Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
File:                     A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft (raw, json)
Hash identifier:          Ar28wMZX4pQcd66zOm1hjoRoiFxAm+dOTt7nsFuul80=
Subject key identifier:   B9:70:50:B2:B8:08:FD:13:6B:57:82:BF:F7:1D:F1:7E:19:57:4E:4F
Authority key identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
Certificate issuer:       /CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
Certificate serial:       6C6768405E53B76E17DBDA3B00FE3E7F59E200F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 06:56:58 +0000
Manifest this update:     Fri 31 Jan 2025 06:51:58 +0000
Manifest next update:     Sat 01 Feb 2025 07:32:58 +0000
Files and hashes:         1: 3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa (hash: t6fQgXFu3jpi6uMsQWBPCX3yrJYkwrqNecgQciHiilE=)
                          2: A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl (hash: QRuHbdc8xQuE6G5QUFe0xZGVmQi3WbOw80GYSbFFjqI=)
                          3: 323830343a333635303a3a2f33322d3438203d3e20323636333431.roa (hash: g7PiacPWCBwt44VQAh8KxM1uU2UfehJ/lWGMWTEPL2E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:67:68:40:5e:53:b7:6e:17:db:da:3b:00:fe:3e:7f:59:e2:00:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
        Validity
            Not Before: Jan 31 06:51:58 2025 GMT
            Not After : Feb  1 07:32:58 2025 GMT
        Subject: CN=B97050B2B808FD136B5782BFF71DF17E19574E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e0:1c:ca:37:09:4c:e3:37:8a:51:1a:54:ae:
                    ef:c3:23:48:f7:34:49:46:2a:7f:42:a1:9b:68:81:
                    fa:41:95:44:f9:01:74:10:28:78:13:8d:f7:fd:0e:
                    24:f6:2e:bf:b5:c2:7c:04:a1:9f:3a:af:00:54:7c:
                    81:22:fa:02:f1:d2:2b:b2:18:7c:ab:53:e2:a7:04:
                    72:27:07:32:e6:db:1f:5a:56:5a:e3:4c:86:e9:62:
                    8b:0c:a5:d8:13:6a:01:df:55:1e:22:ee:ca:fb:33:
                    84:90:e3:38:7d:77:7c:da:6d:e4:2c:96:31:eb:6a:
                    d8:67:d5:df:b4:0c:b7:78:f8:3f:5c:89:ef:b0:10:
                    9b:0d:7f:45:0d:35:4d:4b:d3:4e:22:31:24:0f:92:
                    1f:cc:14:90:08:0c:4b:3b:a4:ee:e8:12:54:30:b3:
                    47:11:44:43:16:67:1c:42:95:46:e9:d1:86:4c:50:
                    d3:96:ad:6b:0c:2a:c9:dd:0c:43:8a:b1:f6:12:97:
                    07:d9:9d:57:a2:36:76:3b:be:d0:b8:fc:17:c8:bb:
                    5c:9d:4a:ed:46:f3:de:a5:3d:3a:73:14:46:76:88:
                    0a:a2:8c:de:0f:b6:b1:83:25:05:fd:ff:fa:73:1a:
                    e9:12:49:99:44:69:60:d0:47:e5:11:47:6e:e6:12:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:70:50:B2:B8:08:FD:13:6B:57:82:BF:F7:1D:F1:7E:19:57:4E:4F
            X509v3 Authority Key Identifier:
                keyid:A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:57:0a:0c:30:16:b0:3c:05:b0:7b:28:d0:c4:b1:75:05:
         06:68:d8:3c:52:c3:d7:ea:90:22:e6:9a:73:ec:70:de:fe:77:
         36:ec:a3:11:dc:2a:21:f6:38:65:35:2a:0e:f3:a5:79:3d:63:
         22:d6:d0:cd:58:fc:a3:a0:b3:c9:66:68:21:ed:f3:1b:c6:07:
         ce:a7:6e:6d:42:df:d6:0b:4b:43:b0:ce:8c:52:39:b7:bd:7a:
         ce:e2:22:b9:95:74:65:31:b3:82:54:2d:bb:42:ae:b9:10:ec:
         95:56:04:32:bb:74:74:d0:f5:17:2e:2b:d9:1c:73:40:d1:dd:
         25:14:45:be:bf:b4:a9:31:9c:1a:0c:d5:5f:f4:0c:8a:4e:33:
         f9:75:8a:23:95:61:90:8a:57:54:96:49:69:35:35:9d:25:ce:
         d0:0e:c3:bf:4c:37:3b:0f:81:d4:de:66:17:f0:7a:83:7d:01:
         ab:01:60:fa:3b:f9:c2:bb:20:5a:62:1d:03:70:f8:8c:70:a4:
         16:06:40:28:fe:1e:14:c2:7e:b1:5b:4b:27:57:47:7e:a1:0a:
         09:c4:d5:33:e7:0d:85:2d:50:bb:a1:d6:e5:c6:55:e3:44:4d:
         6e:01:74:84:a8:23:d4:26:42:05:53:cd:9d:7b:ea:40:bc:c4:
         27:d5:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:03:59 2025 by rpki-client