Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/F477DE3DDC1DF0690387387B559E914714282892.mft
File:                     F477DE3DDC1DF0690387387B559E914714282892.mft (raw, json)
Hash identifier:          BMQjqLAiOdxNeh6s7l7hPyr/WI+8VEf+B3SKWRigefI=
Subject key identifier:   C4:C9:59:B3:98:07:BA:DA:98:A3:35:89:D9:35:47:C5:7B:03:80:4D
Authority key identifier: F4:77:DE:3D:DC:1D:F0:69:03:87:38:7B:55:9E:91:47:14:28:28:92
Certificate issuer:       /CN=F477DE3DDC1DF0690387387B559E914714282892
Certificate serial:       36C7C6480CF266CD17E730978EF64DCE893EB0E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F477DE3DDC1DF0690387387B559E914714282892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/F477DE3DDC1DF0690387387B559E914714282892.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 16:47:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:42:12 +0000
Manifest next update:     Sat 01 Feb 2025 17:31:12 +0000
Files and hashes:         1: F477DE3DDC1DF0690387387B559E914714282892.crl (hash: mcUq3bTdyQlZAYLiqPi9uCEQpn55b+bj3CFOqcVqP2Y=)
                          2: 34352e3232392e3136302e302f32322d3332203d3e20323637313239.roa (hash: l9fptrSV9Eqbc3WiDD7e4EtOY20oGs9AdL37KXXpFZM=)
                          3: 323830343a343839303a3a2f33322d313238203d3e20323637313239.roa (hash: ng9dE4QEYLT6Qd1/X975cPrxaUkzi17zPiiWBZ7h/+s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c7:c6:48:0c:f2:66:cd:17:e7:30:97:8e:f6:4d:ce:89:3e:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F477DE3DDC1DF0690387387B559E914714282892
        Validity
            Not Before: Jan 31 16:42:12 2025 GMT
            Not After : Feb  1 17:31:12 2025 GMT
        Subject: CN=C4C959B39807BADA98A33589D93547C57B03804D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:1c:a2:e3:d2:d1:36:f5:19:1e:b5:70:83:
                    94:5f:ad:e3:d4:80:53:2e:25:1c:3a:d4:79:fb:8e:
                    54:0f:5b:76:f4:04:c2:9d:2e:50:ba:b7:5e:a6:23:
                    1c:78:c8:9d:21:0e:aa:56:ee:4d:51:0d:59:79:85:
                    c9:03:7c:ca:85:cc:fa:1a:67:f1:ff:0f:3d:74:29:
                    cd:33:c9:67:c9:cd:5d:f7:b8:a6:94:ee:e8:7e:bf:
                    2c:2d:b3:ca:b9:b4:8a:f1:72:ab:c1:da:1a:76:a0:
                    69:6f:49:29:ec:31:fc:7b:95:72:8a:c2:d9:64:6a:
                    1b:1b:da:72:28:c4:86:64:63:98:a4:56:20:07:18:
                    61:e9:94:a1:69:fa:04:0b:ff:b6:9e:c5:4f:2e:6d:
                    e4:25:e2:f9:34:82:5c:47:f8:25:f9:ea:05:bc:c0:
                    56:71:f6:b0:14:4b:66:2f:58:2c:e6:0e:65:93:e1:
                    59:07:10:b5:0c:92:89:1a:19:d2:bc:77:09:41:ed:
                    d1:c4:02:7a:24:ec:31:c9:ff:d9:52:7f:75:3c:6e:
                    97:6a:75:54:0e:ab:f2:d7:36:eb:24:8b:e6:30:a8:
                    b8:d3:e2:92:a7:69:16:22:43:41:0b:ee:9b:a4:55:
                    33:73:40:c3:35:f8:b3:47:87:dd:d2:59:04:36:37:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C9:59:B3:98:07:BA:DA:98:A3:35:89:D9:35:47:C5:7B:03:80:4D
            X509v3 Authority Key Identifier:
                keyid:F4:77:DE:3D:DC:1D:F0:69:03:87:38:7B:55:9E:91:47:14:28:28:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/F477DE3DDC1DF0690387387B559E914714282892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F477DE3DDC1DF0690387387B559E914714282892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/1/F477DE3DDC1DF0690387387B559E914714282892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:61:2d:80:c5:a1:71:84:e7:dc:e1:9f:e2:3f:47:58:5b:b1:
         77:52:13:9f:52:5c:97:c1:bc:13:f4:52:dc:8e:2b:7d:40:c5:
         d6:fc:44:fd:43:e1:a7:94:63:71:de:04:90:b1:36:cb:93:71:
         7c:3b:99:59:6b:03:20:1b:73:9d:3f:18:5c:c4:df:50:5a:ed:
         93:33:57:11:ff:a2:03:9c:4d:45:1a:64:e3:b5:aa:e3:fa:cb:
         a4:0b:ab:7f:9f:6f:c1:d8:18:26:27:ca:84:57:aa:7b:2b:64:
         61:bb:e5:c4:cc:ae:79:0d:31:a5:ca:12:36:f4:ba:26:14:1f:
         f0:b3:f0:6d:38:9c:07:78:c7:58:ef:f2:33:e6:87:2e:a2:24:
         92:a1:5b:b7:e8:92:07:e5:2e:ae:9a:ed:01:1f:ae:ab:85:f4:
         3a:b5:8b:be:c8:b3:4a:9a:65:b7:8d:1e:9e:c5:6f:9a:20:43:
         fa:a8:d3:42:99:15:05:a3:45:da:d0:9c:ed:78:01:fa:3d:84:
         eb:1e:30:6d:f6:bc:b4:b8:89:f2:eb:f6:a0:d9:68:0f:08:56:
         0e:8b:1f:63:ba:96:23:85:1f:85:ac:f5:73:58:a8:d1:d3:fc:
         30:fe:40:af:8b:95:1f:91:70:cc:a2:4a:28:ca:90:cc:03:6b:
         54:9d:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:14:45 2025 by rpki-client