Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
File:                     3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json)
Hash identifier:          GNnDAeTpTmp0AxSiarQivc9oBoj0dH/zimHtFXHJLR4=
Subject key identifier:   DD:FE:7D:5C:77:47:7E:6F:A7:7A:00:0D:39:3F:96:21:71:69:34:D2
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Certificate issuer:       /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial:       1A5B922802CE85B8C28179EBB9FB1B8782027524
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 07:05:40 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 07:20:40 +0000
Files and hashes:         1: 323830343a343934343a3a2f33322d3336203d3e20323637313734.roa (hash: 2+CyEwEwI6Y4MD2mIo1LTA8DNvss+3doYn4uufN0Fgg=)
                          2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: o/Ok7CWaBqgqLHcz8fG3KlKxroOLnyy9MM/OMIgP/Vo=)
                          3: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: 2S73S2fwqKIEucTv5iFLR9IP1j1APznL28hVSPOu/yU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5b:92:28:02:ce:85:b8:c2:81:79:eb:b9:fb:1b:87:82:02:75:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Validity
            Not Before: Jan 31 07:00:40 2025 GMT
            Not After : Feb  1 07:20:40 2025 GMT
        Subject: CN=DDFE7D5C77477E6FA77A000D393F9621716934D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:32:ce:d4:e6:a3:14:26:9d:7c:94:52:86:52:
                    7d:8b:e2:7d:37:c9:0d:76:a9:6a:c8:16:8b:50:00:
                    61:d9:26:2f:cb:58:c3:8c:12:19:35:1a:92:8a:9f:
                    84:0a:16:c8:52:a5:bb:8f:5f:13:c0:62:db:19:ce:
                    74:56:15:2a:6b:66:87:0a:5c:38:2a:ed:88:fd:10:
                    45:e1:fb:a0:c5:47:0b:fa:37:6e:78:78:8d:31:f6:
                    15:de:02:36:f5:bf:8d:d1:f6:3d:cd:ea:b2:bb:f3:
                    24:3f:eb:52:10:84:48:ab:26:23:59:cc:1e:a0:10:
                    1d:03:f3:72:f5:03:76:0a:e3:a0:30:ea:b6:ea:4e:
                    0f:20:30:dd:95:aa:7a:f0:49:8b:f2:a2:6a:bf:f5:
                    9d:a7:7d:cf:79:d4:52:9e:91:c4:69:4d:c2:ba:88:
                    19:ac:2d:8b:f3:aa:4b:d6:9e:80:2b:6d:68:dd:96:
                    a9:b7:d6:d4:9a:f6:9e:c1:07:38:c0:c0:0d:d5:cf:
                    47:58:92:a6:c2:37:1a:52:dc:ac:32:8d:df:8c:a0:
                    fe:91:91:e9:b6:88:51:c6:c0:36:47:56:85:09:b6:
                    26:09:4b:e7:8c:6a:08:3f:b4:17:f3:53:fb:67:0d:
                    6c:4d:01:b6:a6:e7:4c:93:6f:41:07:80:d9:73:35:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FE:7D:5C:77:47:7E:6F:A7:7A:00:0D:39:3F:96:21:71:69:34:D2
            X509v3 Authority Key Identifier:
                keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6e:c3:ff:53:17:5e:30:ff:9c:be:2e:7c:48:6f:33:29:65:
         96:ff:22:4e:25:8a:3f:ec:58:e7:b1:56:99:b3:e0:34:cc:ea:
         0c:02:64:39:88:06:d7:f5:dc:b2:5e:a8:a8:3f:9c:98:a2:35:
         07:21:61:f5:ab:5d:b0:87:6d:8d:8d:aa:f4:cd:7d:de:95:66:
         90:b5:86:98:f6:08:04:cd:ca:a4:3e:18:f0:26:f2:4c:e6:e5:
         ae:99:f0:4d:e5:87:c7:6c:d6:51:85:56:80:d3:4e:9b:da:35:
         bf:86:a0:72:9a:fd:76:3c:0d:73:d0:e0:6d:ca:77:4a:3e:b8:
         36:10:27:f4:4b:9a:a1:17:d0:cf:a8:f9:46:08:45:34:66:47:
         52:9c:91:a5:21:9c:73:c2:52:f5:f4:30:f9:e5:1d:58:92:19:
         2b:92:a0:27:c2:5e:f2:d0:7e:93:a7:b2:28:91:1f:ac:af:02:
         fb:dd:38:23:4a:9c:dc:fa:c0:fc:9b:13:b8:84:3c:6d:6f:ec:
         0b:17:24:ad:ca:2b:d0:1b:78:a5:f5:ec:b6:41:99:3b:08:ae:
         ef:e6:37:21:76:da:95:93:b7:a4:49:fc:d4:d2:98:42:02:31:
         81:b3:dc:12:de:da:3a:17:5b:49:b4:ce:66:e6:23:33:7c:ad:
         33:a2:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:28 2025 by rpki-client