Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.mft
File:                     893D95ADA38B2A288C03DAA99290D5110510F8E7.mft (raw, json)
Hash identifier:          dWuXCGKkBCBJCoTM+AsFSv3DeWC4Gfyn/4G/9OYi52U=
Subject key identifier:   E7:85:35:51:37:B1:1B:EA:49:30:87:0B:81:18:A1:E5:DB:7B:02:06
Authority key identifier: 89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
Certificate issuer:       /CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Certificate serial:       444B9056DB9E0C133B509BABA3245CF56D674D10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 15:18:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:13:37 +0000
Manifest next update:     Sat 01 Feb 2025 17:45:37 +0000
Files and hashes:         1: 3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (hash: +hu2KveIY7/9+HIP6aandKJ2k61hPUd+gq7Yg8NlVhA=)
                          2: 323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (hash: Z0FYpLPCff9vfkWoPzH13SNEbmUikHH//BSzse5miF0=)
                          3: 3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (hash: LgkkCiFdiXEgieCdL7hdt/XdXoO5ts0Mff4KIibIMOI=)
                          4: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (hash: 9gs2HpFB08QifH9DthSpAEvbwuNeAumaHMOI/4k5qXc=)
                          5: 893D95ADA38B2A288C03DAA99290D5110510F8E7.crl (hash: S7FW/TLEeBW2BHq9AVKdDN6ANZYu3jDDpRC/Kppygpg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4b:90:56:db:9e:0c:13:3b:50:9b:ab:a3:24:5c:f5:6d:67:4d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
        Validity
            Not Before: Jan 31 15:13:37 2025 GMT
            Not After : Feb  1 17:45:37 2025 GMT
        Subject: CN=E785355137B11BEA4930870B8118A1E5DB7B0206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:a2:e5:bb:fc:6e:31:b5:24:bc:f4:48:80:
                    f5:b9:a3:3a:b1:6d:01:9b:67:56:39:31:7f:57:e5:
                    87:5b:e2:82:eb:49:f0:9b:36:0b:1e:c9:67:a9:b8:
                    1a:2f:d0:9c:4c:9e:a8:0f:2c:85:7d:02:3a:f1:9d:
                    26:cd:f1:de:c0:e3:14:46:c3:08:c2:c3:66:6e:30:
                    1b:7c:79:1d:26:9d:fa:ac:ee:07:cf:76:1f:7c:a2:
                    96:84:75:00:c4:73:05:15:b4:55:25:7d:6b:19:5f:
                    16:de:7d:cd:f5:bc:81:3a:d9:86:1a:90:17:cf:d4:
                    71:4d:03:52:be:c4:d2:07:b7:99:98:9f:6f:a0:db:
                    0f:17:27:35:73:e2:bf:43:94:af:4b:5f:73:64:fd:
                    40:bc:e3:7a:90:c4:eb:3b:97:52:49:35:5e:46:7f:
                    95:59:e0:ee:55:55:87:c7:7b:1c:27:10:43:bc:a4:
                    09:2e:c0:36:ce:a1:66:63:65:b2:a6:ba:15:e0:85:
                    69:cb:54:c3:d4:e8:c0:c6:75:a8:5f:e5:a2:28:c4:
                    91:c4:85:f6:42:80:da:4e:dc:44:ef:12:68:ad:aa:
                    3f:88:74:80:9a:2a:c7:89:72:59:d0:0c:60:72:44:
                    8d:06:be:ac:6c:ac:2f:92:62:5c:4d:a6:24:00:4d:
                    03:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:85:35:51:37:B1:1B:EA:49:30:87:0B:81:18:A1:E5:DB:7B:02:06
            X509v3 Authority Key Identifier:
                keyid:89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:2c:af:fb:77:50:82:06:56:57:b0:27:25:4d:7b:d5:7f:
         35:57:97:5c:9e:ff:2f:d8:e3:d4:3f:2d:78:5c:ab:a1:2e:2d:
         ad:a8:f6:31:3f:1f:25:7e:17:e4:a0:4b:0f:e1:ea:6e:6b:6f:
         4c:91:27:4f:76:e8:ec:9e:e7:f1:93:3e:92:39:1b:7a:fe:3b:
         5a:48:ea:12:78:60:be:27:cf:22:1e:6a:62:b0:0b:29:96:1b:
         d6:1e:06:d1:28:54:6e:b8:b7:ac:0c:c9:89:a5:0c:8b:b6:6a:
         31:2c:8e:2b:e2:b4:ee:3a:00:d9:d3:b0:ff:5f:3a:37:63:f3:
         a9:b8:25:5b:a3:2c:73:f8:28:83:33:99:af:ec:de:ff:b0:47:
         59:cf:88:ba:02:41:4a:1d:a5:ed:1e:78:37:e2:15:9b:ab:b8:
         a6:77:d9:48:0c:8d:4d:77:92:04:e1:dc:f6:4f:06:dc:31:5c:
         41:2c:a6:be:3f:da:9a:3b:9d:9b:fb:cc:b4:c5:62:28:15:65:
         2c:27:72:25:4c:af:1d:40:5d:e8:e9:10:10:85:20:dd:29:47:
         cb:18:37:d5:fb:cb:e8:ec:6a:7b:bf:5d:e6:1f:00:bc:6b:d9:
         a1:1f:af:8e:ca:76:fc:e7:5c:44:31:2e:63:9b:2e:55:0f:78:
         74:6b:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:04 2025 by rpki-client