Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft
File:                     4604735AE146206BD46CAEA7DB01B25B210619DE.mft (raw, json)
Hash identifier:          8ZX3FR1h/q4Vc1R1i8yqo1GUbwaCi+rJbI92GsqyHVQ=
Subject key identifier:   2E:7E:4B:44:81:07:FD:13:74:12:10:81:90:F9:AE:DC:D3:6F:40:21
Authority key identifier: 46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE
Certificate issuer:       /CN=4604735AE146206BD46CAEA7DB01B25B210619DE
Certificate serial:       47A5AC4A75AF34F5691B548039AA8360ADD1D929
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft
Manifest number:          0106
Signing time:             Fri 31 Jan 2025 06:35:56 +0000
Manifest this update:     Fri 31 Jan 2025 06:30:56 +0000
Manifest next update:     Sat 01 Feb 2025 09:37:56 +0000
Files and hashes:         1: 4604735AE146206BD46CAEA7DB01B25B210619DE.crl (hash: 7Wwa2JIzJTO0kTTbTrd0kFCEG5vxMpc50dITks34Xlg=)
                          2: 3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa (hash: Qhy2x/Gl5x4DlYMqujm0/VNpOYWgoW5A3T7EoZe82Ew=)
                          3: 323830343a363935303a3a2f33322d3438203d3e20323730323632.roa (hash: CK3FlfcvNjRGtOPLruhKGj8uQGUbABhA25pfrinXRuU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a5:ac:4a:75:af:34:f5:69:1b:54:80:39:aa:83:60:ad:d1:d9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4604735AE146206BD46CAEA7DB01B25B210619DE
        Validity
            Not Before: Jan 31 06:30:56 2025 GMT
            Not After : Feb  1 09:37:56 2025 GMT
        Subject: CN=2E7E4B448107FD137412108190F9AEDCD36F4021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:3d:8e:e1:15:ba:f6:e8:2a:b3:36:97:dd:
                    e1:ff:f2:a2:63:ee:1c:e2:d6:f7:82:fb:95:c9:ec:
                    e7:f7:26:fd:27:3b:ff:bc:5d:ef:7b:2c:74:31:7c:
                    c3:3d:43:65:79:b7:78:aa:bf:66:93:08:8b:f5:db:
                    a9:10:6a:5f:cb:95:dc:de:e7:77:e5:3a:41:e8:1c:
                    e8:e9:f9:26:3d:ea:c1:22:33:d8:07:29:e3:7a:71:
                    44:a4:ed:f6:ad:80:ba:32:e5:0c:e2:a1:40:1c:41:
                    c8:50:14:33:40:5b:7a:0a:7f:4d:34:bd:8e:74:9c:
                    29:d4:ce:f2:e7:44:41:1e:74:29:bb:6f:db:68:34:
                    32:94:1f:74:7d:ae:9c:5e:24:8f:0d:c3:ab:6a:83:
                    85:ef:8b:41:08:cf:58:86:40:3a:42:fd:55:83:e7:
                    94:45:4f:4d:ef:41:ca:26:20:99:c5:b8:96:e7:ea:
                    5f:7a:6a:9d:7a:96:28:0e:26:e6:a7:9c:79:2b:02:
                    55:70:91:46:a8:f5:7d:49:f0:5e:c2:bf:2e:06:25:
                    7a:bb:05:89:bb:fa:8f:89:60:92:30:9f:c5:15:90:
                    35:53:a0:7b:02:2e:83:30:5a:d5:16:db:d9:e3:a3:
                    08:e7:33:b7:06:01:f5:54:7d:70:af:08:dc:a1:06:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7E:4B:44:81:07:FD:13:74:12:10:81:90:F9:AE:DC:D3:6F:40:21
            X509v3 Authority Key Identifier:
                keyid:46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:af:26:ed:77:fb:98:aa:05:ff:4c:34:02:50:ed:93:d5:
         88:ec:af:ea:84:81:6f:0e:35:f9:d3:48:73:c2:6a:41:ab:46:
         d2:c6:b6:0f:d4:4c:79:95:74:cb:76:f4:ba:23:8a:99:8b:9a:
         6a:c6:5c:34:d4:4e:3e:74:42:8e:25:4c:d6:fb:c9:fd:f3:5d:
         4c:e9:bf:d3:26:33:bc:4a:98:3c:af:cb:91:f8:61:76:fa:dd:
         4b:13:12:b6:a3:fb:bd:25:b0:de:49:c4:71:f5:7e:99:bb:d0:
         dd:d1:a8:15:5b:2f:ab:3e:79:b6:0f:9a:d9:f9:66:6a:bf:a9:
         e0:39:24:0a:a9:0d:0b:33:53:0e:5c:04:58:14:52:55:20:b4:
         9a:3a:94:6d:63:3d:3f:e5:21:4c:84:6b:83:95:f3:25:8f:31:
         39:45:54:36:fc:d0:b5:ee:d8:5f:30:c4:28:a5:3a:9e:fc:76:
         ff:32:50:4d:52:55:e6:e4:a6:b2:c6:8c:e0:56:c6:3e:a2:2a:
         07:2e:19:fe:bd:1a:35:09:3d:fd:67:77:98:a1:2c:6b:34:a0:
         20:06:6a:43:6f:5e:17:1a:61:cc:82:da:b9:5c:f9:aa:8a:e3:
         37:9e:e8:f3:a1:4f:76:e0:7c:0a:57:58:00:e1:c2:d2:c7:bf:
         36:d6:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----