Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
File:                     5A2848029237EDE072BF0D27156F239E1FEBEF52.mft (raw, json)
Hash identifier:          p+htx0waO0aAAO0INJy1CmFJkhmXvthgES6s6SAzblc=
Subject key identifier:   A5:AD:D9:0B:CA:76:9E:17:B8:2F:E0:C2:2A:94:86:51:B2:72:FB:CF
Authority key identifier: 5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
Certificate issuer:       /CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
Certificate serial:       4C3009874F11F1DAB7BE789236FF03CA8BDB6E13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
Manifest number:          66
Signing time:             Fri 31 Jan 2025 17:12:41 +0000
Manifest this update:     Fri 31 Jan 2025 17:07:41 +0000
Manifest next update:     Sat 01 Feb 2025 18:41:41 +0000
Files and hashes:         1: 3230312e3134302e3235322e302f32342d3234203d3e203631363331.roa (hash: v9IU5C2/uvVkzTRfUUwa0lRWWyRUTww8bmVHFWqXf54=)
                          2: 323830343a316130303a3a2f33322d313238203d3e203631383331.roa (hash: fIZyV+iHbeK/HWyX5PX8cbd8b6G0xvala462bayfqH8=)
                          3: 3230312e3134302e3235322e302f32322d3332203d3e203631383331.roa (hash: sCW/oZQ3AF72moVGFCpltL/gP5afzxfBSujsMF4Bfsg=)
                          4: 3230312e3134302e3235322e302f32322d3232203d3e203631363331.roa (hash: zD8g3wK9G/oAy/GjhCI5R5THBuHLH1Cs2of27RdzZ+s=)
                          5: 5A2848029237EDE072BF0D27156F239E1FEBEF52.crl (hash: zJz7/3oq1q/WoA17utAxlnEQhDMzK2FBaqj9eUavsis=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:30:09:87:4f:11:f1:da:b7:be:78:92:36:ff:03:ca:8b:db:6e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
        Validity
            Not Before: Jan 31 17:07:41 2025 GMT
            Not After : Feb  1 18:41:41 2025 GMT
        Subject: CN=A5ADD90BCA769E17B82FE0C22A948651B272FBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:b2:ba:94:88:d6:b6:72:6e:b5:f7:7a:e4:
                    d3:45:50:03:14:68:73:7e:54:af:1e:e7:2a:ca:3a:
                    80:9e:95:b8:9b:01:66:85:fc:62:72:ef:55:06:86:
                    6a:28:94:51:97:af:b3:b5:d9:48:d5:fa:4f:82:93:
                    96:8f:84:8a:20:ad:7c:ca:3a:8e:1f:37:6c:60:cc:
                    cb:02:0e:5e:a6:60:10:69:1e:29:19:c5:c5:db:31:
                    0d:e6:1e:67:79:0f:ec:0f:5f:cb:62:19:7a:75:b9:
                    d9:b0:3c:21:ec:74:6f:66:cc:bc:df:67:cd:dd:2c:
                    3c:83:84:1b:1b:fe:bd:ba:fa:94:53:2e:75:1b:a5:
                    c5:97:1c:1f:27:ed:33:fe:dd:a7:4f:76:4d:a8:2b:
                    fd:1b:2a:b7:4f:76:b7:4d:7e:61:bb:24:37:27:2e:
                    63:ac:e2:f5:de:ae:3f:da:f7:ca:6b:92:f7:e6:ca:
                    1f:60:03:e3:7c:5c:fa:67:b6:bb:5d:13:36:90:8c:
                    e9:d8:83:9b:04:ee:6b:af:35:07:5c:9e:b7:df:5d:
                    ce:1b:94:10:ea:c0:40:54:d4:70:b0:ba:29:7e:ce:
                    47:15:25:30:ec:e0:35:8a:9b:70:d3:5e:4c:1e:58:
                    1c:4c:b4:af:51:ea:8c:af:ed:f7:d7:05:19:6e:f4:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AD:D9:0B:CA:76:9E:17:B8:2F:E0:C2:2A:94:86:51:B2:72:FB:CF
            X509v3 Authority Key Identifier:
                keyid:5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:99:3a:c2:36:f4:60:a3:d4:81:a7:fe:c2:e0:19:da:ae:82:
         c3:8e:8e:dd:f2:6f:4e:e1:b5:46:b7:f5:28:74:27:37:41:94:
         98:5f:9d:0f:e9:0b:c6:d7:d5:b3:20:ac:0e:da:ef:01:d6:42:
         a8:9c:28:7c:c6:f9:b4:32:79:a1:7f:1d:60:4e:6f:40:64:72:
         d4:8a:ad:08:ad:d4:37:4c:99:7d:53:72:10:4f:83:87:3c:71:
         fe:85:ca:25:50:96:ad:bb:12:88:f9:9a:92:3e:56:3a:fd:ba:
         50:e6:ee:11:ef:1e:2b:82:71:5d:36:33:66:3c:6e:b7:43:38:
         9c:e1:95:1e:f9:75:00:63:25:f6:23:56:34:c8:63:1a:6f:21:
         17:58:20:81:9b:b9:2b:d9:00:69:cc:86:fb:1f:a3:56:5f:d6:
         bb:c2:35:3c:36:a5:2e:8f:86:79:47:77:ab:6f:59:3b:38:96:
         20:f5:f5:49:d9:1d:77:21:a7:ad:87:bc:5d:c1:c1:eb:ca:24:
         a4:1e:3e:65:26:e0:87:3c:0f:66:50:18:c2:35:b5:2a:45:2b:
         21:97:11:d8:26:60:20:16:7d:b4:68:38:1f:0e:21:c5:a2:f1:
         26:b4:a3:a6:73:3f:8a:f7:f5:e9:f5:76:bf:9e:69:8a:08:65:
         28:79:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:34 2025 by rpki-client