Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.mft
File:                     A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.mft (raw, json)
Hash identifier:          Aw/QAmRshzDdeGYeUaSL4DTQ+GWAPKOh8SSio0hZwxQ=
Subject key identifier:   22:21:AD:77:26:7E:41:B0:7F:DF:70:5B:FF:E5:9B:DA:C6:40:E0:AE
Authority key identifier: A2:B2:BB:19:5D:72:1F:8E:93:D7:88:6E:DF:97:88:1E:2F:2D:09:F5
Certificate issuer:       /CN=A2B2BB195D721F8E93D7886EDF97881E2F2D09F5
Certificate serial:       77CFA0D7C79527F879EA6066147A4DC722024786
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.mft
Manifest number:          08
Signing time:             Fri 31 Jan 2025 08:58:52 +0000
Manifest this update:     Fri 31 Jan 2025 08:53:52 +0000
Manifest next update:     Sat 01 Feb 2025 11:15:52 +0000
Files and hashes:         1: 3137392e302e35362e302f32322d3332203d3e20323731343938.roa (hash: lZi6k7fiNucVdqrysrLqgqtjAWMpZITRVsM0yMWYyBQ=)
                          2: A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.crl (hash: ppMgOYs45B9yXqjL0RdoLnrmxVuM9b4zs9oLXrhfVW8=)
                          3: 323830343a376337383a3a2f33322d313238203d3e20323731343938.roa (hash: K6k29cCyfpj6Kz/yt4QnATGJMGzU1MA0MS6UtCX7H44=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:a0:d7:c7:95:27:f8:79:ea:60:66:14:7a:4d:c7:22:02:47:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B2BB195D721F8E93D7886EDF97881E2F2D09F5
        Validity
            Not Before: Jan 31 08:53:52 2025 GMT
            Not After : Feb  1 11:15:52 2025 GMT
        Subject: CN=2221AD77267E41B07FDF705BFFE59BDAC640E0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:79:92:ba:b2:cc:be:68:f2:ed:c6:6a:68:
                    b8:da:e1:0f:d0:01:c8:ad:73:60:68:92:01:48:86:
                    62:c8:06:ee:bf:f2:72:e9:e7:5a:6a:f5:cd:1c:b6:
                    9d:81:f4:e9:58:b0:b6:99:99:be:d1:f6:8a:4b:62:
                    67:43:e5:7e:03:4c:89:e0:ec:2f:7b:38:7f:3c:56:
                    c0:d4:8c:d1:ee:02:df:bf:32:b9:7b:fe:c0:7f:cc:
                    a2:6d:71:cd:c8:f9:05:69:94:9b:20:4f:83:02:71:
                    57:40:df:6c:b3:d7:60:ce:4a:7b:ef:62:02:b5:e8:
                    a8:50:67:32:ce:c6:a6:96:ac:96:95:93:4b:a1:04:
                    cd:35:a4:8e:d4:2d:f3:1d:35:de:8c:5e:a2:b9:f1:
                    f5:92:3d:67:68:8e:05:42:d7:d0:2e:b4:35:8c:1d:
                    7f:c1:b3:8a:56:da:5f:c4:45:b5:65:08:1c:d3:51:
                    39:3c:88:49:28:69:6a:78:99:5a:93:9a:91:c1:5b:
                    f2:4d:95:19:78:6f:d0:e3:55:33:e5:17:0c:50:b2:
                    14:d0:00:1e:0e:43:8a:98:9b:80:28:b9:4e:7b:68:
                    5d:50:9c:e1:5e:81:4f:60:2e:0c:23:2c:7c:cd:9b:
                    58:bc:dc:14:09:2e:4e:84:1a:38:c1:ea:b1:9d:c3:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:21:AD:77:26:7E:41:B0:7F:DF:70:5B:FF:E5:9B:DA:C6:40:E0:AE
            X509v3 Authority Key Identifier:
                keyid:A2:B2:BB:19:5D:72:1F:8E:93:D7:88:6E:DF:97:88:1E:2F:2D:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:28:63:86:c2:ad:e9:de:48:73:1f:64:06:54:a2:b1:aa:2d:
         7c:9e:85:d9:3d:39:39:9a:7e:d1:8f:32:a2:ec:45:e2:67:9a:
         72:80:a8:39:2c:1f:d6:15:09:1e:93:31:26:20:e0:48:9e:dd:
         5b:8f:df:17:48:87:70:91:fa:b3:60:19:08:d7:9c:23:47:23:
         40:38:1a:87:dd:4a:47:26:a0:fd:93:35:b3:23:52:b2:01:2c:
         a6:d9:1a:86:ac:62:8b:64:ec:43:be:27:e4:0e:ea:f9:96:df:
         ff:4d:f1:07:0e:7d:66:bd:b9:6b:91:22:68:a7:f1:f3:fb:27:
         69:dd:00:c7:45:a1:23:52:b5:94:07:1b:61:e7:20:38:a3:66:
         e5:7d:f1:c4:78:04:f9:99:14:b8:f5:fe:f3:7d:50:57:b3:1e:
         0e:2e:65:65:bf:19:80:0c:ba:5a:81:e8:b3:7d:d2:cb:06:88:
         e8:44:2b:f5:ce:56:23:8f:fc:af:7a:71:4e:cc:b8:76:8b:9f:
         d0:29:6d:46:6c:34:b5:eb:c5:fc:57:a9:9d:c4:62:c9:20:d3:
         4b:fe:88:67:10:a2:8b:04:a2:bb:7d:5d:76:e9:23:c0:01:48:
         50:05:b5:62:6c:c1:d3:a5:8a:4f:57:00:11:1b:44:a6:20:44:
         a7:5a:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:05 2025 by rpki-client