Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
File:                     2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json)
Hash identifier:          JUpNuSY28O0zXrDzhQYVykLcNnSu+2wmPO2l9j8uwTg=
Subject key identifier:   EA:DB:3D:7E:DD:9A:74:81:B8:02:54:89:F3:D2:FE:50:03:A1:1B:93
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       152F212292A8BD1017CCD753665F4E5B283427AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
Manifest number:          0146
Signing time:             Fri 31 Jan 2025 09:56:37 +0000
Manifest this update:     Fri 31 Jan 2025 09:51:37 +0000
Manifest next update:     Sat 01 Feb 2025 10:09:37 +0000
Files and hashes:         1: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: Gk9cu93/ZZ6jo/MeVj8pEgyxCp7U0W2XR6dEhknG5u0=)
                          2: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: 27YomA8TpPWq056IxLZdNFeCc9AAqgUAcMtyVHrU7JI=)
                          3: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: T8tKlDwd9TGCI+s7MB2oi6kCEtd2vIMrUnKqOxql/cI=)
                          4: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: jbZ7m/cZ2XC8pnRIQ9hoHimB9Dj0Rfx0URi4KyT+Pdw=)
                          5: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: Z3kmpsldci+k0etKHqSHjFsR/sd0khJ9mMYU2nyZdBc=)
                          6: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: 9EY7apw8vm0HkmsbpiQUW6dmLnGVjoF4qsDb8nu5zhk=)
                          7: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: eaHNN+6vzLIJPLthvhRu8XALhQCUuVyk7EwjYSTBDTw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2f:21:22:92:a8:bd:10:17:cc:d7:53:66:5f:4e:5b:28:34:27:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: Jan 31 09:51:37 2025 GMT
            Not After : Feb  1 10:09:37 2025 GMT
        Subject: CN=EADB3D7EDD9A7481B8025489F3D2FE5003A11B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:89:d9:01:a4:00:ee:2b:c5:fa:9f:a7:66:
                    93:85:5a:1d:f7:21:d6:27:99:1a:3e:5b:69:be:f8:
                    7f:73:87:0e:d9:cf:4e:51:1a:0c:2f:dc:18:df:d4:
                    be:38:78:d5:c8:aa:ee:34:31:64:22:07:ee:9a:18:
                    b6:8f:f0:e2:ef:16:ed:58:f0:40:ed:17:95:f0:10:
                    aa:59:7b:fd:02:de:db:74:5a:e3:9b:a6:a5:7c:d0:
                    6b:35:bb:3a:4a:43:78:fd:3c:9e:a2:42:6a:e9:77:
                    c2:a6:e5:2d:f5:cc:69:58:31:e8:32:db:3d:8f:91:
                    df:1a:c1:53:f4:59:2d:b1:df:f5:54:05:ad:ca:62:
                    e5:1d:98:dc:1f:e0:64:c4:24:ea:e4:a2:44:e3:bb:
                    86:22:9e:c1:b8:90:2b:ec:49:eb:8f:f5:e7:78:76:
                    dd:14:8e:45:14:8f:7f:bb:18:83:59:4d:be:eb:53:
                    b8:9c:19:58:91:f5:78:55:64:2f:e6:5b:8f:d1:7a:
                    16:f1:a4:e5:76:73:20:65:ec:97:16:cf:ca:65:34:
                    e2:85:e6:43:58:48:05:a7:97:5c:b1:6b:1a:80:88:
                    7e:e1:e2:46:96:a0:a8:14:3d:bd:bd:44:7f:1a:ba:
                    67:3f:83:a5:66:cd:a5:77:f0:f6:a4:94:59:ae:03:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:3D:7E:DD:9A:74:81:B8:02:54:89:F3:D2:FE:50:03:A1:1B:93
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:62:cf:f1:8b:a1:31:fb:6f:98:5c:6c:c8:91:c4:09:fa:2f:
         9d:6b:06:7d:41:60:b8:a3:ac:c0:9e:49:18:cc:8f:59:09:25:
         ff:77:86:ad:02:22:00:b6:7e:88:f2:12:6c:2c:aa:fa:f0:aa:
         88:95:d6:79:07:75:aa:12:ae:3f:59:b7:25:52:ce:b4:11:29:
         2d:2f:d7:5b:aa:69:4b:d3:46:e0:3f:d5:05:a9:3f:db:52:d1:
         7a:cd:9f:c7:95:f6:81:f6:e4:b6:c8:31:0c:93:4a:11:78:76:
         09:d5:02:19:f5:ed:21:e5:20:34:af:4e:eb:d7:6d:80:e2:57:
         98:73:d9:ef:6e:e6:dc:5f:96:26:bf:bb:50:43:5b:5d:04:10:
         da:f3:e2:f3:cb:4f:c3:f7:11:b8:91:84:02:79:94:93:79:cf:
         8f:2b:9f:a5:2e:b5:96:3d:7b:ed:e8:9e:c1:b1:ab:fb:20:c0:
         0e:b9:c4:f4:f5:5b:9c:da:16:79:9d:cd:ea:35:bd:60:ee:99:
         c2:2f:9d:54:55:e1:df:b4:9d:fa:5d:d6:e3:b3:cd:28:99:4c:
         f1:36:30:b7:52:9c:3e:26:5d:21:e1:30:b3:b3:59:93:20:c4:
         58:28:48:8a:6d:5e:5e:6b:59:a1:c3:b7:dd:2f:da:b7:70:07:
         6b:21:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:51:27 2025 by rpki-client