Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft
File:                     60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft (raw, json)
Hash identifier:          lwFmSd+/KfJmWWpRpFTo+MqDHoQ0QvuEgOSblXsWyu8=
Subject key identifier:   10:FB:66:6C:6A:30:C6:BC:8E:25:0F:DE:AA:0C:19:4D:B2:13:D0:2E
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Certificate issuer:       /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial:       347092CF98E7D8528E2E2AC19AB064D43F90A652
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft
Manifest number:          1E
Signing time:             Fri 31 Jan 2025 14:35:45 +0000
Manifest this update:     Fri 31 Jan 2025 14:30:45 +0000
Manifest next update:     Sat 01 Feb 2025 16:21:45 +0000
Files and hashes:         1: 3137302e3234372e3230332e302f32342d3234203d3e20323633323536.roa (hash: Jj2/JAQy0Dkah2L8VDgSHtctaG7tvgWadv6IsI3XH8Q=)
                          2: 3139382e35382e382e302f32322d3232203d3e20323633323536.roa (hash: p+9Pk1Jqbf1HMcF+ZwusZs1cGG+32elxLKnSBsLt+4w=)
                          3: 323830343a313765303a3a2f33332d3333203d3e20323633323536.roa (hash: nY8pdbvi0m3pvt7Yjz68hxcrwuaVnFfkT1K/uwnJwyA=)
                          4: 3137302e3234372e3230322e302f32332d3233203d3e20323633323536.roa (hash: REPti9FtyY/mmGS2U+VAQ4RaTW93CNEpfK1/ddt6mS0=)
                          5: 3137302e3234372e3230322e302f32342d3234203d3e20323633323536.roa (hash: F/6ub2uppGeTN4jsU83ToAQ8mMU9CAKo7hwjypNHKuw=)
                          6: 3139382e35382e382e302f32332d3233203d3e20323633323536.roa (hash: pGs3DAQ7iJhXsJyVeoBVnoL5BtzZsmFkDBEbpcx9c1w=)
                          7: 3139382e35382e31312e302f32342d3234203d3e20323633323536.roa (hash: TcrMTvzOJcr6fmbQkQbQ8T1lk1IjZEgEvc6f4S9PXqc=)
                          8: 3137302e3234372e3230302e302f32332d3233203d3e20323633323536.roa (hash: zLjl60+lXq2npHXyyBT5UNGjUZU24ottDoexyuH2hHM=)
                          9: 3137302e3234372e3230302e302f32342d3234203d3e20323633323536.roa (hash: yqQBZmWekhUyAOYkAxIBMTKCtNeXn7vwaeAiCdZ6VOI=)
                          10: 3139382e35382e31302e302f32332d3233203d3e20323633323536.roa (hash: JfECOfoVXO/lhwUjZgTZWh775j9tRkReSNvRIi3nIOI=)
                          11: 323830343a313765303a633030303a3a2f33342d3334203d3e20323633323536.roa (hash: mlRVuMskwDDLw28G2I/3Szxj/ROTbqJJcna0vatofIs=)
                          12: 323830343a313765303a383030303a3a2f33342d3334203d3e20323633323536.roa (hash: pN5rU8bgMrtX000uWLBdPGIOnl9KGZr35GAhD62eTHI=)
                          13: 3139382e35382e31302e302f32342d3234203d3e20323633323536.roa (hash: jWl+fmnuurP3kbGpp5BAA8XSZpgn+QhbYrURRGoN6uo=)
                          14: 60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl (hash: UIJKSkOe1IvOho447UOWfyvpRegNks6ZRBqLtW/r8Vc=)
                          15: 323830343a313765303a383030303a3a2f33332d3333203d3e20323633323536.roa (hash: Z1z0NASbWdA2Cwvbp6c8kHxW/THF+wxaQSlKb14PvjA=)
                          16: 323830343a313765303a3a2f33322d3332203d3e20323633323536.roa (hash: tbpG0VQnTAX2JTYTV/zNdJZh0rL6DgDYod6z52l/Pgk=)
                          17: 3137302e3234372e3230312e302f32342d3234203d3e20323633323536.roa (hash: WrJwC3g6tCQlD2xai/na3ofXDdZUlyIsD2eOKQjTFno=)
                          18: 3137302e3234372e3230302e302f32322d3232203d3e20323633323536.roa (hash: FTgUNFfYyxnQ/l1/XJe5p4PRQkq4apZQZY3zqDexA+U=)
