Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
File:                     1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft (raw, json)
Hash identifier:          e3nhyS3MpLmwKr0HPONZMVcSB2H541SisAQylzxF5v0=
Subject key identifier:   DB:6C:25:8A:36:14:22:91:C0:B6:74:7B:03:DC:84:7E:E0:84:10:D5
Authority key identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
Certificate issuer:       /CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
Certificate serial:       44CDB3430FC2DEF725D987C483F3A9CBFD1E8151
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 14:31:16 +0000
Manifest this update:     Fri 31 Jan 2025 14:26:16 +0000
Manifest next update:     Sat 01 Feb 2025 16:52:16 +0000
Files and hashes:         1: 323830343a353833303a3a2f33322d313238203d3e20323638313132.roa (hash: xSWR2xIqJcDTT0yhy6hvYIToPFBg2Wzncor55OOr9XM=)
                          2: 34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (hash: Y9qphqLnZFf8LXiTWveisRC/af4mMwwn/uPz6dMV0GU=)
                          3: 1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl (hash: Iq2lIbsXaIYc5uIN9G5ZpQdgeVP3JivSiqc/z59+AHQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cd:b3:43:0f:c2:de:f7:25:d9:87:c4:83:f3:a9:cb:fd:1e:81:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
        Validity
            Not Before: Jan 31 14:26:16 2025 GMT
            Not After : Feb  1 16:52:16 2025 GMT
        Subject: CN=DB6C258A36142291C0B6747B03DC847EE08410D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:f5:6b:d6:8f:4e:7a:2f:74:19:b0:45:78:
                    be:63:55:62:77:a4:25:93:e3:f8:1f:41:8d:02:d2:
                    86:f2:cb:36:1e:e3:8f:5d:5a:fb:bd:5f:26:69:33:
                    98:c0:25:04:b3:28:6f:b3:2e:e5:13:10:04:df:08:
                    90:c0:0f:de:2d:7c:0c:33:82:03:8f:20:1d:e2:15:
                    e9:9e:bd:c7:7e:43:5f:02:ac:a5:75:3d:da:c2:34:
                    33:e8:eb:38:b5:1d:dd:c3:04:dc:08:5a:41:61:29:
                    0c:98:51:0b:54:83:a9:cb:b2:b8:35:9d:02:ec:8a:
                    77:01:e6:b1:24:00:5d:88:aa:4c:eb:ae:3f:73:0d:
                    1b:88:5d:aa:a1:89:94:d4:a5:12:bf:1c:49:c9:f2:
                    33:44:f5:c4:20:eb:5c:32:e1:7b:99:78:54:5c:95:
                    a4:48:1f:c1:de:6a:5b:fd:97:0d:e3:13:5f:7a:56:
                    3f:96:5b:4d:5f:47:d3:ca:5a:41:71:17:18:cd:07:
                    2c:d5:3a:cf:aa:f8:de:06:0c:a2:a1:54:1b:e4:f1:
                    39:41:6d:01:e5:0a:b4:fc:5e:62:55:ce:07:43:d8:
                    db:5b:28:02:b3:2a:58:91:42:9c:d4:e8:7d:68:f3:
                    4b:2d:96:df:02:6b:a4:d7:26:22:bc:a6:88:5a:28:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6C:25:8A:36:14:22:91:C0:B6:74:7B:03:DC:84:7E:E0:84:10:D5
            X509v3 Authority Key Identifier:
                keyid:1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:ad:c5:38:f1:61:32:d4:22:44:43:6f:64:a6:2d:c3:0e:
         af:7e:33:af:89:2f:66:41:4a:e7:9f:0c:d1:85:e1:43:1c:d7:
         45:dd:a8:55:f0:e2:55:98:30:6a:9d:01:4f:bd:1d:ef:5a:9d:
         d0:a2:5d:aa:bb:9a:6c:f9:3a:5c:95:0d:e4:dc:28:31:71:c4:
         a9:8b:09:2c:99:8c:1b:03:2f:03:c7:7f:89:c5:12:2b:d0:90:
         fd:5f:f4:47:2e:3c:10:03:4a:b8:e5:64:ff:bc:89:53:fd:84:
         02:37:2c:7c:8c:2f:ba:16:d9:f9:d6:75:03:e6:a0:fa:8a:6f:
         48:33:4d:31:02:29:56:1c:77:27:42:ce:3d:64:39:79:e3:fb:
         7d:8c:6a:93:31:da:16:de:47:59:75:e0:98:ab:1a:69:ff:c5:
         8f:10:c1:9d:37:82:91:e5:76:bd:0a:f5:9c:47:95:66:af:4c:
         59:a8:cf:e4:12:e6:57:a6:71:6d:32:9b:33:ce:ba:78:5f:94:
         8f:53:fd:f9:c6:32:93:42:cf:fa:8f:c9:17:aa:0c:c7:f3:66:
         1b:b7:b8:68:c0:e5:96:f5:e9:b0:57:f4:53:bd:c0:de:f0:0a:
         97:fe:84:74:f8:42:90:c0:b0:89:ca:e5:65:5c:4e:43:6c:f1:
         06:f4:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----