Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft
File:                     68E8FFC7C7187C981753E423319759DC084F69E3.mft (raw, json)
Hash identifier:          LU3zYmidZfYlrPjconPFdTYVCH3qvvAZK2XYVRy39dg=
Subject key identifier:   9D:49:54:E0:E0:59:27:EF:DF:B7:78:98:5C:AC:3A:0C:70:56:A8:39
Authority key identifier: 68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3
Certificate issuer:       /CN=68E8FFC7C7187C981753E423319759DC084F69E3
Certificate serial:       7EBC069DA02BA6667B37011A80015EA5220B112E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 17:19:16 +0000
Manifest this update:     Fri 31 Jan 2025 17:14:16 +0000
Manifest next update:     Sat 01 Feb 2025 18:27:16 +0000
Files and hashes:         1: 323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (hash: LjdMXOE/hZQ4ehW9seHLP3KjNXSVVX7/C/MzQCVbl64=)
                          2: 34352e3232372e37362e302f32322d3234203d3e20323637303535.roa (hash: +itvjxC1f5ZNp+FFasdyU8CNYZgOu/ohxVXXnXmSpBg=)
                          3: 68E8FFC7C7187C981753E423319759DC084F69E3.crl (hash: OXtkbchlPeOHVnwICVpQ4wQQVhxIuCE9KA7Xnr9pAb4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:06:9d:a0:2b:a6:66:7b:37:01:1a:80:01:5e:a5:22:0b:11:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E8FFC7C7187C981753E423319759DC084F69E3
        Validity
            Not Before: Jan 31 17:14:16 2025 GMT
            Not After : Feb  1 18:27:16 2025 GMT
        Subject: CN=9D4954E0E05927EFDFB778985CAC3A0C7056A839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:22:fc:05:94:63:db:73:0f:42:9b:75:b9:
                    fd:cc:00:e4:2c:bd:bb:9f:c1:7c:63:14:ab:0b:1c:
                    0a:bc:4a:1c:c4:71:f3:25:83:00:81:0e:ff:ff:57:
                    e7:48:c2:58:04:a4:d6:fd:24:e6:62:a7:07:ba:9d:
                    68:50:84:0d:70:ac:07:45:2c:ce:bd:7b:32:b6:75:
                    e0:0a:79:09:22:b2:99:2d:03:e8:30:db:6a:fb:40:
                    89:2a:90:18:b7:50:c8:3b:20:84:97:5b:0c:26:b9:
                    18:0c:0f:f5:b2:fa:3d:37:13:01:aa:49:f1:67:0d:
                    cd:8e:89:b1:b8:c4:51:ce:42:3f:67:54:2d:a2:45:
                    73:72:cd:83:27:11:2b:87:aa:dd:1e:3a:30:c2:2e:
                    dd:34:99:10:ca:ad:c5:6f:66:7e:5c:aa:ec:18:6d:
                    97:4f:ec:50:0f:34:99:55:f9:f4:91:93:d7:04:39:
                    5d:68:b7:e2:c5:a3:3a:53:1b:20:52:8d:df:7e:3a:
                    92:dd:d5:02:8e:91:2b:5b:55:91:93:ce:b9:db:db:
                    e7:52:02:7a:77:33:6b:5d:53:82:6c:b1:9e:a7:7b:
                    9f:e2:06:ef:21:ef:50:3a:0c:00:a7:6e:20:91:e0:
                    2e:5d:6d:56:d8:0e:5d:8c:20:84:0d:a4:5d:20:f8:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:49:54:E0:E0:59:27:EF:DF:B7:78:98:5C:AC:3A:0C:70:56:A8:39
            X509v3 Authority Key Identifier:
                keyid:68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:44:bb:ac:91:54:cd:f2:9a:28:77:df:f9:4c:21:8a:89:
         a0:dc:ac:79:7c:e7:9c:50:b4:68:72:5c:93:d3:91:89:47:82:
         c1:9d:58:95:eb:6d:ef:5d:b2:07:10:8a:23:ad:64:b9:fc:6e:
         47:96:fd:c6:74:c2:b3:85:23:4f:3f:2d:89:ce:64:e8:1f:4f:
         ce:34:9a:93:6a:20:4a:90:c0:18:3a:27:ad:1b:86:ee:af:da:
         3b:f9:4a:ed:62:6b:6f:92:e1:db:94:a5:86:37:d8:24:8d:aa:
         e0:b4:f4:dc:26:53:9f:3f:42:67:1e:7e:f6:59:da:5e:72:8a:
         8d:0b:14:f1:19:32:22:14:c3:fb:96:15:fb:96:bc:cd:11:0b:
         d4:8c:d5:7c:92:ba:35:4c:ca:e7:b6:e2:b0:fb:69:87:90:89:
         0f:97:0f:7a:db:5d:c8:3d:83:a2:14:1e:e8:ea:b0:5f:1d:8a:
         2b:f3:5e:09:e9:c0:b4:4d:6f:e4:e2:56:b1:8f:2c:9b:60:f9:
         ca:cd:e2:5d:24:ca:6a:ff:03:61:c3:d2:2a:bf:e1:0e:5b:83:
         0a:6d:22:1b:c6:0e:75:8d:d3:54:68:17:2b:bc:3f:9a:ea:06:
         f3:90:9a:06:3d:c8:13:b2:2b:b8:82:25:13:fa:63:ea:53:2e:
         65:ad:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:14:33 2025 by rpki-client