Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
File:                     09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json)
Hash identifier:          XRcCXn1IYju+ZM4lQmCmq/GfH2FpDpbH2fnb5cV51fg=
Subject key identifier:   D6:3D:34:FC:84:4F:87:9A:2E:71:2B:78:1B:BE:01:0E:32:4B:41:37
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Certificate issuer:       /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial:       2B8C9E51725CC98907B0967E1851A210CA3D6951
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
Manifest number:          D2
Signing time:             Fri 31 Jan 2025 01:35:00 +0000
Manifest this update:     Fri 31 Jan 2025 01:30:00 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:00 +0000
Files and hashes:         1: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: wuN8qHU/NQzTWfY0LflG0MyAQQTaz3Hq4vCYZX+edCU=)
                          2: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: JrkeXBMLNRsdMtpQ4gEGR2wOzW8nc5h9Fg0VURw3iXA=)
                          3: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: XosRWuhy50p/XlmB964uJcpmK6P7/+s4YBWKrRfgxzQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8c:9e:51:72:5c:c9:89:07:b0:96:7e:18:51:a2:10:ca:3d:69:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
        Validity
            Not Before: Jan 31 01:30:00 2025 GMT
            Not After : Feb  1 05:00:00 2025 GMT
        Subject: CN=D63D34FC844F879A2E712B781BBE010E324B4137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:4a:02:35:a8:9b:c6:d2:9c:a3:21:5a:68:
                    2f:91:18:45:af:4b:e9:eb:c1:ee:eb:aa:29:8d:b0:
                    d3:aa:48:f9:94:f4:98:45:36:b5:ea:c3:d6:e2:bb:
                    28:32:8a:ec:ac:f7:0b:d2:d5:0c:93:ef:78:f5:64:
                    c1:b0:78:ac:ff:a1:5f:fc:82:e8:ac:2f:6e:6d:f1:
                    80:1b:ab:a8:c9:20:c1:8b:40:79:cc:08:a6:2f:e2:
                    7f:38:3b:0a:c8:82:c8:e5:70:cd:f3:62:52:cc:cd:
                    bf:3a:cf:20:bf:65:c9:83:d8:6a:c4:f2:a3:13:53:
                    c6:74:4e:c3:b0:2e:ef:01:1c:40:9e:d5:af:02:b5:
                    5b:93:8a:e1:b0:44:12:bd:86:01:ba:f5:7e:9d:f1:
                    8c:85:4b:56:f5:d8:be:79:3e:27:5c:f7:9c:4a:ed:
                    7b:d3:71:4b:e0:e0:0a:07:20:7f:ca:8e:90:76:ba:
                    24:dd:0e:3c:ec:4a:7f:89:4c:57:5d:3c:91:b5:91:
                    99:04:70:a2:f6:7a:ed:2c:69:6a:3f:87:6d:b5:71:
                    2a:b4:bb:ed:e5:1e:0e:bc:ac:ae:93:d2:78:c7:3d:
                    f5:b3:fe:8e:37:1a:b6:33:0c:25:5e:c7:17:fe:9c:
                    bd:54:20:d8:1b:a5:40:77:11:0e:39:e8:f7:82:e1:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3D:34:FC:84:4F:87:9A:2E:71:2B:78:1B:BE:01:0E:32:4B:41:37
            X509v3 Authority Key Identifier:
                keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:26:36:1f:bd:b6:3c:7b:fd:37:e3:c6:c5:4e:10:ae:ec:3b:
         11:fa:d0:c3:6d:31:4f:fa:f7:a6:74:a6:1e:87:e3:6d:db:e4:
         bd:9f:bb:e5:4f:81:63:36:0e:a7:a6:ce:4d:d2:13:11:3d:91:
         16:b4:82:da:1f:32:b8:38:6c:a4:f4:d0:f9:b9:ea:c4:69:8c:
         43:a8:3b:24:5a:2c:6e:20:2c:5a:f9:e3:ca:a4:b2:1d:8f:eb:
         c2:8b:0d:cc:68:f7:93:f3:63:3f:ea:b4:f6:f3:0e:b6:08:f3:
         74:5b:b0:b2:a2:54:86:88:02:d4:c7:55:fd:05:9a:5f:25:da:
         94:7f:31:96:f0:ff:52:57:9b:73:78:d6:6d:af:21:2e:c7:55:
         06:22:e5:3a:14:90:d9:5d:b2:41:32:fa:88:cf:fe:a8:fd:a8:
         71:ef:0b:48:2f:1a:b5:6d:6c:51:00:2c:3d:bd:18:c3:85:51:
         7b:68:8f:f0:39:0f:f0:28:fd:9e:58:b3:8b:06:93:01:77:c0:
         8c:0a:37:09:66:28:92:37:bc:73:f9:49:35:8a:1d:29:e4:fa:
         45:0c:ff:e2:e7:5b:76:4f:5e:19:68:9f:f2:1c:7a:d5:03:9b:
         1f:9b:fc:0f:7d:33:59:70:81:e6:81:c1:f4:ca:69:6d:f0:3d:
         fe:02:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:43:16 2025 by rpki-client