Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft
File:                     B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft (raw, json)
Hash identifier:          6BdK5hfnZ5S0grAMUmJsEtSPEOhEfkBYPcwdOkmJnks=
Subject key identifier:   35:CC:86:FA:68:59:9B:92:59:50:1A:FB:99:C4:57:E2:F2:B1:1E:98
Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2
Certificate issuer:       /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2
Certificate serial:       0832438BE4E26F007441A7E7E517BCC79CD92C38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft
Manifest number:          73
Signing time:             Fri 31 Jan 2025 11:35:47 +0000
Manifest this update:     Fri 31 Jan 2025 11:30:47 +0000
Manifest next update:     Sat 01 Feb 2025 11:43:47 +0000
Files and hashes:         1: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: zOb0tcdCcKHe9eTGipsHOuuHflZf6xeNU9qswFyrYr0=)
                          2: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: GVNAHjdQrYOdqi4w33WEOJ0pNoA4kFNT2+qD5psjrvw=)
                          3: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl (hash: eJCbwB3P2i/gSmGLMw+zsEufi01bbzl0GSnr8mBycVs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:32:43:8b:e4:e2:6f:00:74:41:a7:e7:e5:17:bc:c7:9c:d9:2c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2
        Validity
            Not Before: Jan 31 11:30:47 2025 GMT
            Not After : Feb  1 11:43:47 2025 GMT
        Subject: CN=35CC86FA68599B9259501AFB99C457E2F2B11E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:85:d5:91:30:ed:e6:4e:81:70:66:62:e2:
                    c0:4a:ba:4e:de:d5:c1:60:1a:97:e0:34:fe:6a:fe:
                    fa:7d:c1:92:da:b0:a3:39:c6:6a:55:7f:3a:f2:a6:
                    45:32:83:44:d0:b5:03:dc:cd:60:af:86:61:2e:c1:
                    e7:7d:69:a9:88:96:b6:a0:b4:9b:b4:a5:b4:87:11:
                    b8:5a:5a:ee:49:74:cf:6d:1b:3f:be:4a:93:4d:6f:
                    0c:7b:98:cb:22:ef:04:a0:53:5c:d2:5b:10:a4:fd:
                    f8:2e:d7:b6:df:00:99:c4:40:43:5e:b3:e0:cd:cc:
                    14:94:4a:df:6f:2e:d5:14:ef:a9:79:16:ff:4c:87:
                    84:c0:64:e8:9c:ce:9b:ac:7e:3a:39:a3:83:41:7a:
                    e3:f2:c0:4f:2a:2c:80:03:1d:19:7a:ab:15:58:f3:
                    85:a0:e1:11:73:79:c7:9f:58:8a:97:c0:fa:5f:13:
                    f7:30:86:68:26:9e:6e:4a:38:db:f0:f1:12:56:a3:
                    b7:0b:28:18:d1:f8:9f:64:6d:b5:6e:f0:d0:43:c6:
                    2a:47:ea:dc:5a:d5:a6:7e:74:07:f8:77:56:84:b2:
                    e6:ad:f2:77:55:c5:36:12:a1:03:67:8f:0c:5e:c1:
                    4e:cf:7d:5b:1a:ad:d1:ab:99:b9:d1:cf:d1:2e:76:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CC:86:FA:68:59:9B:92:59:50:1A:FB:99:C4:57:E2:F2:B1:1E:98
            X509v3 Authority Key Identifier:
                keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:32:fb:5f:75:2d:85:ee:1d:72:f4:11:97:cc:6c:56:2f:
         23:7c:56:34:6b:a7:5f:68:b8:e2:79:15:fb:ef:07:5f:b2:14:
         91:52:7b:12:0b:f3:81:1b:51:7a:ca:0f:69:ec:6a:87:cc:3f:
         ab:2c:4a:b4:f0:2e:b5:d0:1b:f6:5f:0e:1d:ba:40:d3:70:6d:
         ab:9e:d8:d8:8f:89:39:48:27:40:92:80:df:0f:f3:55:65:f0:
         4b:8a:87:1e:f0:61:6c:cd:bf:ae:e8:64:fd:e2:bd:72:ef:42:
         dd:ad:ff:e8:82:76:f8:85:05:4f:78:5b:81:10:14:29:f5:27:
         38:bf:93:9f:0e:34:49:f3:d8:69:97:b1:f2:84:86:45:1b:4e:
         e3:15:b9:3f:40:7c:29:56:e4:6b:c9:73:2c:24:b4:e1:d2:59:
         98:24:c1:65:d5:09:52:a7:cd:b9:27:05:47:8c:e9:05:bc:00:
         0c:8b:07:3c:9b:41:1c:8e:b8:5a:da:1e:f2:3e:02:89:4c:5c:
         49:58:a2:9f:3f:43:4b:b0:dd:a9:0b:9a:a5:38:87:d0:ce:9a:
         de:a9:29:2e:9e:66:36:e3:36:ff:bb:95:ef:d3:47:f4:77:57:
         73:5f:de:7b:63:ed:91:e8:c1:5c:70:86:09:74:df:ea:78:c2:
         60:50:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:27:17 2025 by rpki-client