Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
File:                     E2072C475E2925AB717FA25CB0C35668A240297C.mft (raw, json)
Hash identifier:          SBT+hYnfeeWz/rrZ5USUWFs0ZI57SSE41CpkejJio14=
Subject key identifier:   34:05:10:FE:85:AC:3C:FE:1A:56:8A:30:B8:6A:BF:6B:CF:2F:B3:E1
Authority key identifier: E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
Certificate issuer:       /CN=E2072C475E2925AB717FA25CB0C35668A240297C
Certificate serial:       2F44531912AE4DDB8544A7C6E1C3103641682BBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
Manifest number:          018E
Signing time:             Fri 31 Jan 2025 04:33:31 +0000
Manifest this update:     Fri 31 Jan 2025 04:28:31 +0000
Manifest next update:     Sat 01 Feb 2025 08:21:31 +0000
Files and hashes:         1: E2072C475E2925AB717FA25CB0C35668A240297C.crl (hash: oUmEBEZyOpVZlROwj+QANXvf0eKHs/2ScKao7HWAo3E=)
                          2: 323830343a376138633a3a2f33322d3438203d3e20323731333738.roa (hash: QIG1F+IV30Vtsfdaj51A0MNO5NWaVSAyjG6ZTfCsC6M=)
                          3: 3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa (hash: 8+MOg9TYJ6anaCxrTFt9pF8jEix+Xm0n5BSjU/qNRlg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:44:53:19:12:ae:4d:db:85:44:a7:c6:e1:c3:10:36:41:68:2b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2072C475E2925AB717FA25CB0C35668A240297C
        Validity
            Not Before: Jan 31 04:28:31 2025 GMT
            Not After : Feb  1 08:21:31 2025 GMT
        Subject: CN=340510FE85AC3CFE1A568A30B86ABF6BCF2FB3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:88:eb:64:01:2d:bf:58:96:bb:da:d4:6e:
                    c0:b9:91:52:df:9b:2a:0b:6d:9a:99:13:a1:a2:50:
                    a8:86:2a:16:f0:66:2b:a3:e8:b9:01:41:30:b8:74:
                    74:e5:bb:a9:0a:5e:d5:92:04:a0:45:58:b5:79:50:
                    e3:25:82:ba:95:ae:28:7e:1b:9e:6c:3a:30:9b:02:
                    06:cd:2b:88:68:a0:b4:10:bb:22:9d:f4:7d:ee:97:
                    f5:8b:a2:43:ed:b1:17:06:7e:72:fe:78:49:ab:ac:
                    12:ef:a1:24:7b:fd:99:34:b2:91:33:3c:98:ed:8e:
                    4e:b7:cd:3b:2f:49:cd:3c:c8:9d:c5:7b:dd:43:37:
                    a3:64:fa:2b:56:c7:78:ef:ed:9b:d0:9b:6e:ec:79:
                    ce:34:de:47:ea:09:53:5b:67:b9:d9:b9:19:5d:b7:
                    32:21:5a:af:09:f0:07:3c:c0:36:52:02:ec:07:1d:
                    d8:44:64:e0:71:cf:95:db:1d:51:a6:29:9e:ae:55:
                    cd:bf:69:03:1d:0b:d4:d6:bb:ca:2a:e6:b7:a8:30:
                    73:d6:bf:09:c8:95:7b:72:0b:3a:89:de:63:4a:cd:
                    d8:7a:f9:4a:83:c6:dc:d6:20:5c:78:aa:33:02:c0:
                    33:f2:08:b4:c0:2f:ba:2a:f8:47:5a:4c:62:93:59:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:10:FE:85:AC:3C:FE:1A:56:8A:30:B8:6A:BF:6B:CF:2F:B3:E1
            X509v3 Authority Key Identifier:
                keyid:E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a5:7a:8b:61:67:5e:3b:ce:bf:06:60:46:ec:3b:b6:31:f4:
         e0:85:ec:17:92:ba:6a:12:58:a7:17:fd:1f:2b:07:94:0f:35:
         a5:3c:70:1a:94:2a:7b:ef:04:48:d8:6e:4f:96:6a:ee:71:a8:
         fc:6c:da:c9:74:d2:d1:7e:e9:c0:0a:a0:39:c1:fb:0d:6e:3b:
         91:8f:b9:a7:a6:7f:bc:7e:20:95:41:ce:99:2f:29:11:f5:f9:
         47:97:7d:f4:15:44:42:6d:0e:4e:e2:3f:2c:22:00:db:b8:3d:
         3f:0f:c5:9e:8b:50:5e:27:b1:0c:eb:9b:fa:2c:e9:dc:fe:1f:
         6c:16:27:42:f5:0f:75:d6:d5:af:f1:96:67:15:ce:95:1e:12:
         10:a3:8d:e5:22:42:9a:7a:24:b8:06:74:b2:c0:91:87:bb:89:
         0f:cf:81:b1:97:7f:06:56:c0:64:6d:6d:9c:d9:ca:0f:73:81:
         6e:8e:a3:a8:c2:97:51:60:a3:17:9b:44:2b:3b:28:0a:27:0f:
         4f:bf:22:72:02:a8:54:b6:0d:f8:cf:4b:25:eb:71:d9:ca:d6:
         47:89:67:8d:fc:d0:11:13:8f:54:b9:2e:d2:48:67:14:f8:7b:
         6f:b1:ac:a0:d8:0a:07:8d:f2:75:e2:89:2e:9d:f7:89:17:cc:
         c5:b0:b1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:01:59 2025 by rpki-client