Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.mft
File:                     A740A7A96036C4D621D5040D884971C669EFC62A.mft (raw, json)
Hash identifier:          HuQsJXFPz0YKxNXsKGmFqU2vc8E/3QVSwviv04Ibde0=
Subject key identifier:   67:BB:57:B5:05:57:46:E4:BE:13:D6:1E:60:B2:C9:20:E4:8F:91:69
Authority key identifier: A7:40:A7:A9:60:36:C4:D6:21:D5:04:0D:88:49:71:C6:69:EF:C6:2A
Certificate issuer:       /CN=A740A7A96036C4D621D5040D884971C669EFC62A
Certificate serial:       2D03362BF40C6266D56070ECC76933D33D649926
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A740A7A96036C4D621D5040D884971C669EFC62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.mft
Manifest number:          0127
Signing time:             Fri 31 Jan 2025 14:25:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:20:34 +0000
Manifest next update:     Sat 01 Feb 2025 17:52:34 +0000
Files and hashes:         1: 3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa (hash: Ymdw6b7KAqRmAeLzUnxHQ/57PayUDIiH+4sbIhVHVvk=)
                          2: A740A7A96036C4D621D5040D884971C669EFC62A.crl (hash: jRVD+lkorcZ1zWZTiCuc3SufSqP/7ptgYyEUH8xKJM0=)
                          3: 323830343a363939633a3a2f33322d3438203d3e20323730323830.roa (hash: B6dwBZGvA28QpJdSJYINt6ILZZr9ZVim2lZn3PLWGG8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:03:36:2b:f4:0c:62:66:d5:60:70:ec:c7:69:33:d3:3d:64:99:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A740A7A96036C4D621D5040D884971C669EFC62A
        Validity
            Not Before: Jan 31 14:20:34 2025 GMT
            Not After : Feb  1 17:52:34 2025 GMT
        Subject: CN=67BB57B5055746E4BE13D61E60B2C920E48F9169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:67:5a:27:7c:39:93:9d:8f:03:36:5d:20:
                    03:29:cb:95:96:f4:6f:e8:83:20:40:21:ef:55:80:
                    01:8c:eb:9f:c2:2e:3a:3f:40:59:17:b8:4d:f6:5a:
                    af:17:31:fd:1d:8d:e3:2f:25:e8:9e:4b:1b:b4:d9:
                    f7:87:fc:36:c0:64:3c:54:1a:1f:36:fb:51:1f:4a:
                    8e:1c:14:59:a3:3d:bf:de:9a:76:29:36:c3:57:d0:
                    d5:8b:ed:02:dc:93:77:1f:40:b0:7c:88:f5:24:25:
                    27:ad:03:f9:f8:9f:f4:5c:b7:69:c3:a9:68:d1:54:
                    5e:26:ed:61:ff:61:8d:f6:43:2e:48:c0:a9:ce:a7:
                    de:03:2a:1e:9e:8f:38:22:f6:a7:2b:31:35:85:7b:
                    e9:94:5d:8c:9a:16:41:82:22:1c:3e:c1:f6:11:a4:
                    89:de:d7:e9:4d:c3:1a:d5:1b:ae:87:4b:83:86:06:
                    13:fd:ca:99:bc:09:32:f2:b2:c2:3e:0a:d0:7d:f8:
                    f1:a7:ec:a8:a1:c2:40:ef:be:17:8e:15:27:1b:ce:
                    79:05:13:c4:62:b0:d4:97:f4:94:b9:3e:0d:74:2f:
                    c0:a0:6c:b7:bd:44:64:3c:b2:70:06:98:d3:4e:5d:
                    e3:13:f2:91:bc:03:59:87:0e:c0:ce:45:1e:14:39:
                    cd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BB:57:B5:05:57:46:E4:BE:13:D6:1E:60:B2:C9:20:E4:8F:91:69
            X509v3 Authority Key Identifier:
                keyid:A7:40:A7:A9:60:36:C4:D6:21:D5:04:0D:88:49:71:C6:69:EF:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A740A7A96036C4D621D5040D884971C669EFC62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:26:52:7a:8d:6e:33:f1:9d:bd:f9:0f:f6:3a:97:75:98:
         57:47:5a:b2:7b:fc:0c:bd:61:3e:1a:94:f0:b8:01:01:47:29:
         ec:63:91:32:f1:69:8b:db:7b:44:0f:43:fe:7e:3a:35:dd:18:
         c6:14:f3:56:fb:d4:37:c2:ea:c2:6a:34:cf:f1:a9:1d:db:f0:
         fd:1b:53:5e:08:7a:88:4c:59:8e:be:7c:6e:8a:82:b9:29:5c:
         eb:59:ea:17:fe:64:bf:0d:0f:49:7e:bd:fe:fe:ce:e5:c4:ca:
         f9:91:9d:8d:ed:be:67:f4:5f:89:63:6f:a7:be:d5:4f:5e:e6:
         b7:53:f8:f8:5d:d4:63:a1:b8:99:0a:7d:4e:b7:7c:34:9d:c1:
         fe:0c:7d:c9:7e:64:55:0c:43:65:87:0c:3c:33:cd:41:ba:bc:
         e4:fd:7f:66:97:22:40:f3:ea:be:08:87:7f:6d:ee:7d:38:54:
         22:cc:27:d9:33:48:d0:5d:7c:b3:fd:fb:03:e0:20:3f:45:f1:
         f4:0c:e8:ae:db:a7:54:12:1e:95:c9:41:39:eb:c3:26:90:65:
         7d:73:49:ca:91:18:d6:a6:bc:84:38:86:41:3d:a5:39:e7:ad:
         f1:f0:78:6a:ac:36:56:f6:40:2a:8c:c4:cc:d0:00:32:30:47:
         dc:d7:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:59:25 2025 by rpki-client