                          19: 323830343a313765303a343030303a3a2f33342d3334203d3e20323633323536.roa (hash: yLMv+opdX3OQkP42UgjpVsHgYIi2SNjbMuVD+IPqaBY=)
                          20: 3139382e35382e392e302f32342d3234203d3e20323633323536.roa (hash: Mzx5SzcSaK0NoJ+H7V6nlMvabbWeJkGH7c6YsIHtG4s=)
                          21: 323830343a313765303a3a2f33342d3334203d3e20323633323536.roa (hash: yEDoYms+zFqHv+L5kYE0o5J1SJA2pkoqTlCObOf93F8=)
                          22: 3139382e35382e382e302f32342d3234203d3e20323633323536.roa (hash: qbxrxc651hjrHtTFFq5MAH/DqsNan+W8TFjurOAex1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:70:92:cf:98:e7:d8:52:8e:2e:2a:c1:9a:b0:64:d4:3f:90:a6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
        Validity
            Not Before: Jan 31 14:30:45 2025 GMT
            Not After : Feb  1 16:21:45 2025 GMT
        Subject: CN=10FB666C6A30C6BC8E250FDEAA0C194DB213D02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:47:15:5b:31:b0:b2:86:ac:11:77:85:35:
                    5f:f3:3d:a2:2b:84:8b:ae:41:fc:4c:5b:d9:cc:0c:
                    2e:21:ab:ed:ea:37:4f:7a:70:b2:15:63:98:51:77:
                    c8:b4:80:ee:c3:63:76:5a:36:d8:a3:78:74:df:90:
                    cb:55:68:4d:07:e3:da:c8:5b:d3:db:79:78:b7:f8:
                    96:7c:54:70:62:2d:2d:9b:aa:63:53:e9:c4:be:57:
                    58:31:ae:86:41:87:a4:69:c5:7b:7a:14:66:ee:98:
                    fa:5e:a7:14:fb:c7:c0:20:4f:6a:70:7c:51:87:d8:
                    fa:b4:a1:4e:6a:0f:52:f8:30:4c:ff:d3:fa:8b:8e:
                    4e:6b:69:34:9f:53:99:7b:86:b5:92:88:43:cd:d4:
                    18:aa:ee:4d:cf:92:6a:d3:b5:6c:c0:a6:60:ba:68:
                    63:02:df:e6:fb:ee:2e:4c:ab:ad:88:22:ce:be:12:
                    b7:dd:d1:6e:5b:4e:d0:07:d6:a6:51:e2:dd:f0:28:
                    b9:43:fd:e7:d5:19:56:6c:0b:40:fc:be:d4:14:41:
                    c6:a5:c7:7d:f7:1c:8f:e6:7b:3b:19:59:88:1e:0f:
                    a6:41:a2:ea:1d:04:48:85:c4:5b:6a:b4:25:50:9d:
                    f7:88:c2:25:eb:b6:92:98:c8:66:9b:bc:bf:da:13:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FB:66:6C:6A:30:C6:BC:8E:25:0F:DE:AA:0C:19:4D:B2:13:D0:2E
            X509v3 Authority Key Identifier:
                keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:33:db:7a:9f:ea:41:74:11:b4:31:c0:a5:9b:8b:cf:48:d7:
         28:0d:9a:cc:00:03:0e:49:1a:b5:f3:50:8f:dc:0c:8d:67:34:
         e3:62:d6:76:da:35:a9:8c:ab:64:9b:50:b8:f9:62:44:a8:d9:
         86:7f:8f:9e:2b:83:36:b2:b3:92:d6:19:e9:3b:22:e3:f6:2a:
         b7:89:fb:07:9e:ca:ab:13:1d:81:fd:6a:5d:cf:34:2c:33:2a:
         9d:b9:23:3a:87:29:52:5d:47:6b:17:0c:9f:90:ec:28:22:42:
         3e:df:f9:f5:91:c8:02:85:c6:f5:d8:20:ec:75:c0:c0:02:d9:
         18:32:b1:15:3e:72:e7:40:3d:50:a8:00:a1:39:9a:b0:7a:50:
         35:91:d8:1d:24:7a:69:87:66:7c:26:8f:58:b9:e5:62:e6:28:
         7f:b9:de:60:e0:4b:c8:48:d8:03:3b:9c:f8:2d:4d:02:3c:e0:
         50:42:2f:aa:9c:97:f4:ca:3d:fc:4b:51:85:00:e9:0a:e5:f5:
         50:79:5a:30:98:72:81:ef:ba:96:2f:f3:cf:70:40:bb:21:52:
         02:36:fe:5f:77:e2:6c:4c:3c:6d:8b:45:67:72:66:e6:79:a6:
         55:83:de:bc:f0:47:3f:9f:0f:11:02:18:77:69:2d:82:c7:07:
         f0:0b:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:55:09 2025 by rpki-client