Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
File:                     049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft (raw, json)
Hash identifier:          p5VhyZjpEaWuLssDLSpk1Ksk52rXOW8aP3L5XliLslc=
Subject key identifier:   3A:EB:EC:B8:FF:17:9E:30:DC:BE:EC:39:EA:BB:27:4A:3C:60:65:74
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       101B5333B0B4498DECA0816717037026685A2D77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 14:45:45 +0000
Manifest this update:     Fri 31 Jan 2025 14:40:45 +0000
Manifest next update:     Sat 01 Feb 2025 18:32:45 +0000
Files and hashes:         1: 3231362e39382e3231392e302f32342d3234203d3e20323636323236.roa (hash: XDuDnpppl7UClujt14sqahtpMUd8gq7NDs69Pj0NQv0=)
                          2: 3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa (hash: UjX5O72mCYmpUov+5O9R47RTrNXNjqZ0MtnjEwpTguI=)
                          3: 3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa (hash: CFfGPzfREzw0+iep6aaBte2a+M0WqHq1mmgVG+ebPms=)
                          4: 049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl (hash: 38vCHpirMcr70oU5Bp7IxTE7V+BAaED7Qot5BTBmK8o=)
                          5: 3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa (hash: 8BzCi6jnicyUmeh80fs8pNGn/tQYK+/lGozVLx0/fCU=)
                          6: 323830343a336361343a3a2f33322d3332203d3e20323636323236.roa (hash: wmemXKKwLXaCH2p3EIt6BDrKKrWTZOHasazGQ/pD4gc=)
                          7: 3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa (hash: Rk457FvNyAmjoHPdog4/0Uzl4tEk5ru19WPzkasNX0w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1b:53:33:b0:b4:49:8d:ec:a0:81:67:17:03:70:26:68:5a:2d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Jan 31 14:40:45 2025 GMT
            Not After : Feb  1 18:32:45 2025 GMT
        Subject: CN=3AEBECB8FF179E30DCBEEC39EABB274A3C606574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:dd:3b:e5:68:e5:d8:3c:12:f0:d7:42:7e:
                    a3:05:43:e1:1f:71:81:cd:c7:c1:ba:78:a5:c9:c0:
                    e1:6e:5c:bf:43:89:55:36:b2:63:a6:b1:4d:e1:63:
                    00:47:1e:50:2d:91:9c:57:da:b7:3e:42:38:9c:1a:
                    9a:4a:e8:6d:dd:80:31:42:ba:8f:0b:ce:2c:48:53:
                    7e:0d:43:c5:a6:1f:e0:d0:73:32:47:90:7f:4e:3e:
                    e5:f3:24:e9:2e:ab:29:a5:e7:ce:9f:3e:b8:04:f3:
                    8c:e2:b7:af:cd:cc:2f:fc:69:48:c2:05:cb:f8:7c:
                    7c:c9:eb:9c:cf:4c:77:83:3c:36:28:c3:23:77:56:
                    bd:4b:ee:8c:18:b4:42:ec:88:48:44:0b:5c:21:aa:
                    d9:e5:65:10:b3:f5:1d:8b:ae:93:d8:19:82:41:39:
                    60:e0:0b:09:59:81:5d:df:18:68:88:51:52:89:46:
                    ae:a8:36:09:4f:0d:4f:89:d2:b0:89:be:1e:cb:b2:
                    94:31:0f:f4:78:9b:5a:bc:29:8f:67:7c:19:84:42:
                    09:89:72:96:33:d4:31:72:d0:0f:ac:93:a6:18:a9:
                    9e:bf:f0:e6:8f:03:d3:83:9a:f7:5d:30:51:a8:61:
                    92:19:d0:ae:0e:ad:d0:a1:32:2f:00:e7:c4:8e:7b:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EB:EC:B8:FF:17:9E:30:DC:BE:EC:39:EA:BB:27:4A:3C:60:65:74
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:13:c7:b5:9d:2e:9f:8e:74:81:d8:00:b5:be:38:81:52:02:
         d6:18:bb:de:d2:9d:da:a7:74:0f:40:85:e5:9e:0f:37:75:5a:
         ae:d9:d1:42:9f:f5:2b:7e:50:31:f4:c9:59:19:26:ee:ec:ce:
         fa:78:ed:6c:31:44:b2:fd:ff:cc:a9:29:fe:6a:8b:20:bc:18:
         56:00:59:0a:75:01:05:91:63:53:dc:11:d4:fd:b2:47:6c:53:
         f0:9b:f9:98:d8:22:40:0f:01:62:45:2d:0a:fb:ac:ab:e6:02:
         f7:7c:a7:a3:0f:23:9e:3d:12:0a:f5:8e:1d:b8:19:f5:f6:a3:
         c7:dd:0c:10:92:ae:96:56:66:ed:d2:3d:69:a3:d5:7c:6b:86:
         87:08:7d:18:6a:39:b1:fe:f0:9d:b0:a1:26:72:66:89:38:e1:
         0c:34:b8:75:a4:52:ce:ba:86:eb:5c:af:a4:e8:24:14:6c:e5:
         10:c9:6c:db:df:80:b7:8b:9a:ac:9a:54:49:62:2e:4f:42:d1:
         9b:22:71:86:14:70:e2:68:06:b4:fa:12:75:29:a6:fc:ba:e0:
         2d:ca:d8:cf:3b:a2:19:ed:6d:95:f1:08:38:63:8e:a7:36:bb:
         ea:00:24:7d:46:15:26:c3:10:d2:ad:1c:b4:c5:b6:66:a6:0c:
         d1:55:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:43:39 2025 by rpki-client