Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
File:                     120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft (raw, json)
Hash identifier:          jpnFDnJEARP4uCmkNf+fH1fl3id8vQcQ7xltGww8T5Q=
Subject key identifier:   35:6D:B6:1F:20:FD:AB:EA:75:E0:77:9E:12:9A:7D:97:8B:52:15:63
Authority key identifier: 12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Certificate issuer:       /CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
Certificate serial:       4A66042EC981BFB47DA118165BD9FFDF2AEDDE3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
Manifest number:          45
Signing time:             Fri 31 Jan 2025 16:55:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:50:19 +0000
Manifest next update:     Sat 01 Feb 2025 20:04:19 +0000
Files and hashes:         1: 120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl (hash: d+fjlWxEXDLpg7K1t1a4TRVxIklTXZJbdOOt+Qwx+Sg=)
                          2: 323830343a383832343a3a2f33322d3332203d3e20323732373533.roa (hash: Z1e00J+pj3xgDu7l+bTC4iqXuYLvr6iGTUsPSS+TEdc=)
                          3: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: w0qqFPXS1q1NP5A7+SdrqOfHPoWk++ZYHhgDw9+ls14=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:66:04:2e:c9:81:bf:b4:7d:a1:18:16:5b:d9:ff:df:2a:ed:de:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Validity
            Not Before: Jan 31 16:50:19 2025 GMT
            Not After : Feb  1 20:04:19 2025 GMT
        Subject: CN=356DB61F20FDABEA75E0779E129A7D978B521563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:95:b5:c9:8a:c1:51:28:23:55:d8:cd:9b:
                    e1:b6:50:56:69:7b:ce:7f:ca:52:92:d4:0d:ea:8d:
                    92:1d:19:a2:20:6e:4d:94:25:8f:2d:43:ec:20:f4:
                    00:39:ed:30:57:fc:e8:6d:6a:44:88:55:f4:ae:84:
                    cf:3f:a5:ba:38:d2:1c:67:76:7b:32:1d:42:c9:9a:
                    28:4f:b7:92:3b:bc:b9:25:34:02:22:2a:a8:d8:aa:
                    86:ec:e2:9f:59:ed:94:50:d8:35:5b:7d:db:5a:96:
                    73:35:06:7a:de:1f:c8:72:fd:e8:a9:20:68:19:79:
                    7c:2b:75:1f:1a:78:04:dd:23:98:1d:cd:9c:7c:b9:
                    f7:d8:d6:79:a0:8d:8b:71:7d:3b:11:81:cb:39:9f:
                    ff:cb:cc:79:58:90:ec:be:17:e9:28:36:c7:f7:37:
                    f4:6d:41:f7:d8:0b:09:d2:f5:6f:33:bf:1f:21:44:
                    14:21:da:02:b5:d8:b5:15:19:73:95:f7:3d:59:aa:
                    0d:66:f3:d0:d7:cf:13:c8:bb:a9:66:72:6d:ce:12:
                    a2:60:84:fd:98:cf:ae:b8:4c:80:0a:61:a3:b7:2d:
                    e5:17:ca:d1:2f:04:78:8a:08:b5:ba:33:fe:cb:0b:
                    88:29:b7:c0:0d:61:93:cf:cf:e3:8d:f5:75:c0:21:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:B6:1F:20:FD:AB:EA:75:E0:77:9E:12:9A:7D:97:8B:52:15:63
            X509v3 Authority Key Identifier:
                keyid:12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:f4:93:09:f1:59:93:9c:ec:78:c8:80:f6:f6:9d:e9:b6:
         d4:3f:51:5d:5f:ad:45:cf:9e:43:7e:5f:9c:45:8a:24:fb:50:
         16:2a:3c:6b:5c:1a:3b:a4:13:2a:6d:6c:0d:c8:28:de:36:fe:
         8f:0a:48:a2:27:b3:a5:7b:ec:f4:c0:60:7f:5f:6e:77:63:2e:
         d9:b4:b3:23:c7:25:c8:f3:39:59:3c:c9:4f:50:c6:38:e7:f9:
         dd:43:d3:cd:76:4a:78:be:3f:9c:0c:6a:ee:75:23:98:61:2c:
         52:02:d7:49:4d:7c:0b:52:15:46:6f:b5:8f:2f:75:30:28:c1:
         80:c1:64:8b:5d:e1:5a:cc:3d:ab:d4:3a:49:91:7b:81:9a:0b:
         6f:fd:57:0c:68:1a:7b:5f:fc:22:4b:12:16:b2:0a:25:f8:7c:
         35:71:bf:4f:b3:a5:07:a2:65:e4:5a:37:63:53:d1:72:cd:93:
         89:37:ef:e0:01:4d:bb:83:3b:ad:eb:b2:94:54:a8:81:5b:a8:
         63:a4:0d:44:f6:05:da:84:42:fd:cb:c8:36:ee:f8:d2:14:86:
         07:21:02:47:1b:9a:da:4a:92:0e:6f:84:5e:92:16:ef:d2:48:
         b1:a0:b6:d1:73:69:ee:8b:0f:be:95:83:6f:7b:be:60:9a:fc:
         df:e2:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----