Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.mft
File:                     4AAAD605DA9FBA4CF949EEC17E939B692C66159F.mft (raw, json)
Hash identifier:          mrKRoKVG8Xeju0gy786ObKfTbj+Gc6+vF+lnFpaq4U8=
Subject key identifier:   43:95:E9:36:CB:B6:B3:4D:93:54:AA:E3:52:24:1F:76:B7:1A:10:5B
Authority key identifier: 4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F
Certificate issuer:       /CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
Certificate serial:       58065DF437E663C2164F54D6F128AB0B284F38E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.mft
Manifest number:          02
Signing time:             Fri 31 Jan 2025 18:37:44 +0000
Manifest this update:     Fri 31 Jan 2025 18:32:44 +0000
Manifest next update:     Sat 01 Feb 2025 19:23:44 +0000
Files and hashes:         1: 4AAAD605DA9FBA4CF949EEC17E939B692C66159F.crl (hash: g81e6p+faAWHi1H6AGVE7JF1bmi6XNfI1SJP33rtdb0=)
                          2: 323830343a383533633a3a2f33332d3333203d3e20323732353636.roa (hash: oqSibkPzLW6y6dSgf4LQ8p2kdmWCKly7T1HosZn+RJI=)
                          3: 323830343a383533633a3a2f33342d3334203d3e20323732353636.roa (hash: lvJu3xazSp7zWm8TsqoAXKFUKNqUFzRlwPvY98/SCGQ=)
                          4: 323830343a383533633a383030303a3a2f33342d3334203d3e20323732353636.roa (hash: 1C70lvyXgnNg4CWWl2CqYArzuLpl3/qnIJZUhDPH+Y4=)
                          5: 323830343a383533633a383030303a3a2f33332d3333203d3e20323732353636.roa (hash: ruQYTDHu1WdycL3x2RUcbcZztL7Jkw/6SvYuOw4avO4=)
                          6: 323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa (hash: lijWlXc3CqEsdvQj67gnhDuMBBq4xOtq7SL6AWUvw2c=)
                          7: 323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa (hash: RvPEHJnrrGG5ggo/SzSb+aXqP1x7tH7+dH5PprD12ac=)
                          8: 323830343a383533633a3a2f33322d3332203d3e20323732353636.roa (hash: DC3yzeWwa2LFo8Qi9ztxQuRPSexgM7O9ovD6ZZWhtEU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:06:5d:f4:37:e6:63:c2:16:4f:54:d6:f1:28:ab:0b:28:4f:38:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
        Validity
            Not Before: Jan 31 18:32:44 2025 GMT
            Not After : Feb  1 19:23:44 2025 GMT
        Subject: CN=4395E936CBB6B34D9354AAE352241F76B71A105B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:ea:fc:de:d1:68:8a:99:19:28:da:ff:f5:
                    0f:8e:6d:16:d8:c8:a5:fa:64:a4:61:67:f9:c9:33:
                    35:dd:0e:d8:a9:f7:dc:7e:0b:60:13:76:b4:ee:01:
                    81:f2:18:4f:e0:5f:62:46:7d:1b:b1:11:f3:0d:f7:
                    70:59:99:70:ed:20:8a:09:5e:3b:2c:de:59:14:af:
                    91:12:3f:0b:e4:27:a1:df:12:9c:17:68:f6:cb:70:
                    40:b8:53:ce:70:ec:5c:56:10:04:e4:ec:64:d3:c5:
                    37:02:a4:16:e7:08:dd:88:07:2d:a5:e1:5c:49:e1:
                    99:d9:d7:02:89:3c:00:5c:8e:19:5d:6e:52:75:66:
                    f6:45:fe:c9:84:80:a4:f8:df:7e:40:39:ac:86:3f:
                    15:11:81:49:8b:d4:26:81:40:b3:4b:9d:ac:50:11:
                    3a:ff:fd:da:2e:a2:90:9a:8a:3e:5f:ea:83:fe:dd:
                    cd:e1:7e:0a:e9:28:02:48:6b:e0:02:21:45:fc:82:
                    2b:13:1f:16:f1:1a:aa:ab:da:c1:5a:84:69:db:65:
                    f6:29:61:f2:8c:9c:0b:69:f2:27:a6:13:3f:fd:17:
                    b8:43:d6:cf:7c:db:ac:1c:47:d2:fa:00:35:00:08:
                    e5:a1:2a:bd:05:a8:e7:65:de:52:8f:42:8c:37:d8:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:95:E9:36:CB:B6:B3:4D:93:54:AA:E3:52:24:1F:76:B7:1A:10:5B
            X509v3 Authority Key Identifier:
                keyid:4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ed:e6:56:e3:d7:17:a7:f9:92:fd:9f:75:9d:3d:49:af:6c:
         e0:b4:2e:fc:9d:9b:e0:4f:d8:f3:1c:d6:33:68:37:40:28:33:
         41:9a:d6:17:87:6e:51:6a:d0:83:19:69:b2:13:bb:ed:b2:c9:
         d3:8e:55:0e:72:d8:be:99:dd:61:d6:89:95:b0:55:d8:ba:63:
         0e:86:7b:74:19:c5:da:0e:b7:08:c9:36:02:8b:c4:19:9a:71:
         c2:3a:2a:1f:0b:9f:fa:5c:7c:f2:d1:29:1d:b6:e6:e6:ac:60:
         e0:13:43:f5:b0:15:59:92:dd:ba:a4:14:22:04:16:ae:ba:57:
         cd:b4:8c:23:df:fa:5f:ac:63:2a:af:96:02:bc:b9:ae:1a:10:
         96:d8:aa:da:92:0c:70:bb:0d:27:13:e5:fa:f3:84:2b:d0:9c:
         3b:77:29:d0:72:b0:cc:66:38:b4:8b:67:6d:6a:a0:15:66:2a:
         df:3f:2d:1d:82:0d:2e:82:96:8b:ea:fc:34:a8:a4:f1:22:f2:
         43:82:eb:11:a8:70:38:a3:0c:27:3b:6c:92:2a:4a:f5:95:cd:
         32:81:fe:cd:a0:80:04:80:79:6d:ae:4a:f5:e8:63:91:3e:5f:
         50:0a:2f:c9:1c:a7:a8:94:04:42:8b:e0:6c:c9:9a:86:39:1a:
         fd:74:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:39:29 2025 by rpki-client