Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.mft
File:                     7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.mft (raw, json)
Hash identifier:          fq1k7XP+HaBnViyvfO7PeluPZ38WfcbfKfleWCEbVOk=
Subject key identifier:   BF:B2:AD:9A:87:66:8A:D6:CA:95:8D:23:EA:26:9C:37:05:D3:70:18
Authority key identifier: 7F:11:1E:88:36:AE:E9:1D:04:63:AD:61:77:A8:8D:E2:F5:EC:6A:B6
Certificate issuer:       /CN=7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6
Certificate serial:       039D6B8D59D791EC40756B66B71F9AC54F8EE3D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.mft
Manifest number:          4E
Signing time:             Fri 31 Jan 2025 10:15:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:10:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:49:27 +0000
Files and hashes:         1: 3139322e3134352e3230342e302f32322d3332203d3e20323636323432.roa (hash: 7pG3haAC62B7pk0+dqyf/1ZYgfyFEk9Ge9V9fVXZ3GY=)
                          2: 323830343a336365633a3a2f33322d313238203d3e20323636323432.roa (hash: cKEm5zsT4uMVLUJy2/ePQOgDar/YjWYc3UcX4IrNcJI=)
                          3: 7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.crl (hash: F0lQQ6ItefelylDaWzR0hKfXSfcDtY7FILXFDtKPi2M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9d:6b:8d:59:d7:91:ec:40:75:6b:66:b7:1f:9a:c5:4f:8e:e3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6
        Validity
            Not Before: Jan 31 10:10:27 2025 GMT
            Not After : Feb  1 10:49:27 2025 GMT
        Subject: CN=BFB2AD9A87668AD6CA958D23EA269C3705D37018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:37:29:37:d2:6b:7f:05:2b:13:46:ed:77:
                    65:4e:55:69:0a:28:12:c6:c0:45:72:3c:e0:9f:11:
                    09:c3:23:6f:66:19:1c:06:3d:78:2d:2d:1d:09:4b:
                    9c:ad:21:b1:4e:b0:c2:6a:0a:33:47:26:67:33:e0:
                    00:38:cd:c8:00:20:d5:ca:ad:4f:e8:c7:db:f8:2a:
                    51:b6:0a:ad:06:f9:51:83:0a:18:39:d9:cb:a3:42:
                    eb:37:9b:db:ce:8d:66:9c:61:ae:ba:7a:ee:98:44:
                    69:a2:a7:8f:49:6f:a3:2a:4e:72:bc:7c:c6:30:55:
                    11:37:d1:e9:8d:66:bb:25:39:37:a7:25:81:39:12:
                    ce:ac:38:da:3e:f5:20:d4:0d:7c:72:be:c9:b6:be:
                    22:4f:3c:b9:a0:e2:e9:44:b2:f7:1e:ea:01:f3:1b:
                    7a:24:66:cd:ea:fb:a2:dc:82:33:ed:ae:f6:e6:69:
                    ab:41:a2:63:8a:8f:6d:6b:4d:7b:43:4d:4a:b3:6b:
                    05:b6:24:6a:f2:b4:d0:84:d5:48:d1:14:62:0a:cc:
                    ca:ee:96:9f:e5:40:c0:07:f1:52:ba:cd:50:b7:47:
                    3d:8e:e3:f6:af:2f:1e:ec:a2:6a:7c:1f:5e:15:43:
                    fd:ff:fd:6d:34:b7:39:ca:e3:52:dc:a7:b1:c2:77:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:AD:9A:87:66:8A:D6:CA:95:8D:23:EA:26:9C:37:05:D3:70:18
            X509v3 Authority Key Identifier:
                keyid:7F:11:1E:88:36:AE:E9:1D:04:63:AD:61:77:A8:8D:E2:F5:EC:6A:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/7F111E8836AEE91D0463AD6177A88DE2F5EC6AB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:47:f7:d6:95:51:ec:e0:2a:04:de:e7:5e:b3:93:ec:93:d1:
         de:34:92:15:b4:b3:22:73:af:e9:4e:26:c7:d8:a1:61:43:a5:
         3a:71:32:8a:34:80:40:26:7d:68:30:d1:98:46:eb:e1:8e:b8:
         d9:0a:9f:1d:80:49:d2:e9:b3:cd:d9:01:0d:96:bc:9c:4c:fc:
         56:82:02:0d:a3:e5:f2:27:ed:97:36:62:66:d5:c5:fb:69:e8:
         6c:ee:95:85:88:0a:af:d0:e4:d8:fd:26:8a:8d:38:dd:5a:86:
         ec:ba:8c:28:8e:9f:b0:05:81:aa:db:af:be:cc:aa:02:15:d2:
         77:da:3e:48:39:90:7e:b5:61:b6:70:44:62:d7:63:ae:c7:55:
         2f:35:c1:5d:97:d6:f7:80:0f:9a:a9:a5:f3:1e:f3:d7:0d:8f:
         4e:5e:a8:6e:95:0e:90:e1:a0:5d:4a:5c:98:b9:5c:13:09:72:
         37:56:d4:c8:4c:b9:2e:67:c1:0d:ac:eb:e4:f1:ba:46:56:57:
         42:74:10:80:b8:1c:5d:a5:0c:1c:67:27:60:7e:4c:06:0b:f1:
         13:47:28:e9:cc:df:a3:5d:c3:b6:68:e7:e9:09:27:07:90:58:
         9a:7f:be:2c:57:c6:6f:3a:00:91:49:fe:a0:f3:c7:ff:d5:0b:
         73:65:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:32:03 2025 by rpki-client