4f:cf:65:a4:99:82:e4:66:55:
         1a:c5:5e:a4:26:8d:4a:2c:ad:97:e6:7d:6d:e4:0d:7a:df:e8:
         ed:71:ea:e0:99:0d:a5:9d:7f:0b:7f:11:e8:c4:44:0e:e4:a7:
         cf:49:ae:f0:16:c4:90:2d:33:d0:1b:91:f7:40:ec:4d:f8:23:
         be:9c:ef:6e:0f:e4:c6:69:2f:71:29:68:55:b4:a4:2e:06:5a:
         f1:3f:67:e5:33:cc:92:df:9c:79:62:1e:17:71:f3:20:34:b7:
         a6:1d:5e:21:58:d1:53:81:1e:a6:40:d6:2d:53:c7:a0:ac:cb:
         4c:44:10:e3:9d:88:59:d3:5b:e8:2c:a1:ed:9d:8b:19:f9:f9:
         4a:83:53:47:00:d7:60:c1:80:b9:ff:b2:5b:22:cd:e9:16:3e:
         38:f6:e4:c6:f4:d6:ae:d4:ed:68:d8:44:08:26:7f:9c:ee:f3:
         a7:02:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:27:58 2025 by rpki-client