Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft
File:                     8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft (raw, json)
Hash identifier:          HAKs6OaOsYLDtktV18oLCMKWOasizE9jOUq8Aqduk4M=
Subject key identifier:   0B:D5:93:15:69:27:D9:90:C5:48:CE:71:6A:9B:DB:75:CB:E3:5D:C1
Authority key identifier: 8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8
Certificate issuer:       /CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
Certificate serial:       3A7335BCC1808C24852C6845F1368E2905D917F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft
Manifest number:          01A1
Signing time:             Fri 31 Jan 2025 09:21:48 +0000
Manifest this update:     Fri 31 Jan 2025 09:16:48 +0000
Manifest next update:     Sat 01 Feb 2025 11:12:48 +0000
Files and hashes:         1: 3137372e37352e3234302e302f32302d3234203d3e20323632363031.roa (hash: gfBJAuNHH60Mk6JXfLpN58DbrfIj+i/D/Aa1r4O8jp4=)
                          2: 8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl (hash: ebK2hEdQChzu7APgvAElhSjxwMIpJ9IzFL7eWKqiFp8=)
                          3: 323830343a3661633a3a2f33322d3332203d3e20323632363031.roa (hash: e2uKxdfIG1VyWVCtqqbDn1LZcztF4mTwF4C3JOHRSUU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:73:35:bc:c1:80:8c:24:85:2c:68:45:f1:36:8e:29:05:d9:17:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
        Validity
            Not Before: Jan 31 09:16:48 2025 GMT
            Not After : Feb  1 11:12:48 2025 GMT
        Subject: CN=0BD593156927D990C548CE716A9BDB75CBE35DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:20:fc:4f:52:d7:c5:06:79:cc:ec:7e:86:
                    22:af:a5:d5:a3:7e:cb:8b:c4:66:8f:43:12:b1:95:
                    16:51:16:28:e9:1d:6b:98:ad:d2:03:70:47:e3:a1:
                    b5:a4:93:bf:32:c2:20:92:fa:6d:ff:1d:82:90:87:
                    62:a4:e5:06:0f:28:0e:ab:73:b7:25:39:b6:8f:60:
                    71:ca:6c:b5:f3:4d:51:a5:7c:98:fa:98:b6:ff:da:
                    80:bc:c4:70:eb:ee:bd:7a:ef:3e:5f:72:22:6a:6c:
                    e7:eb:f9:74:9e:46:3c:ab:f0:61:f3:a5:2d:8f:91:
                    d6:de:c5:ec:d2:09:62:ab:96:87:3c:79:09:d2:51:
                    ed:37:59:0c:04:a8:db:fa:92:c3:0c:cb:a4:0e:c3:
                    f7:86:69:b2:a4:c5:41:5a:ce:60:d3:6a:24:65:b0:
                    ea:9c:91:cc:31:58:33:91:c0:8d:b5:b9:e3:55:f1:
                    f5:d9:58:5f:49:f3:2d:c2:13:ab:2d:ee:a2:9d:cb:
                    db:f0:7b:1a:69:4e:db:b9:b0:e2:f1:4f:14:eb:b3:
                    b3:8a:6d:97:b5:41:3e:b5:78:9b:38:40:9d:bd:b1:
                    6a:b9:df:07:33:6d:c4:f8:a2:50:66:b2:11:5e:e1:
                    88:ad:f6:64:9b:72:f0:b4:bd:cd:9b:1e:9c:05:bb:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D5:93:15:69:27:D9:90:C5:48:CE:71:6A:9B:DB:75:CB:E3:5D:C1
            X509v3 Authority Key Identifier:
                keyid:8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:22:7c:db:58:32:90:aa:26:a7:ad:e8:2e:f4:87:64:c2:d9:
         93:d9:e9:05:02:6b:60:fa:0a:48:84:f9:88:f0:be:4a:ab:26:
         d3:a6:a4:a2:a8:78:d6:2b:e6:96:35:50:5c:2e:5c:86:44:c8:
         bd:2d:b6:90:13:c4:a9:f7:5f:ab:c0:41:eb:0b:3d:05:0b:6b:
         d5:79:77:82:d2:1b:e7:cc:0e:4b:ab:c1:c2:2c:cc:8c:81:8e:
         a8:fe:39:24:8d:47:06:b1:57:59:97:51:24:8d:c4:30:25:03:
         cb:a1:11:ff:bf:68:a7:d0:fe:e9:71:7c:d9:cc:40:9b:04:16:
         ec:a6:93:8d:e0:a4:53:cb:ad:e3:9b:ec:ec:66:a3:21:02:78:
         fa:01:29:10:71:7c:ae:e6:3f:b9:62:e2:d9:bc:b7:49:ae:45:
         a2:6a:24:db:e5:32:77:f7:e5:af:d0:de:be:56:fc:bb:d6:c2:
         60:b1:0a:c8:da:fe:df:d8:27:18:04:4c:6e:dd:9a:74:87:1d:
         ee:9c:a0:90:e5:70:14:fc:b2:cc:a1:89:25:56:89:4f:77:68:
         63:42:ac:6e:1e:fc:ac:23:8d:97:78:73:23:f3:35:87:1a:d4:
         9f:30:75:83:54:57:3b:7a:ef:cb:32:94:26:04:69:bd:a9:0b:
         bc:a0:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:36 2025 by rpki-client