Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
File:                     32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft (raw, json)
Hash identifier:          G/fmTTulxFg2VRLlwRB1nZTi+VhE84uozTeKGzJdL+E=
Subject key identifier:   08:03:A0:00:BA:72:84:6B:73:06:9D:E7:AD:B4:13:98:A0:6A:BB:37
Authority key identifier: 32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0
Certificate issuer:       /CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
Certificate serial:       70ADE560AB1E40659019D7E9430750BA86A5CEBB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
Manifest number:          5B
Signing time:             Fri 31 Jan 2025 17:33:47 +0000
Manifest this update:     Fri 31 Jan 2025 17:28:47 +0000
Manifest next update:     Sat 01 Feb 2025 18:09:47 +0000
Files and hashes:         1: 3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (hash: rop4d3c5H1BlFCl8sb/JrVZsMIWJYPAeE2mZAUHcq/Y=)
                          2: 32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl (hash: a/2o4H2ktvWBK3ei4PEhLbmpOeyOuNvOeoeaxdd+qkg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ad:e5:60:ab:1e:40:65:90:19:d7:e9:43:07:50:ba:86:a5:ce:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
        Validity
            Not Before: Jan 31 17:28:47 2025 GMT
            Not After : Feb  1 18:09:47 2025 GMT
        Subject: CN=0803A000BA72846B73069DE7ADB41398A06ABB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:83:01:b6:e6:02:43:b7:3a:8b:f1:ca:46:
                    5a:e2:52:ef:c2:26:5c:52:d6:4b:e7:6f:29:2a:54:
                    b5:3c:78:96:4d:79:d2:7f:ed:ec:66:ae:2b:c1:73:
                    4f:15:50:48:01:80:cd:df:5f:6c:91:5a:33:13:51:
                    8c:6d:82:30:52:57:8c:3b:74:78:6d:3b:1a:a8:fb:
                    13:0f:3f:79:40:e2:fb:f3:ed:68:84:34:e9:60:68:
                    a9:8a:f4:82:30:7e:bb:de:1f:28:6a:6c:f7:f9:09:
                    47:f6:82:bc:32:70:ea:5f:de:0f:19:dc:f5:96:a8:
                    1c:91:17:4e:c2:30:9b:d8:26:27:d0:d1:fb:11:60:
                    34:45:02:c2:c1:12:37:cf:c0:43:06:ac:85:d3:92:
                    9b:46:e2:17:97:2f:8d:9f:09:68:fd:ec:b0:b2:5d:
                    47:6f:81:e1:7b:4c:e9:ab:3a:55:f0:28:56:ec:78:
                    9c:b7:fc:e2:96:33:00:fd:8e:f8:eb:b7:96:b9:6a:
                    22:d3:63:f4:f7:40:40:6e:e0:c5:aa:58:b7:a9:61:
                    ef:2c:34:79:19:b2:f6:6e:8f:7f:17:0a:b9:96:05:
                    ca:32:48:0d:ab:03:13:aa:8a:17:41:2a:59:a8:02:
                    f7:78:75:48:65:75:04:ec:08:08:f9:35:6a:7e:f1:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:03:A0:00:BA:72:84:6B:73:06:9D:E7:AD:B4:13:98:A0:6A:BB:37
            X509v3 Authority Key Identifier:
                keyid:32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:f7:55:bd:f6:91:a7:cf:20:c1:8f:8f:0c:30:b9:b8:0c:cb:
         b7:79:12:e7:7b:79:8e:7a:a0:11:89:ba:00:ce:46:ed:32:41:
         e2:91:aa:16:57:cb:fa:9d:8a:ee:81:45:04:bd:9c:fc:93:98:
         53:31:8f:a9:a0:9b:8a:a2:f8:9c:8a:bc:f2:e1:3b:c3:0b:df:
         f5:a5:b4:e9:b7:81:47:de:5e:04:f7:9e:65:13:e7:ba:69:90:
         f0:ce:02:7f:69:e5:89:96:3b:0a:fc:92:b1:b7:de:81:b2:76:
         f5:21:0a:6d:f1:5f:e3:e0:33:03:11:a9:3d:19:ff:50:6d:27:
         d4:75:1c:d1:74:d8:95:cc:ac:ed:87:7f:a4:cf:da:32:8d:c8:
         25:bc:e0:dc:33:9b:2d:06:aa:73:1b:98:f8:a7:63:1b:52:c8:
         43:e5:66:bf:0e:4c:5b:84:87:67:10:dc:c8:42:4d:76:55:79:
         9f:ae:75:c0:6d:e8:2a:4b:31:84:94:bd:e8:9c:66:41:f1:ab:
         69:f6:b5:65:74:e4:99:84:64:e9:6f:4a:c7:3b:0f:be:00:04:
         9f:22:79:d3:2f:24:5f:a5:fe:e8:df:c3:2e:af:ce:52:23:cf:
         9a:4a:ff:81:3b:99:dc:64:77:f0:5d:c5:df:4b:84:6e:8b:d9:
         fd:b5:c7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:54 2025 by rpki-client