Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
File:                     84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json)
Hash identifier:          3oZaRtJk2hjbSN4rj0d0Gn4iWyHDmRpm0xuRI4GYcQ8=
Subject key identifier:   3C:6A:18:8F:72:79:09:AD:A5:CC:E0:3E:58:9E:70:A3:88:5B:8C:41
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Certificate issuer:       /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial:       673606C88B6559C3423E07E01ED664BDB3D199CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
Manifest number:          019B
Signing time:             Fri 31 Jan 2025 11:10:00 +0000
Manifest this update:     Fri 31 Jan 2025 11:05:00 +0000
Manifest next update:     Sat 01 Feb 2025 14:17:00 +0000
Files and hashes:         1: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: B7CCordnAbxb+VRgOu4m+JQbtkkqezquwkKQ8KvEEoc=)
                          2: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: cEPdjAjoj8b1O2Ruq1QIyth3ICTYQ6Qj1KP14J8uLvY=)
                          3: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: 2+vYUt+aiSeTSKIoA4RTr4VRql5FrrLCktFxzuoaL6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:06:c8:8b:65:59:c3:42:3e:07:e0:1e:d6:64:bd:b3:d1:99:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
        Validity
            Not Before: Jan 31 11:05:00 2025 GMT
            Not After : Feb  1 14:17:00 2025 GMT
        Subject: CN=3C6A188F727909ADA5CCE03E589E70A3885B8C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:0c:d6:77:d0:63:7a:f8:c0:f1:d2:92:21:
                    89:73:0f:eb:19:ba:b0:34:4f:65:61:31:3e:37:14:
                    f2:7c:6f:61:45:c2:28:4a:14:c7:31:db:54:d1:fd:
                    96:00:67:8f:f9:03:32:60:07:ec:ee:ba:72:a5:7f:
                    06:bb:fd:16:8b:93:65:dd:a8:01:97:c6:e4:0c:0b:
                    0b:95:82:cf:d2:4c:bd:c1:e9:f5:99:d1:0a:32:a6:
                    d8:71:9e:c6:50:ca:1a:c5:98:70:0b:1b:66:aa:b2:
                    cb:b4:00:af:ec:be:99:cc:c0:c1:0a:cb:87:ee:fe:
                    a5:c9:97:62:c3:f1:da:e5:7e:c1:b5:71:c6:52:21:
                    59:81:26:bb:fc:ed:4e:89:db:6a:b7:b7:eb:23:c8:
                    7c:a4:8a:0e:88:13:15:48:ef:81:c6:6b:77:bf:50:
                    99:ac:bc:c6:7a:cb:5f:85:b3:39:30:b6:6b:a2:d0:
                    44:4b:3a:b3:d7:9e:70:ba:a4:3f:98:ad:5d:ac:8e:
                    e6:1e:4b:f8:1a:95:37:d2:66:eb:e1:82:7a:34:54:
                    e4:9d:9c:05:47:f4:29:2a:a7:aa:4a:48:e3:6b:46:
                    22:f6:6d:1f:66:d2:7d:c8:57:ba:4b:40:bb:db:c8:
                    74:9b:bc:c6:0d:31:30:0e:a6:d2:16:82:fc:ff:7c:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:18:8F:72:79:09:AD:A5:CC:E0:3E:58:9E:70:A3:88:5B:8C:41
            X509v3 Authority Key Identifier:
                keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:08:db:9d:ec:50:b4:03:5a:64:ce:09:d7:78:82:56:18:cc:
         5e:3a:fc:cb:87:55:5c:3d:4a:15:62:a7:84:3f:59:05:42:26:
         9b:81:15:8a:e0:18:db:97:6b:fa:9d:92:2f:23:1e:2a:ab:04:
         fa:ec:9d:8e:fe:77:19:92:29:e3:e2:85:dc:51:6e:88:1b:09:
         3c:a9:37:bd:af:0a:0d:db:b8:8f:d3:16:77:2c:31:d4:17:a9:
         39:54:bf:82:98:ef:37:76:42:c5:20:83:10:ab:d2:57:3f:de:
         84:86:81:e2:d5:60:cf:e0:cd:34:ca:ed:37:23:37:13:10:de:
         2d:2d:6f:d6:e9:bc:08:f3:56:8b:72:c2:f3:9f:c3:8e:a4:6c:
         0b:66:1d:be:8a:b8:9a:1c:30:76:49:63:d7:c2:56:9e:a3:6c:
         35:cd:3b:95:ab:ad:b4:2c:32:62:3e:48:14:5b:45:61:d4:d5:
         8e:b9:46:03:b4:9c:9e:28:58:22:f0:89:45:cf:61:d5:98:ef:
         ba:2c:95:4a:d5:1b:16:39:47:aa:79:f0:e0:97:bd:eb:25:fb:
         b7:33:e4:71:cf:4d:50:7f:8d:f4:50:80:7a:6f:ca:8b:cf:7c:
         4f:90:a6:61:3c:a8:b6:22:89:0c:81:93:b2:78:b8:92:c9:01:
         e0:a4:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:48:43 2025 by rpki-client