Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
File:                     4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft (raw, json)
Hash identifier:          nafclSWqD/wws2w8hV4OM8zfH5jCUZVk8riZKmia1+g=
Subject key identifier:   52:B8:33:4E:0D:69:95:24:33:23:FC:E3:A3:86:75:F5:65:DE:74:45
Authority key identifier: 4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1
Certificate issuer:       /CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
Certificate serial:       76558544AC3469564984999993261CB339FC3FB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
Manifest number:          010F
Signing time:             Fri 31 Jan 2025 03:27:07 +0000
Manifest this update:     Fri 31 Jan 2025 03:22:07 +0000
Manifest next update:     Sat 01 Feb 2025 05:15:07 +0000
Files and hashes:         1: 323830343a353262383a3a2f33322d313238203d3e20323638353337.roa (hash: LGkR4NQ/D1eE2P0dTv7HorNIQ36esqQwbOwzMvuYWKA=)
                          2: 34352e3136322e3137362e302f32322d3332203d3e20323638353337.roa (hash: INx2mspjh4hvoYH1jYGPLVpykD8nFtRkXH7iZIaFHNQ=)
                          3: 4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl (hash: MbNST09AYpz7u4yr0dXFkkcNvmfbiwvhrSE7Iyw/4Gs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:55:85:44:ac:34:69:56:49:84:99:99:93:26:1c:b3:39:fc:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
        Validity
            Not Before: Jan 31 03:22:07 2025 GMT
            Not After : Feb  1 05:15:07 2025 GMT
        Subject: CN=52B8334E0D6995243323FCE3A38675F565DE7445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:7d:50:a5:29:2d:d6:0d:ce:13:5e:86:2d:
                    dd:3e:aa:aa:75:a1:a4:8e:9b:01:72:c5:ae:55:c6:
                    22:c5:f9:b0:69:08:60:ca:b9:d6:65:0f:18:90:ff:
                    01:2c:2b:df:51:0e:37:f4:76:bf:95:74:2e:32:8e:
                    81:a5:0b:46:3e:80:e3:24:4c:ad:0e:c4:3c:33:8d:
                    9e:82:28:7a:73:14:9c:45:db:92:77:d0:55:2b:c7:
                    b2:26:65:83:5f:86:fb:e3:3c:38:a6:99:d0:d4:d9:
                    13:53:53:42:51:ef:9a:a4:f2:60:6a:d7:59:5a:91:
                    c3:a2:56:fe:fa:10:40:fe:07:93:fc:f1:c1:5b:1a:
                    d9:fb:2d:d1:97:be:e9:14:c4:ff:03:23:c4:6c:fb:
                    5c:0e:2b:3b:5e:49:92:5f:a1:dc:79:fd:72:dd:60:
                    c2:09:9d:75:1b:da:1d:6f:d1:a9:e2:1c:5a:03:77:
                    3b:01:9a:c8:e1:99:3a:7e:4c:26:4c:53:0e:3c:b5:
                    c6:5b:64:07:c8:43:c5:0d:8b:7e:15:9b:59:16:5f:
                    4d:5f:79:2f:c2:c8:2c:e0:61:3f:04:cc:ee:ab:c3:
                    a8:79:ff:e0:29:c9:c7:4b:d0:96:6e:1f:36:03:3b:
                    fb:c4:ff:50:50:fd:68:01:01:1d:4e:de:7e:4a:53:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B8:33:4E:0D:69:95:24:33:23:FC:E3:A3:86:75:F5:65:DE:74:45
            X509v3 Authority Key Identifier:
                keyid:4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:98:23:15:a8:fe:46:ce:02:d8:73:ba:82:e7:3c:77:d2:1f:
         68:d6:ee:c1:cd:73:8f:20:6f:de:7b:37:5b:25:8c:5a:30:a0:
         53:3a:f2:1a:f3:b2:9e:62:82:69:be:07:1d:44:cf:93:b5:ac:
         dc:96:c1:66:0c:b8:7a:28:7b:1d:fa:0f:02:3f:42:e3:d2:90:
         eb:a1:82:5e:a5:93:50:68:ec:87:b8:b9:5e:29:a7:41:ae:4b:
         c1:21:63:cc:d8:69:e3:f2:02:d0:54:69:c8:77:e9:9a:47:d2:
         61:60:73:33:1f:0f:f7:6d:8e:e4:87:73:3b:fd:ed:c9:48:5b:
         4a:59:b7:04:90:a0:e9:d8:ae:46:53:3a:16:74:62:02:d6:ff:
         11:6f:68:bc:a4:31:75:d6:c1:b5:13:2f:ff:fe:e1:0a:e8:f5:
         16:39:77:7b:d6:b6:33:ed:2c:b8:4b:af:83:ce:f3:20:1f:c7:
         1c:7e:5a:f6:11:3b:ff:5b:ae:9f:f1:9c:c2:3a:19:0d:04:fd:
         a2:57:2e:d6:8a:24:bf:f5:03:f2:8d:e0:0b:5f:b5:9e:aa:8f:
         f9:f0:ae:63:8c:62:e6:dd:24:4d:48:b6:e3:08:ca:b3:86:2e:
         5f:b6:c4:04:17:43:df:fe:84:c3:fc:b5:09:e2:d1:d1:98:5f:
         89:6e:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:11 2025 by rpki-client