Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
File:                     2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft (raw, json)
Hash identifier:          Ook/jdeLK3jg8GMAEi48B4hFiZ11S34dfHBotrSnxAU=
Subject key identifier:   09:F2:1D:82:DF:D5:96:CC:3C:58:37:CC:00:39:74:6C:BD:98:72:07
Authority key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19
Certificate issuer:       /CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
Certificate serial:       46927605C9FC7B08072DA5BBB97C2A6BFB52200D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 09:37:49 +0000
Manifest this update:     Fri 31 Jan 2025 09:32:49 +0000
Manifest next update:     Sat 01 Feb 2025 10:28:49 +0000
Files and hashes:         1: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl (hash: EE3vtCZ7CJMQ3YIotFmddE5d6zsKbdvfgZPn2jXf3D4=)
                          2: 323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (hash: 1hDF1pLn7+I6SSZBH0rxcEk60OffvD+KXdK6Q88BSW4=)
                          3: 34352e362e3138382e302f32322d3332203d3e20323636313639.roa (hash: 846p0yxTbhy+HDays5hA+5WZx6um3IVnU2wzDUc+QRc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:92:76:05:c9:fc:7b:08:07:2d:a5:bb:b9:7c:2a:6b:fb:52:20:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19
        Validity
            Not Before: Jan 31 09:32:49 2025 GMT
            Not After : Feb  1 10:28:49 2025 GMT
        Subject: CN=09F21D82DFD596CC3C5837CC0039746CBD987207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:3b:44:a2:b2:4e:eb:29:ba:d8:54:f0:84:
                    cc:49:60:04:97:cc:ca:42:8d:1d:6e:71:bd:3d:6f:
                    b7:50:cc:cc:58:0e:5e:78:78:12:73:f0:f6:15:ba:
                    3c:2d:1f:de:e1:c8:6b:48:a1:c9:b0:80:6b:f5:43:
                    62:f7:5e:b0:39:4f:30:a8:8c:1f:64:e4:64:7a:31:
                    5b:81:34:8d:47:1b:5f:dc:e5:7a:3b:3e:a8:67:27:
                    34:29:ed:9c:3a:dd:09:7d:ef:8f:98:ed:6b:0a:1d:
                    c8:ff:8f:36:61:a5:81:8a:e7:8e:00:c1:16:7f:33:
                    25:30:d2:ed:77:72:e1:27:3e:be:57:00:ec:05:3c:
                    aa:5c:b1:82:0c:de:24:33:9b:0c:5f:58:05:99:6e:
                    9c:a3:c5:cf:ee:1a:80:80:80:d6:07:21:53:35:2e:
                    85:63:da:3a:77:fe:dd:aa:e9:76:fb:c9:a3:36:60:
                    6a:9b:2e:64:35:2c:33:27:6a:ce:ba:e5:4f:3e:7f:
                    84:13:44:8c:0a:ad:2c:bb:d7:9e:30:7c:62:c5:84:
                    cf:54:fa:26:15:26:d3:b1:54:dc:ee:23:6a:03:cb:
                    97:ba:45:3e:07:2f:55:04:9a:8e:48:bc:ab:41:86:
                    07:9c:8a:27:d9:87:0e:06:ef:e2:45:9c:44:24:0f:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:1D:82:DF:D5:96:CC:3C:58:37:CC:00:39:74:6C:BD:98:72:07
            X509v3 Authority Key Identifier:
                keyid:2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:9f:bc:18:d3:e2:cb:15:09:55:b9:b2:b1:f5:34:e9:9a:
         39:a5:25:07:58:03:a5:0c:8e:2b:a1:7f:73:ca:c3:04:54:66:
         bf:9c:74:70:c7:66:dd:14:c9:6f:64:b4:3c:29:ce:71:1a:a4:
         d6:0c:46:31:27:d1:8d:ed:31:34:06:1c:89:91:d5:18:42:70:
         c7:a6:73:9a:3b:d0:37:0a:ab:58:08:9c:9c:b4:0a:15:a1:0b:
         a4:b8:de:bb:26:a0:5d:2f:89:cd:13:b2:11:4b:8e:0a:69:b8:
         a9:a3:a6:d4:c1:06:bc:d1:68:7d:1a:96:87:8f:53:2a:1c:d7:
         6e:95:b6:eb:a3:6d:aa:f0:3f:8e:c9:bf:2f:f9:8d:45:d3:1a:
         39:03:ef:ce:33:39:4e:d6:76:e7:41:49:a6:44:01:59:cc:66:
         b9:e7:d4:d0:94:f5:5d:5c:61:cc:bd:31:65:3c:8e:a7:3a:6a:
         06:c3:2d:27:35:c9:fb:4c:26:75:ce:38:c2:61:8c:b0:f6:88:
         90:04:e4:95:84:77:98:ab:75:8b:65:80:4f:1a:ae:3c:d6:99:
         a4:ce:72:b5:62:8c:2f:37:6c:1f:f3:75:cf:e2:b0:3e:48:64:
         48:7a:a7:95:9b:78:9d:92:21:3d:c8:97:e0:8e:fd:2b:3d:e9:
         54:d6:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:50:25 2025 by rpki-client