Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
File:                     DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft (raw, json)
Hash identifier:          FLbif69q+KFaBSFOJwXkb85tMkRB69odLVARBeGoPYM=
Subject key identifier:   70:37:1C:84:3A:E8:80:F5:CB:1E:90:9C:A4:28:80:C6:75:06:C4:0A
Authority key identifier: DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B
Certificate issuer:       /CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
Certificate serial:       03BE1EDC3BF3D495CE1F43E94F376BAC8E027F05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
Manifest number:          CB
Signing time:             Fri 31 Jan 2025 16:25:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:20:19 +0000
Manifest next update:     Sat 01 Feb 2025 18:09:19 +0000
Files and hashes:         1: 3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa (hash: iw+L25+wBUdDc+1ORBx8FE/URYqnCtklGTKJXpYkjRQ=)
                          2: DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl (hash: J41zAAmMVdXtSzrQujR9uTmVqxH1NM0TKgT28Efrqu8=)
                          3: 323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (hash: jpuzGUzIBMDeqBM7E4EyVrYi5Ofatwg+xWIPl1csnqc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:1e:dc:3b:f3:d4:95:ce:1f:43:e9:4f:37:6b:ac:8e:02:7f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
        Validity
            Not Before: Jan 31 16:20:19 2025 GMT
            Not After : Feb  1 18:09:19 2025 GMT
        Subject: CN=70371C843AE880F5CB1E909CA42880C67506C40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:97:88:ff:c2:4c:b2:c4:26:24:d4:0d:a2:32:
                    d5:b9:58:56:96:84:3a:67:bf:9f:88:4e:4c:48:dc:
                    e8:7d:be:01:89:01:9c:c1:19:11:73:75:70:91:3f:
                    83:fb:54:1a:6e:74:4a:88:6c:0f:af:09:77:d5:6f:
                    77:8f:27:2c:9a:eb:20:e1:a0:13:57:6e:85:d2:76:
                    44:8a:89:0e:83:3a:50:6c:91:6f:70:87:29:ca:64:
                    a8:a3:1c:80:05:5c:eb:f6:f2:50:41:b2:42:01:80:
                    4a:19:be:2b:df:31:a6:e3:24:05:4e:4c:b9:6d:47:
                    9e:83:37:34:1f:77:39:08:9a:fd:2f:b6:99:7c:a2:
                    6e:15:5a:a0:10:a6:b2:08:33:4d:91:0a:e7:03:bf:
                    25:89:6c:72:09:a8:3d:9b:51:04:10:f7:13:5b:e7:
                    da:62:f0:2f:9e:0b:43:93:ae:69:ee:e0:2d:d5:27:
                    fc:ef:0d:a2:3c:77:91:c1:a8:c2:5a:34:c1:9a:3e:
                    10:bf:78:16:d1:70:be:f2:7a:00:cd:3b:f6:dc:d0:
                    d4:70:89:36:80:b0:53:e4:5b:9f:74:ca:44:2a:26:
                    8f:75:e5:70:76:77:25:05:74:14:e4:a7:0c:02:4e:
                    af:1d:94:ab:8f:1e:3d:13:35:c2:39:0d:b8:88:fd:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:37:1C:84:3A:E8:80:F5:CB:1E:90:9C:A4:28:80:C6:75:06:C4:0A
            X509v3 Authority Key Identifier:
                keyid:DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:76:97:e8:49:fa:98:62:06:8c:d2:3e:6b:06:38:dd:bd:ec:
         9f:b8:be:9f:e5:4e:b5:75:0e:cf:c5:83:ad:95:7a:51:72:ba:
         8f:29:65:8a:0f:f2:8f:8c:91:fd:2f:1e:07:b9:62:25:66:f5:
         4c:f1:7f:e4:dd:00:3d:1e:e3:fe:eb:07:27:40:74:d1:1d:f2:
         26:4a:e4:1c:9d:f5:dd:6a:cb:e2:fd:44:f5:28:82:8d:a8:54:
         39:4c:90:a2:82:95:67:cb:0a:86:da:56:f1:2d:25:a5:66:5f:
         09:39:01:0e:20:28:09:8a:73:02:50:15:fa:57:b1:f1:2e:2f:
         3f:39:93:17:1f:5d:7f:64:29:bb:70:72:dc:7f:5b:d2:6b:8f:
         1c:46:59:04:fa:ec:67:04:80:f5:1e:a0:44:88:14:ca:70:c1:
         de:97:29:80:e0:59:86:d8:7d:00:bc:15:b5:c2:f0:81:fc:d0:
         dd:4e:41:21:f4:d5:0d:68:41:69:11:be:69:d9:2e:fb:19:6c:
         65:bc:18:46:4d:0d:cd:09:96:3c:5d:21:ac:76:bc:5b:60:f6:
         b2:6f:b8:5b:cc:7e:67:99:97:1a:5c:af:2b:a2:7c:5a:e6:ac:
         08:13:34:da:7f:70:cf:f4:ad:92:1f:7f:84:22:ae:ee:73:db:
         b2:04:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:59 2025 by rpki-client