Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.mft
File:                     267CFD31CE3D98329F42489671A8D3C987CB2774.mft (raw, json)
Hash identifier:          dNmQuzhZdBXmDqTYvWIY/fClBDxGGB8Ec9RDMN9jjLc=
Subject key identifier:   1C:A1:E5:47:48:E8:FC:07:B8:6D:FA:EF:98:47:42:44:B8:29:65:62
Authority key identifier: 26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74
Certificate issuer:       /CN=267CFD31CE3D98329F42489671A8D3C987CB2774
Certificate serial:       1E5208E47DAE38E95818FA1F1859DB4F8FEAB9E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 05:26:45 +0000
Manifest this update:     Fri 31 Jan 2025 05:21:45 +0000
Manifest next update:     Sat 01 Feb 2025 06:58:45 +0000
Files and hashes:         1: 3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa (hash: lsiRX8l7lbJl3XdC9k7RVZ0b71MxkDk5eNa1qsb6dT0=)
                          2: 323830343a3835383a3a2f33322d3438203d3e20323632333635.roa (hash: Ztnf65SGuxUhDM0vOSbEtTwf7XQK0aedX6bG4k+ShWA=)
                          3: 267CFD31CE3D98329F42489671A8D3C987CB2774.crl (hash: YK3KoDVsFgxL8LghUDA7TBCH2mwoO4kMP2GPME3sIIM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:52:08:e4:7d:ae:38:e9:58:18:fa:1f:18:59:db:4f:8f:ea:b9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267CFD31CE3D98329F42489671A8D3C987CB2774
        Validity
            Not Before: Jan 31 05:21:45 2025 GMT
            Not After : Feb  1 06:58:45 2025 GMT
        Subject: CN=1CA1E54748E8FC07B86DFAEF98474244B8296562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:38:b3:97:af:c9:b8:49:ec:16:f9:cd:df:
                    d8:ad:c3:19:a0:35:61:af:60:f1:d3:be:a7:67:1c:
                    98:06:1a:0c:ec:45:32:a1:8f:c2:b4:19:d7:24:05:
                    bd:f5:9b:d6:e5:93:27:6c:2d:2b:ec:7b:9f:eb:16:
                    92:c7:32:b2:f4:a6:d1:3c:a3:c6:47:e0:d8:85:13:
                    66:21:c3:d6:60:09:cf:9c:1b:f9:88:39:8e:fc:77:
                    6b:1c:03:f3:9c:f9:a0:21:cd:6f:23:d3:64:38:38:
                    b6:46:cd:98:94:45:af:9f:23:6c:67:30:85:3b:f4:
                    bc:19:d7:25:60:97:65:07:91:1d:d2:1f:48:b7:3a:
                    75:22:2a:e6:ee:82:48:c0:df:e1:8a:9d:c9:93:a8:
                    59:6b:50:5a:84:d7:ec:89:19:2f:5a:aa:1a:c7:c5:
                    25:5b:f3:67:64:d9:84:38:e2:ba:cf:aa:ca:2d:6d:
                    72:73:07:8d:f0:b6:2b:ce:50:44:d1:87:cc:49:25:
                    05:37:ec:4c:38:29:c7:ae:4c:89:eb:b7:52:37:a1:
                    40:c0:f6:85:53:a9:2a:07:3d:20:85:43:f6:f4:c6:
                    0e:68:50:d3:3c:53:ed:2f:d9:21:b7:e6:33:3a:bb:
                    f4:7a:d7:43:56:bb:ae:fc:3f:a1:22:a6:15:87:53:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A1:E5:47:48:E8:FC:07:B8:6D:FA:EF:98:47:42:44:B8:29:65:62
            X509v3 Authority Key Identifier:
                keyid:26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:76:73:fe:bf:6f:ae:44:93:a4:e7:27:b4:65:f9:08:38:03:
         1f:7e:9b:18:db:37:b7:fd:7f:b5:b2:90:10:39:13:f3:b3:3a:
         41:2a:80:55:05:1d:ec:2a:85:95:ca:83:9e:c7:f1:d0:d6:2d:
         1c:06:19:63:d8:2e:8c:7a:1f:7e:9d:76:44:0e:8c:06:59:67:
         8b:ce:b1:01:5b:f6:4f:48:c7:4c:c1:96:dc:6c:cd:46:ab:ef:
         90:4e:57:bb:a4:a3:e1:d1:51:a0:25:f5:4f:a6:6e:f8:db:2a:
         a8:72:96:63:14:1c:0b:b4:2c:11:51:f7:6d:98:14:03:4a:c7:
         57:28:85:02:a5:fb:63:8f:93:2a:ac:83:74:4b:92:6f:8f:0a:
         3f:98:8a:69:fd:65:22:7a:31:fd:fc:52:19:20:07:5e:bf:ac:
         39:3b:f9:3b:4c:11:2f:e7:83:be:f8:a6:83:e7:c4:ca:e1:02:
         cc:56:e8:5c:c5:d4:1d:ef:61:43:ed:15:14:73:70:29:0e:96:
         85:fa:e3:77:a1:cb:6a:a5:80:40:ac:e3:5d:da:2e:3f:14:7b:
         0e:e9:6e:80:fb:30:09:11:18:af:35:32:92:2b:d8:34:88:34:
         9d:e3:75:18:ec:8e:8d:cf:47:0b:f4:dc:cf:b8:c7:be:b2:ea:
         aa:52:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:52:58 2025 by rpki-client