Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
File:                     964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft (raw, json)
Hash identifier:          3s8MmAexVH5ZMLJlHiIRsFthmCGd8Lq6V1i4YEtclHg=
Subject key identifier:   79:50:76:67:05:C6:B9:BC:33:DA:A2:C7:FC:B2:1B:29:96:6F:8A:E7
Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
Certificate issuer:       /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Certificate serial:       150F27306128E5A0812F08679ECABB10DDDE7BE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
Manifest number:          0109
Signing time:             Fri 31 Jan 2025 17:15:15 +0000
Manifest this update:     Fri 31 Jan 2025 17:10:15 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:15 +0000
Files and hashes:         1: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl (hash: 4XLv5j9HxiaHrlSp6AVH656/xoKT2tSadqPqZMYLP0E=)
                          2: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: XRnyxqeWor6zsOJOEe1DH7+2Zro+JWbwllL/176Q16g=)
                          3: 323830343a343130343a3a2f33322d313238203d3e20323635393938.roa (hash: LODlsKaanew1sXwWkXvg53CbbbAVODkh1Md3MommNu8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0f:27:30:61:28:e5:a0:81:2f:08:67:9e:ca:bb:10:dd:de:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
        Validity
            Not Before: Jan 31 17:10:15 2025 GMT
            Not After : Feb  1 18:00:15 2025 GMT
        Subject: CN=7950766705C6B9BC33DAA2C7FCB21B29966F8AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:fa:cd:37:18:51:69:29:6e:55:b9:7d:6d:
                    68:dc:07:0c:f9:5a:10:5c:44:ef:67:ed:8f:a4:a6:
                    4c:57:51:a9:5c:a2:ab:30:72:c2:94:bd:2d:47:9b:
                    4b:52:57:6b:24:57:00:1d:44:86:5a:2a:71:75:14:
                    d3:af:e3:94:47:05:4a:5a:f9:6e:eb:01:0a:12:91:
                    d4:93:61:a7:0c:19:bd:00:f1:a7:b4:73:7b:99:92:
                    a2:85:4b:40:bf:92:13:d7:2d:76:28:1b:f6:dc:98:
                    67:7c:9e:cb:c2:8a:98:f1:84:b1:80:89:8a:62:29:
                    ee:53:bd:24:ea:c3:fb:86:38:55:dc:6e:ad:43:c0:
                    ef:93:a4:8a:22:86:2b:63:67:02:f8:78:dc:f4:4e:
                    6e:ca:6a:da:32:df:03:b6:56:a8:ad:c1:6f:3a:a4:
                    d9:16:26:7f:2a:db:55:b8:25:f6:55:d2:67:01:45:
                    01:7e:02:ed:16:a1:c1:69:dd:72:a3:5b:4d:14:5b:
                    bd:80:08:4d:a6:33:c6:23:f1:8b:ef:2e:df:a7:46:
                    b9:63:c8:50:6e:93:5c:84:ee:ed:13:9d:01:5c:24:
                    e7:30:5d:c1:71:2e:3c:bd:5a:49:0c:58:6d:d7:a9:
                    28:48:7a:34:54:d2:4a:38:49:b4:63:27:43:b7:ae:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:76:67:05:C6:B9:BC:33:DA:A2:C7:FC:B2:1B:29:96:6F:8A:E7
            X509v3 Authority Key Identifier:
                keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:7a:f4:2a:fb:7c:b2:68:79:90:f1:ac:16:e8:1e:02:88:
         f8:71:37:c3:eb:cf:da:53:92:41:42:fe:e0:b7:62:89:e0:0b:
         2b:36:42:e6:e0:21:96:5c:20:e9:49:62:7b:05:a2:62:1a:4c:
         01:0b:35:df:54:c4:08:86:b7:4d:24:b7:05:50:0b:6b:33:e5:
         2f:91:55:54:b6:3c:00:80:59:2b:37:d1:a4:1c:11:a6:88:63:
         57:54:ec:e0:c6:59:90:e8:03:36:3b:bc:a6:43:19:32:a9:f1:
         3f:d4:03:f3:e5:5f:ed:8c:e3:04:de:27:15:ac:ce:f1:c9:49:
         f2:43:d6:e7:e0:03:08:db:45:80:86:25:95:81:27:24:48:25:
         a8:e2:eb:e8:c5:c7:70:f0:f8:1f:dc:9a:cf:34:3f:59:b2:69:
         c1:62:44:0b:8d:dc:b6:e7:cd:13:a8:f1:ec:61:ab:b8:ad:e0:
         40:55:be:f6:50:d1:7c:d4:90:1a:af:e8:25:84:cf:72:74:18:
         55:99:2b:4c:37:c1:bb:3e:8b:07:bd:be:42:1d:c2:c4:d5:23:
         4c:97:ca:3d:a1:8d:01:ff:e7:93:46:4f:56:97:3c:f8:04:50:
         ba:c3:2f:ca:fd:7e:86:bc:c1:63:f0:98:f4:ac:f8:72:91:4d:
         2d:ca:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:40:55 2025 by rpki-client