Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.mft
File:                     7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.mft (raw, json)
Hash identifier:          KEux8pdzBzf5R+ktRqpRNYbiztYIRT9HqziXEs8AojE=
Subject key identifier:   FE:38:D0:2D:26:86:12:BD:CA:96:B7:35:2F:49:E9:D3:B5:A0:38:6D
Authority key identifier: 71:42:B3:14:CC:CE:4C:B1:7D:8A:D2:BB:C9:0C:BB:C1:5A:88:BB:AF
Certificate issuer:       /CN=7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF
Certificate serial:       33D458978F38D2CDF239CB3DE37E427E65FED7B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.mft
Manifest number:          1D
Signing time:             Fri 31 Jan 2025 11:32:05 +0000
Manifest this update:     Fri 31 Jan 2025 11:27:05 +0000
Manifest next update:     Sat 01 Feb 2025 14:16:05 +0000
Files and hashes:         1: 323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa (hash: F95tPxHEMBCcGbEhNDIkHKGQkc7oENbb2hUiB5hk7LY=)
                          2: 34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa (hash: 7ef6nIdaFXbXcgLyfcWW/f+FExEtiWryilKfoEm6apY=)
                          3: 7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.crl (hash: metI+sMPcYKX4GZJbz3mxoBLY0hvj884PLDnGegnoHs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d4:58:97:8f:38:d2:cd:f2:39:cb:3d:e3:7e:42:7e:65:fe:d7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF
        Validity
            Not Before: Jan 31 11:27:05 2025 GMT
            Not After : Feb  1 14:16:05 2025 GMT
        Subject: CN=FE38D02D268612BDCA96B7352F49E9D3B5A0386D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:5e:38:9b:1e:10:03:bb:f0:2d:77:6d:de:
                    8a:bd:6a:7f:52:45:ab:60:ec:cc:20:22:6f:0c:7c:
                    24:55:fd:07:bd:c3:4e:67:f8:6c:c2:9f:01:2f:7f:
                    41:b0:7b:e4:26:48:da:71:da:de:ad:04:73:3f:c6:
                    52:dd:98:14:a2:6d:b8:17:fa:8b:eb:09:30:43:79:
                    e1:00:66:8d:20:12:2f:d0:71:e6:b2:43:c1:53:76:
                    7c:fe:35:fe:1b:48:3d:33:8e:ed:42:89:85:f5:ec:
                    95:2c:07:80:4d:2d:71:cc:cb:c9:7f:1f:8a:5b:20:
                    18:b2:78:83:57:19:f3:30:e4:e4:0d:da:05:cb:e6:
                    52:f3:73:b5:bd:88:7d:3b:67:4e:cd:7a:4c:70:ce:
                    4b:d7:5e:17:f1:f8:1b:45:74:aa:a5:b0:e1:ee:c1:
                    3a:ae:8d:84:1e:2c:b0:20:35:47:28:3f:f2:2b:be:
                    dd:ae:09:c4:31:f0:c6:ed:d5:74:99:04:c3:d4:ee:
                    fa:51:b1:c0:4f:59:3f:39:00:3f:fd:53:8a:b8:12:
                    f8:f3:b6:b1:3e:d9:4e:e9:29:b0:85:af:16:70:3e:
                    35:ba:33:a4:14:e0:1c:f1:f4:c0:e2:f9:e6:bc:60:
                    c7:e1:5f:68:30:0f:bc:f9:05:db:93:5e:a0:e6:36:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:38:D0:2D:26:86:12:BD:CA:96:B7:35:2F:49:E9:D3:B5:A0:38:6D
