Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft
File:                     DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft (raw, json)
Hash identifier:          FstU/YZUaaJx08qDt0lK9wpMM11puTNkKty+mJqGH84=
Subject key identifier:   AF:9B:5C:3A:34:52:40:26:75:FD:E6:80:3E:4C:60:3D:B9:9A:4A:FD
Authority key identifier: DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35
Certificate issuer:       /CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
Certificate serial:       78F0B969D8FB29A7D8D0ABF3F9CCC8F68BC9C209
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft
Manifest number:          BA
Signing time:             Fri 31 Jan 2025 11:44:32 +0000
Manifest this update:     Fri 31 Jan 2025 11:39:32 +0000
Manifest next update:     Sat 01 Feb 2025 14:32:32 +0000
Files and hashes:         1: DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl (hash: JIeQVJ2xreo/orofRDBvGHzzZs9ysCR7Spm91/fav1w=)
                          2: 323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (hash: cAFpkWubSvSUcPjgmQ78k9UOBkcGOsOMnL7bZ64XDSg=)
                          3: 34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (hash: PDOc8VkIr7JmwQokChwvCZ0bAUCZK1mBdbUZKm9RNQk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:b9:69:d8:fb:29:a7:d8:d0:ab:f3:f9:cc:c8:f6:8b:c9:c2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
        Validity
            Not Before: Jan 31 11:39:32 2025 GMT
            Not After : Feb  1 14:32:32 2025 GMT
        Subject: CN=AF9B5C3A3452402675FDE6803E4C603DB99A4AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:68:c5:03:d5:0e:21:25:8b:93:37:df:bd:
                    0f:dc:ce:31:24:2c:1d:fb:62:d1:76:68:e5:64:f3:
                    1e:b4:cf:fb:f3:56:ec:fb:bd:80:12:6b:be:e8:72:
                    52:54:da:51:21:f7:dc:52:fd:fc:d8:f7:fe:5f:ce:
                    5a:ee:2f:58:17:f5:ad:75:06:70:f9:79:0b:20:d7:
                    44:f9:af:64:1d:a2:d1:95:52:4f:af:78:e4:c0:a3:
                    f3:90:62:21:74:e2:a6:14:9d:af:3a:96:b3:44:78:
                    2c:d3:8d:6c:75:f7:83:f4:82:9f:28:59:46:96:58:
                    88:d0:20:44:3a:8c:20:c6:6e:1e:a6:42:73:de:df:
                    8f:c6:75:4f:10:cc:02:3c:59:37:a2:b2:0d:ff:76:
                    95:7e:77:9f:23:cc:8f:59:8d:e2:cc:53:fd:e9:af:
                    3a:47:2d:5f:63:ac:0a:44:7a:af:af:21:b3:be:c8:
                    66:f3:5c:4c:94:e8:13:be:c9:2c:a3:24:71:a1:f9:
                    bf:40:91:bb:0d:29:04:60:62:a6:da:ac:c6:14:fc:
                    f2:a6:96:af:1a:30:e0:11:a6:f4:5c:de:14:3f:f0:
                    9c:cf:be:89:e2:23:2e:7c:21:d6:94:05:24:33:37:
                    38:40:f4:90:fe:0c:e2:4d:c8:30:06:73:cd:24:c5:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9B:5C:3A:34:52:40:26:75:FD:E6:80:3E:4C:60:3D:B9:9A:4A:FD
            X509v3 Authority Key Identifier:
                keyid:DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:ac:25:c5:83:07:50:13:7b:d3:4d:0a:79:be:f9:cc:1b:
         1c:1e:05:74:a6:28:af:56:cf:9d:c9:bb:09:db:23:43:7d:b9:
         1b:66:ab:92:b3:2e:50:0f:83:c1:34:93:0a:22:05:f8:d8:c2:
         c9:50:25:24:e5:81:c7:9d:5a:5d:2d:04:bd:3e:03:74:3a:cd:
         e3:c7:15:3c:79:24:ff:9f:00:b5:1a:3e:35:49:57:3e:6d:64:
         43:e0:f1:8a:98:71:60:a4:36:f6:16:8d:74:8a:55:f0:81:e2:
         01:44:04:89:e0:e8:5c:50:2c:08:16:4d:44:6c:95:f1:4f:4c:
         0c:f7:0a:62:35:d7:03:70:ca:35:e5:8d:3e:6a:23:ad:b4:b0:
         da:18:6a:ea:3e:28:2c:08:2b:2d:d8:4c:4e:3b:71:34:a5:70:
         54:c2:cb:c9:3f:ca:ac:f6:dc:4b:2e:14:45:33:a4:d5:39:19:
         16:c7:e8:2b:c5:54:4b:ca:6c:68:97:e5:c4:18:08:71:bb:38:
         0b:31:2e:9b:a7:26:9a:57:33:98:8a:7e:2b:2e:5f:4a:81:2f:
         b5:d2:e7:82:c9:a7:2b:cb:9e:81:ed:0a:0f:10:36:61:54:e6:
         14:84:45:47:60:bb:76:79:fa:f6:73:25:37:30:42:85:75:bd:
         3d:cf:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:37:56 2025 by rpki-client