Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.mft
File:                     14F766039A22FDF037ECF0775453B10B73542821.mft (raw, json)
Hash identifier:          +rfwENE6+XexfUY31FdSJzq2jyg1uPLNIYABLLvxGH4=
Subject key identifier:   78:43:EB:F6:0B:69:82:2E:5F:0A:C2:3D:FB:ED:3F:F3:1A:1D:34:44
Authority key identifier: 14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21
Certificate issuer:       /CN=14F766039A22FDF037ECF0775453B10B73542821
Certificate serial:       7A7B2751613C4B48E3320D2FC1AB5828987AB866
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 10:25:59 +0000
Manifest this update:     Fri 31 Jan 2025 10:20:59 +0000
Manifest next update:     Sat 01 Feb 2025 11:43:59 +0000
Files and hashes:         1: 3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa (hash: zsEupCcQlTE5Md6YMO1ryJF+9RwZxHqC4iCp5vDcKk0=)
                          2: 14F766039A22FDF037ECF0775453B10B73542821.crl (hash: knU/u4jAW/E7/J6sZg5fAYj3BzhsvJQ0hgkh9+ptrqo=)
                          3: 323830343a336463383a3a2f33322d313238203d3e20323636353533.roa (hash: mEmpeYnma6z40qtKeozGNqRb+Q+HvqoGQUsuIxKpvRw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7b:27:51:61:3c:4b:48:e3:32:0d:2f:c1:ab:58:28:98:7a:b8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F766039A22FDF037ECF0775453B10B73542821
        Validity
            Not Before: Jan 31 10:20:59 2025 GMT
            Not After : Feb  1 11:43:59 2025 GMT
        Subject: CN=7843EBF60B69822E5F0AC23DFBED3FF31A1D3444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:a6:f6:34:3a:16:66:26:c0:b9:82:e2:bf:
                    6a:77:a2:3b:81:df:6e:25:42:4f:ad:eb:24:dc:ab:
                    80:64:3f:e2:9d:fe:de:ad:c2:84:61:17:34:1a:a4:
                    0f:11:8f:4d:6a:cd:59:47:b3:49:96:3c:c5:c8:9a:
                    cf:8e:b1:4f:24:79:65:aa:d4:38:c3:8a:bf:c7:2d:
                    66:70:48:9e:bc:9d:66:57:17:f8:34:8a:90:1a:67:
                    e3:5e:76:41:e3:c0:20:dd:54:0f:f5:cc:b6:c4:86:
                    50:e9:81:17:6d:84:69:93:b4:6b:77:a1:e6:b7:39:
                    14:10:40:08:9d:d8:c7:0f:cc:56:26:94:30:b9:46:
                    b2:7a:e4:b1:e1:d4:95:75:9c:5f:9d:79:43:9a:da:
                    e5:2d:86:88:ee:d4:71:b0:0f:60:89:9f:96:5f:06:
                    6a:54:e5:e0:a7:b2:a8:9e:31:f6:45:ab:9b:7b:fa:
                    b5:0c:3e:57:22:26:77:52:1b:a2:56:92:f0:f0:e1:
                    86:d5:36:bc:5c:dc:1d:b3:c6:01:63:72:23:9a:59:
                    1b:53:49:c1:25:b2:6b:02:dd:b2:32:c5:12:87:0c:
                    9b:1d:d9:e3:50:b4:b5:7f:d8:4e:ae:82:31:0a:19:
                    df:45:bf:5f:4e:ff:27:70:e2:36:57:c2:21:32:10:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:EB:F6:0B:69:82:2E:5F:0A:C2:3D:FB:ED:3F:F3:1A:1D:34:44
            X509v3 Authority Key Identifier:
                keyid:14:F7:66:03:9A:22:FD:F0:37:EC:F0:77:54:53:B1:0B:73:54:28:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F766039A22FDF037ECF0775453B10B73542821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/1/14F766039A22FDF037ECF0775453B10B73542821.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:05:91:75:cd:9a:38:98:15:ac:e8:70:76:f2:be:90:30:
         82:15:f0:d7:2f:94:f9:c1:f2:f8:33:5b:6e:ad:b0:f3:06:e5:
         e4:47:77:58:45:cc:be:17:e1:96:b6:c0:fd:34:c9:03:df:7d:
         6c:ab:e0:3d:96:66:fa:d3:9f:16:e0:64:50:fc:ab:47:ab:f5:
         68:a3:ce:ce:61:75:fd:5e:12:49:e2:0f:56:24:ab:6b:d5:2f:
         5b:3e:03:35:e7:7a:57:3e:cd:40:67:fb:d9:7f:93:e5:c2:13:
         43:b5:87:0d:ad:76:e4:35:94:c8:33:f1:0e:01:2d:77:69:d4:
         e9:3d:5d:4d:f1:12:2f:2e:96:a8:d7:7e:ab:b6:f2:1f:78:1d:
         5f:02:85:37:27:6f:63:52:ad:a7:fb:95:24:2b:f3:15:f2:c3:
         15:22:7b:99:25:13:12:60:b3:92:41:00:0d:ad:d2:aa:0b:e9:
         22:c4:cb:cf:a4:5c:d4:c5:c6:04:84:f9:96:c8:4e:66:4b:6d:
         66:0a:e3:19:3f:81:3f:e7:16:98:60:86:b1:8a:9f:ec:f0:3b:
         0d:d1:21:b1:64:c2:c9:42:4f:18:1f:fb:3a:2e:1f:96:55:09:
         66:25:1b:be:8f:c2:fb:f9:96:9e:f1:21:08:2e:b4:81:e8:38:
         20:17:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:00:33 2025 by rpki-client