Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
File:                     CDCD83F4405AFD2B52943F9838374A340858512F.mft (raw, json)
Hash identifier:          4loyN+pq4h1uBVD1exihu7Fy1Hak8S4xIfaKP5A4Kj4=
Subject key identifier:   47:64:31:AB:96:8F:56:69:45:20:8B:87:38:33:82:92:42:1C:E5:6B
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       4694D9B180E84494E5D1F58680F9D79D130D012E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
Manifest number:          0198
Signing time:             Fri 31 Jan 2025 14:10:14 +0000
Manifest this update:     Fri 31 Jan 2025 14:05:14 +0000
Manifest next update:     Sat 01 Feb 2025 17:07:14 +0000
Files and hashes:         1: 323830343a356534343a3a2f33322d3430203d3e20323639303232.roa (hash: UjC4lws3k/qptUD6Qpeku20m/x/XmGrM7vRm0JkP1eE=)
                          2: CDCD83F4405AFD2B52943F9838374A340858512F.crl (hash: L2/014ptsSc+DAPGF/yqu4ge+iFF/waoolUe/Hl+spQ=)
                          3: 34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa (hash: xIXjju3KlmxRTlkbSEyz2NjJ+NGOzcYJf8iDwI5aKZk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:94:d9:b1:80:e8:44:94:e5:d1:f5:86:80:f9:d7:9d:13:0d:01:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Jan 31 14:05:14 2025 GMT
            Not After : Feb  1 17:07:14 2025 GMT
        Subject: CN=476431AB968F566945208B8738338292421CE56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:a8:c2:21:04:3a:36:62:b7:88:f3:b6:de:
                    d2:bd:c3:16:ec:61:79:42:95:a7:d0:05:bf:1a:dd:
                    86:63:ab:5b:c5:ce:9a:b7:cb:23:4f:4c:63:17:89:
                    7c:79:43:ef:49:5c:59:9a:66:5f:2d:af:c9:73:7d:
                    cf:2a:16:96:36:18:33:92:91:c5:88:d2:41:3e:ba:
                    22:17:53:15:76:dd:b8:fd:30:e8:23:a7:3e:48:d6:
                    f3:aa:a2:96:c7:ae:73:53:b8:d9:52:d2:4e:f0:0f:
                    42:0d:bc:d7:8f:49:05:59:55:01:60:aa:e1:ac:4c:
                    2e:87:85:58:1d:1e:5f:cc:80:c8:64:a0:29:5d:32:
                    ac:65:e9:47:24:a4:26:f4:6c:70:5b:e3:f1:3b:8a:
                    12:d7:9d:a8:65:fb:f1:4d:46:de:69:35:06:1d:03:
                    56:36:ae:53:d5:ad:5e:79:26:c3:bc:c7:cc:a6:b9:
                    81:f2:fa:f5:7b:92:96:95:5c:6a:e1:5f:c9:08:5e:
                    fc:6f:82:9d:52:a7:a0:61:98:59:81:ec:68:41:1a:
                    d2:ba:5f:e5:5c:64:da:71:2b:a3:5f:92:f1:fd:67:
                    1b:e7:d2:3d:a7:9f:df:90:e6:75:ba:57:3f:78:91:
                    1b:40:46:9d:aa:10:60:c8:6e:5c:e5:0f:df:c7:97:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:64:31:AB:96:8F:56:69:45:20:8B:87:38:33:82:92:42:1C:E5:6B
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:99:9e:00:f3:1d:77:b7:2c:44:ab:ec:94:b7:e9:69:8c:f3:
         60:b6:14:1e:fe:5b:00:d6:35:88:9e:00:95:08:12:c6:de:4d:
         32:97:41:8d:ee:45:9e:73:39:36:4e:7c:36:c2:8c:c6:e4:73:
         cf:b9:d7:18:3f:3c:d6:90:a3:ec:3e:09:0b:88:5f:41:f4:6f:
         d7:0b:c7:2e:1b:e8:ab:f4:36:fa:c2:2b:76:86:48:4e:32:1f:
         9b:f5:d0:72:55:ce:6f:10:1d:14:d6:d1:dd:e6:b9:66:87:10:
         b7:c8:b3:12:a4:ca:6b:46:28:86:6d:52:4c:6d:6b:7f:e4:97:
         fc:7c:43:7a:10:dd:8f:9d:f4:6c:e9:ae:f5:a9:cd:58:43:28:
         f0:37:23:ca:7e:fa:aa:19:69:60:53:8e:ae:57:f7:c9:ef:7f:
         03:c4:25:18:3b:fa:8a:b1:03:8f:76:ae:e5:1c:ed:31:6a:22:
         0d:bc:46:bc:82:80:d6:61:f4:42:ff:53:17:68:b1:08:b2:f3:
         2c:6a:6c:5f:71:0d:07:8f:96:7c:65:79:64:7a:57:ba:18:9d:
         c8:ee:62:40:55:41:c3:90:bc:61:dc:7e:f1:01:38:42:58:41:
         5c:bb:f3:a6:88:a3:d5:46:fc:81:ac:b0:9c:b4:59:0d:e9:e6:
         e5:3b:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:32:49 2025 by rpki-client