            X509v3 Authority Key Identifier:
                keyid:71:42:B3:14:CC:CE:4C:B1:7D:8A:D2:BB:C9:0C:BB:C1:5A:88:BB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:8e:8f:61:88:b8:a6:2c:ae:38:97:da:c1:d5:8f:0a:31:
         f9:d8:4f:b8:30:d8:2b:f7:89:83:9f:62:9f:aa:ef:25:54:0c:
         11:2d:c1:a1:5d:86:54:c3:0c:ab:51:f8:5c:79:f2:68:a5:16:
         43:76:4f:ae:3c:33:5a:02:a8:b6:ab:6d:84:2a:30:a8:cb:67:
         4b:83:78:eb:4a:0a:72:19:91:81:54:c1:e6:31:9b:c6:03:4d:
         8e:35:11:a7:e9:d7:4d:05:f0:43:03:d2:01:0f:13:47:51:f2:
         84:61:e8:b9:7d:6e:e3:a4:80:34:b4:91:a4:54:be:24:80:22:
         8a:71:89:fb:f3:40:4a:59:07:a6:0a:5b:cc:fc:34:19:d7:b8:
         2c:dc:df:5c:dc:ec:24:b0:41:82:6f:13:a5:3a:21:9d:20:bc:
         01:3f:14:63:20:1d:6a:6e:26:0e:4a:df:76:d3:1c:b4:0c:67:
         bd:3c:b5:ce:2e:75:46:42:a5:7f:7a:da:f7:45:2b:2b:f8:5c:
         30:31:03:3e:02:d6:f2:ad:02:3d:46:a5:68:dc:30:73:61:47:
         0d:72:98:a6:33:33:e4:86:0e:ef:20:98:58:cb:13:a1:bf:0d:
         d2:21:a0:7d:50:f7:99:dd:e8:28:c6:35:28:11:00:98:f1:07:
         fb:22:70:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM9RYl4840s3yOcs9435CfmX+17IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE0MkIzMTRDQ0NFNENCMTdEOEFEMkJCQzkwQ0JCQzE1
QTg4QkJBRjAeFw0yNTAxMzExMTI3MDVaFw0yNTAyMDExNDE2MDVaMDMxMTAvBgNV
BAMTKEZFMzhEMDJEMjY4NjEyQkRDQTk2QjczNTJGNDlFOUQzQjVBMDM4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9F44mx4QA7vwLXdt3oq9an9S
Ratg7MwgIm8MfCRV/Qe9w05n+GzCnwEvf0Gwe+QmSNpx2t6tBHM/xlLdmBSibbgX
+ovrCTBDeeEAZo0gEi/QceayQ8FTdnz+Nf4bSD0zju1CiYX17JUsB4BNLXHMy8l/
H4pbIBiyeINXGfMw5OQN2gXL5lLzc7W9iH07Z07NekxwzkvXXhfx+BtFdKqlsOHu
wTqujYQeLLAgNUcoP/Irvt2uCcQx8Mbt1XSZBMPU7vpRscBPWT85AD/9U4q4Evjz
trE+2U7pKbCFrxZwPjW6M6QU4Bzx9MDi+ea8YMfhX2gwD7z5BduTXqDmNrRxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/jjQLSaGEr3Klrc1L0np07WgOG0wHwYDVR0j
BBgwFoAUcUKzFMzOTLF9itK7yQy7wVqIu68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXIyc0FQRlR4ckZCVFVoMWVRZFFQWXVzWkFjcEd6c1FOVnVrZWhQWkVF
a1YvMC83MTQyQjMxNENDQ0U0Q0IxN0Q4QUQyQkJDOTBDQkJDMTVBODhCQkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNDJCMzE0Q0NDRTRDQjE3
RDhBRDJCQkM5MENCQkMxNUE4OEJCQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXIyc0FQRlR4ckZCVFVoMWVRZFFQWXVzWkFjcEd6c1FOVnVrZWhQWkVFa1YvMC83
MTQyQjMxNENDQ0U0Q0IxN0Q4QUQyQkJDOTBDQkJDMTVBODhCQkFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWXyOj2GIuKYsrjiX2sHVjwox+dhPuDDYK/eJg59in6rvJVQMES3BoV2GVMMM
q1H4XHnyaKUWQ3ZPrjwzWgKotqtthCowqMtnS4N460oKchmRgVTB5jGbxgNNjjUR
p+nXTQXwQwPSAQ8TR1HyhGHouX1u46SANLSRpFS+JIAiinGJ+/NASlkHpgpbzPw0
Gde4LNzfXNzsJLBBgm8TpTohnSC8AT8UYyAdam4mDkrfdtMctAxnvTy1zi51RkKl
f3ra90UrK/hcMDEDPgLW8q0CPUalaNwwc2FHDXKYpjMz5IYO7yCYWMsTob8N0iGg
fVD3md3oKMY1KBEAmPEH+yJwYg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:56 2025 by rpki-client