Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
File:                     7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft (raw, json)
Hash identifier:          Ancob05KTf41bUuwQKgQBeyV67wZ95wNAE1H1qrQp4U=
Subject key identifier:   EB:54:BD:F8:A6:92:E6:E1:33:82:46:FE:1D:FF:25:D8:2C:9E:74:CA
Authority key identifier: 7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D
Certificate issuer:       /CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
Certificate serial:       5ABF05A0695791ED8793AFF8405A14F97F411D20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 16:45:36 +0000
Manifest this update:     Fri 31 Jan 2025 16:40:36 +0000
Manifest next update:     Sat 01 Feb 2025 19:08:36 +0000
Files and hashes:         1: 7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl (hash: Qjx6NzuqNWAA8hlXNJS00KsJr4k6JR/+H1w7Yr8lgA0=)
                          2: 323830343a353764343a3a2f33322d3438203d3e20323638303839.roa (hash: ePSx0WselKpTyspxWBCkEStAH4YiMH+NaXDPZsCYEJo=)
                          3: 34352e3136382e3138382e302f32322d3234203d3e20323638303839.roa (hash: jczxA/YfHeSSPX54sY44tILhuaJCQyQTjssgS87n7NY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bf:05:a0:69:57:91:ed:87:93:af:f8:40:5a:14:f9:7f:41:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D
        Validity
            Not Before: Jan 31 16:40:36 2025 GMT
            Not After : Feb  1 19:08:36 2025 GMT
        Subject: CN=EB54BDF8A692E6E1338246FE1DFF25D82C9E74CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:0b:2c:e3:43:47:3d:ed:2a:e7:b1:05:04:
                    23:3c:18:d6:9e:42:0d:83:af:86:11:ae:0c:35:a0:
                    1c:9b:68:57:1d:d2:ec:e2:19:ef:36:51:c4:06:4d:
                    33:79:f9:78:a8:2a:7d:70:2d:70:ef:7b:53:cf:dc:
                    72:45:b2:c6:43:1e:8e:6e:71:ba:b6:4d:95:91:b0:
                    d6:6e:5f:6e:25:09:2e:d4:57:b2:22:a5:94:63:e7:
                    f1:ad:13:0f:f0:b7:9b:3b:1e:b2:8e:37:db:fb:ff:
                    b3:73:84:4d:78:13:c4:40:f3:0f:41:29:43:fc:51:
                    87:e5:16:9a:86:ca:ed:36:8a:87:51:03:fa:84:a1:
                    0b:3c:dd:fe:b9:bf:d5:a9:80:0d:88:b1:0c:6c:36:
                    52:b9:2f:83:9b:06:23:f5:2e:22:d3:ea:ea:83:42:
                    32:8f:71:eb:a1:d5:8c:ed:68:12:c8:b5:21:9d:d3:
                    01:27:9f:65:a2:2d:e3:86:15:d7:c6:7e:65:cf:46:
                    1e:61:dc:f2:fc:41:b7:46:a3:13:d8:d5:b1:42:f9:
                    4f:90:70:a6:29:b5:6d:f3:9d:1f:ae:70:ba:3b:02:
                    8f:90:39:af:40:1a:7f:04:bd:e7:ad:c9:21:63:90:
                    93:ca:8d:4f:34:f1:d5:7a:fb:39:d6:fc:c2:fb:48:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:54:BD:F8:A6:92:E6:E1:33:82:46:FE:1D:FF:25:D8:2C:9E:74:CA
            X509v3 Authority Key Identifier:
                keyid:7D:2F:EE:C4:D4:AC:78:B8:E6:A6:B0:C0:C6:A3:A0:2C:48:A9:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rWaW1VagjRnQZYJ31bKQXfhHRfLgVSHRT6v5xhkNj62/1/7D2FEEC4D4AC78B8E6A6B0C0C6A3A02C48A9F20D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e4:ab:1a:8e:88:e4:66:4d:72:b8:b4:62:c7:fb:90:59:53:
         a0:d7:eb:0e:3d:6b:39:f9:d7:00:bb:9b:16:8c:af:cf:9c:6c:
         cf:b4:54:af:5c:e0:09:ee:18:7a:50:06:13:c3:b5:b5:ed:62:
         ec:ab:7d:75:2f:ba:d7:99:cd:81:f7:08:7f:f2:52:01:6c:07:
         3b:00:5c:97:d8:33:2c:4f:da:c3:01:01:d0:50:50:91:dc:0c:
         82:ca:b2:cb:62:b8:b6:b5:76:ed:49:6d:2a:82:7d:17:83:30:
         9a:4f:b5:f3:f6:1c:ca:1c:fd:5e:ea:4b:3f:f2:53:69:e4:d5:
         8f:01:06:b7:56:1c:1e:40:f0:27:b9:94:f3:c2:93:e6:8e:73:
         90:95:ec:62:c9:31:6e:4b:77:a0:f2:20:2a:7c:de:67:e7:05:
         4a:0b:71:1c:be:22:a3:20:de:5d:c2:b6:65:65:3f:e6:e1:44:
         1b:4e:f9:b7:12:02:17:7e:f0:4f:51:67:00:e7:2b:44:3c:d2:
         be:7a:d9:b7:77:a0:04:cc:cb:6a:b5:7f:ef:9c:4f:78:38:92:
         bf:76:6d:50:20:74:4a:a8:37:ea:5c:1f:58:ad:33:c4:4b:75:
         8a:d6:8b:76:c8:57:f9:e3:4a:e7:0f:0f:4c:cd:63:88:3e:16:
         89:ee:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----