Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
File:                     9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft (raw, json)
Hash identifier:          ys206cck9MpHcAs3ZGh82E05sAef5rnYNU9WUKk/da4=
Subject key identifier:   65:B7:A5:BD:BE:56:2B:58:14:64:06:D9:4B:DC:49:13:C3:08:C6:F2
Authority key identifier: 9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85
Certificate issuer:       /CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
Certificate serial:       61BEECF0A191726C83C20F0785CEBE6902DF4966
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 09:53:37 +0000
Manifest this update:     Fri 31 Jan 2025 09:48:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:41:37 +0000
Files and hashes:         1: 323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (hash: MEr3O6ibKU80eMFQUkD/Hv7j++TL7CgWOIDvUfG/vjQ=)
                          2: 34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (hash: wGNZNggHaM/yBWZqJaTvcpNdRoYux0P6aMXlI344qXg=)
                          3: 34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (hash: 4OqhzCXvSddMPt+vmOXwPa24eXLfWoS2EWQsDiXKasA=)
                          4: 34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (hash: 5JEQ41mS93qIAQdS67rT4lBibFdkhJ+y7yw43mriUAQ=)
                          5: 34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (hash: ial675of+ZesGVVCtl0oHXA8v7Tu2e/aWwmHDmtjs8M=)
                          6: 9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl (hash: OoLi3RZibPML8ePzVt7C21yKdDPqVVR5V4jCcAelQes=)
                          7: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (hash: AY+0UKqSeFi+VcA328CtiUwEKZiGPUTg47u6izctak0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:be:ec:f0:a1:91:72:6c:83:c2:0f:07:85:ce:be:69:02:df:49:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
        Validity
            Not Before: Jan 31 09:48:37 2025 GMT
            Not After : Feb  1 12:41:37 2025 GMT
        Subject: CN=65B7A5BDBE562B58146406D94BDC4913C308C6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4c:2f:ec:50:88:3a:0d:8c:ef:67:54:ff:54:
                    22:c2:da:59:34:53:ce:40:26:61:cb:5a:af:76:b2:
                    01:9f:c4:fb:39:88:9e:56:f0:08:b8:a3:1a:4b:ce:
                    36:59:2c:f1:55:fb:e6:d3:f5:69:82:93:f5:f2:2d:
                    09:49:6c:9d:d2:b6:f0:24:a9:0b:f1:e1:26:fa:a5:
                    ad:ee:88:92:93:eb:b5:f4:42:f4:87:2f:19:f6:be:
                    db:26:f1:af:e7:ac:b2:d6:71:1c:c7:67:ff:1c:38:
                    6f:84:6e:75:76:0d:a4:d3:c9:82:b1:bd:d1:d7:01:
                    3e:45:0a:20:e8:7f:77:26:c8:f3:84:e6:af:8b:53:
                    fd:25:1e:1f:c6:68:f8:9a:86:8b:2d:6c:e4:14:04:
                    97:6a:05:9f:b0:d7:a7:91:3f:d2:b4:8f:2d:2d:eb:
                    56:60:c4:77:4f:f0:c2:9e:e3:fa:42:c9:83:a7:bd:
                    4c:7e:7a:54:56:d3:61:e4:2c:9a:11:4f:e2:d9:dc:
                    22:0e:e2:93:6a:87:6d:b6:8c:41:49:a7:43:40:bc:
                    03:5f:45:67:3a:c3:3b:66:d4:fb:db:94:0b:92:19:
                    4c:84:71:62:e2:7e:30:f5:2e:78:88:64:85:04:86:
                    7f:30:3f:34:69:f2:a6:35:5d:fb:64:82:41:ba:c0:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B7:A5:BD:BE:56:2B:58:14:64:06:D9:4B:DC:49:13:C3:08:C6:F2
            X509v3 Authority Key Identifier:
                keyid:9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:bc:0d:50:af:08:37:36:4e:58:c4:06:3f:16:30:2d:36:b6:
         19:a7:00:5a:83:17:ad:e4:c9:19:bd:4a:69:37:5a:a8:60:7c:
         bc:d7:a0:ba:32:d5:4c:99:da:5a:93:70:82:89:93:dc:ea:b9:
         55:84:fb:66:27:b4:62:e0:fa:e4:f4:3b:f8:87:26:57:25:36:
         78:fd:0c:fe:bf:f8:cd:2d:da:39:22:15:be:69:7b:60:4c:d8:
         7b:0c:71:cd:fa:6a:fd:d2:f9:4b:08:e4:45:39:d9:8c:30:19:
         88:27:1d:89:f2:9a:18:d8:a1:e5:03:f7:39:95:de:60:59:5c:
         e7:f6:6d:f4:c9:4e:af:f5:1f:41:78:2e:6e:af:f0:fd:06:4d:
         04:0c:7b:76:34:fa:11:04:54:d5:90:66:28:b2:7f:02:af:ab:
         c7:70:32:3c:3b:0d:83:21:81:cd:30:8e:03:0e:d9:f8:24:4c:
         49:77:ae:e8:29:d1:cb:fa:6d:2d:8e:3a:0d:b4:e7:0a:46:62:
         0b:80:27:0d:50:c2:f9:0e:c7:d6:1c:21:41:5f:2b:65:7e:cd:
         7d:bf:35:2f:0d:92:e1:81:b9:dd:36:96:b3:53:ef:8e:af:27:
         b1:b6:4c:ee:c9:9f:93:16:0f:d1:96:ec:a9:5d:e9:1b:7b:21:
         53:c8:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:28:26 2025 by rpki-client