Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft
File:                     D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json)
Hash identifier:          09IYo5i/mAOGjYWn9M0UHyHx/iL4F67rE1neFqHjp20=
Subject key identifier:   94:95:84:84:A7:05:A7:CE:B3:E1:91:03:76:21:C4:70:5E:3F:62:6B
Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8
Certificate issuer:       /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
Certificate serial:       650E5375C9411BF5F9074575158C5C073776D8F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 14:17:09 +0000
Manifest this update:     Fri 31 Jan 2025 14:12:09 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:09 +0000
Files and hashes:         1: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: HehrNIzW8YIj50NZzvz1VRN/ThMuVHcdZYg24/SmLgI=)
                          2: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: tpDrSLFVcLIkbvGEk4w+RdBZT/Ze3DcP8em09KqDz18=)
                          3: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: KRm9Fs3gCd0u+Id6z8ePgLrPc5MfDDEyh+uXhF+zFgo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0e:53:75:c9:41:1b:f5:f9:07:45:75:15:8c:5c:07:37:76:d8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
        Validity
            Not Before: Jan 31 14:12:09 2025 GMT
            Not After : Feb  1 16:00:09 2025 GMT
        Subject: CN=94958484A705A7CEB3E191037621C4705E3F626B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:3f:e1:84:57:0d:f3:56:bd:82:6e:b7:29:
                    e5:be:c9:ac:27:aa:8c:f4:f5:c5:6b:3e:a0:82:26:
                    70:e3:82:f5:d4:af:eb:ed:89:e5:40:fc:fc:41:86:
                    ef:61:68:0d:84:37:0e:80:ec:7e:1e:da:94:a2:fd:
                    8d:8b:18:f8:3b:41:b9:5b:22:56:b5:d3:d5:bb:53:
                    16:a5:1b:a9:c8:2f:1c:6d:34:70:82:3f:f8:79:5f:
                    dd:d0:f1:93:64:59:66:29:29:aa:f7:b9:6e:a5:b3:
                    a4:24:49:5a:60:a5:2e:00:56:e9:cf:58:eb:47:0b:
                    6b:75:45:f4:63:2c:16:54:e5:00:f9:88:62:8f:a2:
                    e8:28:55:d4:cf:bb:b9:6b:52:50:7d:e0:00:b7:8d:
                    da:63:2c:12:13:01:2b:a4:e4:98:97:37:0e:cf:88:
                    b4:b4:84:f5:5f:62:83:04:92:c8:38:da:54:9d:36:
                    50:00:8e:8b:7d:2f:05:c1:46:e2:64:3f:cd:76:38:
                    42:e6:a4:20:db:a4:98:b9:8f:83:e3:4d:d9:c6:ca:
                    84:7d:00:23:b3:f5:29:9b:15:cc:d6:3d:10:ea:c7:
                    58:46:0b:41:4c:7a:f4:cf:ca:e8:38:1b:e6:c1:08:
                    7d:5f:4c:70:41:b8:92:6f:41:2c:13:0b:a4:8d:fe:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:95:84:84:A7:05:A7:CE:B3:E1:91:03:76:21:C4:70:5E:3F:62:6B
            X509v3 Authority Key Identifier:
                keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:49:5e:41:d1:85:eb:45:83:2c:3f:15:92:da:ea:d0:7e:12:
         c0:01:5d:13:63:2f:ef:71:e3:d7:de:05:9d:04:f2:b0:7d:28:
         20:23:e2:20:be:88:77:87:2c:6e:0c:9d:85:ce:b0:7e:6b:cb:
         52:f8:cd:e6:97:e4:d9:c0:94:d3:13:0d:81:99:2c:c3:7a:fb:
         a9:84:56:cc:e9:b4:ab:05:9a:33:be:72:20:cf:94:92:79:c0:
         d8:ff:f4:ad:a6:b9:72:cd:a2:fe:54:4e:6e:ec:96:21:53:e7:
         3e:ed:c9:32:73:ef:b1:e9:ff:1d:a6:40:80:9c:36:2d:17:6d:
         03:64:6c:73:84:87:60:33:0d:32:c7:89:c7:a2:6f:e2:43:4b:
         d7:6b:89:c2:51:0d:5e:3b:b3:99:41:e7:3e:9a:4e:29:b5:85:
         bc:f0:6d:95:af:49:c1:ca:c2:54:ae:ac:d5:b8:7a:1b:db:f0:
         a0:e8:d4:91:fb:88:9b:71:ea:a4:47:b4:0d:a3:d5:1e:a2:78:
         b9:ed:89:da:2b:84:60:a9:7a:63:00:2b:2e:26:73:56:6f:a5:
         79:95:b9:a4:86:37:e7:c7:cf:ea:09:7a:ce:aa:88:a9:76:7f:
         9c:13:90:67:a4:c4:35:5b:ac:c5:63:6c:3a:43:b0:b5:5b:09:
         c1:3f:d4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:01:12 2025 by rpki-client