Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.mft
File:                     C70B4F98326F0C82AA39763975F56D6A09ADFE5E.mft (raw, json)
Hash identifier:          SRMwjntQYoRRumNeyeDBovrmIQZ9r59KV/D228lG8as=
Subject key identifier:   32:71:30:33:7C:D9:A0:61:E2:0A:9E:25:34:50:1D:00:2B:64:DA:BC
Authority key identifier: C7:0B:4F:98:32:6F:0C:82:AA:39:76:39:75:F5:6D:6A:09:AD:FE:5E
Certificate issuer:       /CN=C70B4F98326F0C82AA39763975F56D6A09ADFE5E
Certificate serial:       78402586324DE4000CBB777EC0F5AB7C2049E113
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.mft
Manifest number:          23
Signing time:             Fri 31 Jan 2025 03:46:56 +0000
Manifest this update:     Fri 31 Jan 2025 03:41:56 +0000
Manifest next update:     Sat 01 Feb 2025 06:01:56 +0000
Files and hashes:         1: C70B4F98326F0C82AA39763975F56D6A09ADFE5E.crl (hash: fhQeiFB3222AOqDFOE21M9a1QharWjxFGVrpmJ4Q10s=)
                          2: 34352e3136382e3135322e302f32322d3234203d3e20323638303639.roa (hash: q5lvaY065jRpwuyyESPku7+rk1XRscLn21Q0WDSQcVc=)
                          3: 323830343a353738343a3a2f33322d3334203d3e20323638303639.roa (hash: bsmn9oOEQ/CNCWR7t7Ac4bgs88gt6DmneqJl2P4Svh4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:25:86:32:4d:e4:00:0c:bb:77:7e:c0:f5:ab:7c:20:49:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70B4F98326F0C82AA39763975F56D6A09ADFE5E
        Validity
            Not Before: Jan 31 03:41:56 2025 GMT
            Not After : Feb  1 06:01:56 2025 GMT
        Subject: CN=327130337CD9A061E20A9E2534501D002B64DABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:6b:e5:2e:e1:42:fc:14:7b:51:0a:50:70:
                    b0:02:10:7f:17:5c:cd:4b:6b:07:cb:4e:79:29:06:
                    5b:64:1d:4a:eb:94:8d:27:ca:2a:d5:43:6e:23:a0:
                    f3:16:15:6a:7c:f9:7f:21:29:cc:69:f8:a4:c4:58:
                    09:0c:27:40:8e:e9:a4:89:09:25:10:19:ef:1e:0c:
                    46:7a:44:67:75:87:9d:53:2b:1a:73:a0:b5:31:49:
                    dd:e6:86:7c:3c:77:52:21:fe:aa:93:47:d9:c4:36:
                    ea:c6:b6:da:0f:b5:00:c4:fd:e9:38:e8:2f:fe:fd:
                    9a:f6:f5:04:cb:49:b5:49:8b:0c:88:30:59:c4:38:
                    97:33:d9:a0:97:e5:5a:68:b7:8c:dd:aa:e4:88:8c:
                    51:b2:8c:0d:55:62:fc:01:30:73:b2:86:d7:33:3e:
                    22:9c:02:f2:9c:73:d0:88:6f:77:f8:d1:d1:d8:b3:
                    d5:da:cf:c0:96:91:fd:f1:62:ad:cf:19:ff:e0:b2:
                    f5:67:c3:58:b0:da:3e:9a:06:2c:9a:a9:5e:06:a3:
                    73:12:12:de:e5:79:17:03:a1:0c:7e:e7:52:15:67:
                    89:52:a8:5e:33:e8:d7:db:00:7b:85:6e:0e:2b:47:
                    70:dc:11:32:8a:98:e6:33:47:f5:b8:9c:5d:2f:f5:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:71:30:33:7C:D9:A0:61:E2:0A:9E:25:34:50:1D:00:2B:64:DA:BC
            X509v3 Authority Key Identifier:
                keyid:C7:0B:4F:98:32:6F:0C:82:AA:39:76:39:75:F5:6D:6A:09:AD:FE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JpkQPMXVWFE6wKj3rTx2dpgMAQ7HqgCrJMteAgYMueb/0/C70B4F98326F0C82AA39763975F56D6A09ADFE5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5c:35:b0:51:36:0f:ee:80:40:da:58:7d:85:ba:5e:52:f9:
         e5:d6:51:d3:0b:66:12:10:82:c8:cf:41:35:de:55:a1:08:89:
         f0:6f:8e:0b:ee:5d:d4:26:86:5d:b5:14:91:c7:32:e6:10:fe:
         94:e4:de:ad:7c:89:82:e8:bf:7a:b3:1f:a2:46:b7:93:8a:5f:
         f4:9c:43:f3:68:7c:5b:48:5a:1d:69:0e:3b:59:fe:28:65:d1:
         c4:62:54:bc:80:ff:46:f7:00:da:f2:cb:35:44:0e:85:d3:76:
         71:4d:e7:e9:c9:e1:9f:3a:2c:69:2c:bd:2b:19:02:0e:e8:58:
         12:7f:1e:60:46:ce:d0:f4:5d:5f:6f:da:d5:5e:d7:1f:3a:69:
         44:f1:da:ec:78:85:f3:00:44:19:cf:9f:28:09:b8:cd:1f:30:
         1a:30:25:5f:20:3d:f8:f8:6c:a8:0f:a1:0d:7b:c7:32:ae:f8:
         63:6b:41:e0:a7:18:a9:c2:13:72:be:10:b9:e3:29:fc:a4:49:
         d5:5e:04:56:03:e1:fe:3a:f0:50:03:94:fa:5b:8f:cf:8d:c9:
         f9:d6:9d:b2:72:aa:f2:3f:4c:c4:7b:91:79:0a:69:13:9e:79:
         c6:ad:22:3f:bf:b9:cd:1a:89:5d:dc:8a:78:88:2b:e8:ba:c8:
         4e:bc:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:45:57 2025 by rpki-client