Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
File:                     12FE16FACD299316FCEF73CFEA782844D7C2E698.mft (raw, json)
Hash identifier:          Yiw0Hu5AHXdbkVrwdDs/5NUjk7RJX5UMruOH23BJXV0=
Subject key identifier:   D5:98:0C:E8:84:E9:81:62:5D:6F:EE:05:06:63:BE:46:F3:2B:F8:B3
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       33187882BABABAD66DB29AEF5C7171065D17947B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
Manifest number:          01A5
Signing time:             Fri 31 Jan 2025 13:20:00 +0000
Manifest this update:     Fri 31 Jan 2025 13:15:00 +0000
Manifest next update:     Sat 01 Feb 2025 16:04:00 +0000
Files and hashes:         1: 3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa (hash: CMyELUQ0L0MKstavwjZ82E8I3mLT+CpA9rRsMImQQ7I=)
                          2: 12FE16FACD299316FCEF73CFEA782844D7C2E698.crl (hash: OsJql/HfqLt7Jybr/aXWk4Zr1cFpf5H5HIHGAeBtmlw=)
                          3: 3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa (hash: 7ps8piKCtJTiBpTUjhvL/skB1mHHCIOcsWOl/2q7/38=)
                          4: 323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (hash: 6t0k8e1Gs0YZ6EbhNCea1mBsnx+SR73S1sbV9CtjURQ=)
                          5: 3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa (hash: Avv+w5Qj/Y6sxcFhqzeOgEA+Inz1GFPwEoyd6gEQwVk=)
                          6: 3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa (hash: HfbUw7qgFAAcHzN/9QWddHPJMuf8oKrg6XbAQR6JU/c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:18:78:82:ba:ba:ba:d6:6d:b2:9a:ef:5c:71:71:06:5d:17:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Jan 31 13:15:00 2025 GMT
            Not After : Feb  1 16:04:00 2025 GMT
        Subject: CN=D5980CE884E981625D6FEE050663BE46F32BF8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:a3:61:97:6e:25:27:d0:fd:8a:27:de:5f:
                    f2:47:fc:6a:6d:f9:df:ba:b4:16:22:08:ca:9a:3d:
                    40:80:c1:56:22:9f:5f:fd:ca:3d:ed:12:e9:a4:79:
                    62:44:be:23:e5:b4:04:cb:d6:b2:52:2d:c2:5e:a8:
                    ff:f6:17:94:01:90:9d:66:88:f6:28:06:e0:33:42:
                    d7:55:02:f8:cf:e0:d1:5c:1b:7f:46:af:c3:24:58:
                    68:c8:9f:54:4b:4b:b9:ce:7d:90:4e:73:47:54:83:
                    dc:4f:6b:2f:c4:15:40:a8:a8:31:2c:12:07:f1:4c:
                    01:c6:6e:ee:60:5b:6c:c6:7b:60:21:e1:3b:83:4d:
                    66:c1:5d:94:c2:8f:5e:d4:84:10:8c:e8:d3:48:51:
                    0c:d8:22:01:fc:d1:7f:46:bd:2e:cb:2e:db:8b:89:
                    d8:66:76:a4:1c:1b:14:21:9d:66:cd:8a:d0:e9:35:
                    06:5b:3f:3d:8a:a2:9b:cb:58:76:5b:9a:0e:53:d6:
                    f2:25:81:c4:ab:79:1c:1f:f9:6f:a0:b7:9c:d2:b9:
                    97:3e:ed:a5:0e:52:08:16:4b:a3:6d:97:a4:ce:a2:
                    2d:67:fb:57:03:db:39:3c:d8:7a:fb:a4:2c:e3:a1:
                    5c:a3:dc:15:8f:04:cc:14:46:92:94:d5:cb:56:d7:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:0C:E8:84:E9:81:62:5D:6F:EE:05:06:63:BE:46:F3:2B:F8:B3
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:60:23:7b:0b:52:b7:77:af:e7:b4:ae:86:42:22:7a:f4:e5:
         f2:1f:2f:83:32:07:14:ed:2a:a3:49:24:c1:9a:c4:eb:15:44:
         ee:b6:57:5b:d7:05:82:73:a5:bd:8f:74:1b:5b:d0:32:b7:4a:
         38:05:13:28:be:64:29:a8:60:01:fb:2d:30:02:4a:5c:3b:d2:
         d2:bd:a9:03:bf:fe:ea:5b:d4:ff:34:c7:33:87:6a:42:36:4a:
         fe:c3:98:d4:72:14:2e:fd:dd:00:7e:43:97:61:05:76:be:06:
         7b:4f:d0:bb:cf:c0:79:19:e6:16:0e:25:07:b3:72:a0:19:69:
         a6:66:d2:6d:88:c2:67:30:dd:fe:ee:8c:e1:42:73:36:32:a4:
         3f:33:bb:4a:a6:a4:39:9f:87:5e:5b:80:e1:d2:d6:a1:08:a0:
         f0:6c:60:47:ff:19:95:67:c0:a0:5b:4b:56:bd:a0:8d:65:67:
         00:ba:63:2c:c4:51:f5:47:32:61:66:2d:2c:ab:97:7a:d4:5b:
         43:84:60:27:37:2a:39:ee:9a:fc:bc:8b:0e:f6:2e:4d:f1:59:
         b4:d7:e2:97:43:3a:21:1b:c8:ee:84:63:af:b4:68:70:7f:4c:
         21:29:e1:fa:d7:fe:27:bb:4f:48:60:be:88:cb:bf:91:fa:54:
         af:64:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:26:49 2025 by rpki-client