Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          4jPmuintoZMj5bVni4p/BCIfCBLpo7uUskzyH1FuVj0=
Subject key identifier:   3D:36:05:5F:A2:72:4E:25:85:A4:99:63:C3:F2:C3:DF:56:02:5B:AB
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       7BF4E04D6BE1B53DD5B814B4C5C67C6B67747AD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 17:57:23 +0000
Manifest this update:     Fri 31 Jan 2025 17:52:22 +0000
Manifest next update:     Sat 01 Feb 2025 17:58:22 +0000
Files and hashes:         1: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: nxQsA6cbANmt1bD+NAlWNVTTDPCJw7jOmEGNVT+trvo=)
                          2: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: t3d7C+nwvnxA+HYknv/ZFKBTz32TixgkR3It3vB/dbo=)
                          3: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: Dnkpq1KMFash/rdc4eNGgAEjVqJZR0NnsLOhSpzQEo4=)
                          4: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: E/MT9UCrTzVS1zAJJl+VRTbF4KO+W/hQyhB7fVhKsQQ=)
                          5: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: h0LeHpeS9+f9sMPjx53fq6TOE3We5Aj/JMRfjUIj74c=)
                          6: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: 42fzWg4Bmf+PVYyWNTCDfFHuyerO45+LjaXIFhne0wA=)
                          7: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: wJZKnoAvGrcJBlUNbYz7E/RrqvIWrVSJprPgZ1oYqdM=)
                          8: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: Kg9MXtK9x2mzvDz5egP9JHx8oUc5R2psBBjOvLu9rlE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f4:e0:4d:6b:e1:b5:3d:d5:b8:14:b4:c5:c6:7c:6b:67:74:7a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Jan 31 17:52:22 2025 GMT
            Not After : Feb  1 17:58:22 2025 GMT
        Subject: CN=3D36055FA2724E2585A49963C3F2C3DF56025BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dc:91:2d:3f:80:1b:3a:bb:14:29:e2:b6:e2:
                    d3:a9:80:89:e9:82:ac:3e:b8:85:fe:01:76:a2:1c:
                    d7:9b:85:e2:06:44:3a:e9:b0:fa:99:b2:dc:0e:ba:
                    93:4f:b3:43:10:f3:06:3a:0c:d0:73:62:41:28:98:
                    3c:f3:21:e2:0f:68:96:68:7f:20:d9:77:96:e6:26:
                    9b:3f:8d:66:17:32:ab:bc:df:f5:a5:ed:0d:1f:ea:
                    57:60:d4:ff:3a:d7:f0:a8:74:88:93:99:6a:c5:79:
                    6a:ac:95:e4:17:6a:4f:eb:fc:3a:8f:cb:3e:4f:46:
                    dc:c0:bc:c2:24:2b:70:b4:b0:d6:88:d4:7f:3c:c7:
                    52:20:5f:a9:23:fa:95:f1:f6:7e:51:69:05:d5:c7:
                    7e:9d:07:1b:dc:64:04:25:51:9c:11:8c:31:dc:bb:
                    c0:06:14:d3:99:4e:d1:c7:30:37:05:3d:5e:97:94:
                    4a:a9:bc:9f:8e:96:fc:ba:7b:70:fa:5b:a0:56:88:
                    6c:65:65:d1:95:f2:55:a1:8e:81:17:e7:9b:5c:d4:
                    16:7d:73:ae:28:80:3f:9b:c6:a7:a1:36:dd:de:92:
                    de:f6:b1:4e:c8:10:f2:0d:3f:19:20:eb:4d:3a:0e:
                    3c:15:f4:31:52:45:9b:30:bd:bf:28:ff:60:7d:54:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:36:05:5F:A2:72:4E:25:85:A4:99:63:C3:F2:C3:DF:56:02:5B:AB
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:e8:90:26:3e:1d:7c:aa:45:8a:d8:c7:30:fc:09:cc:04:
         60:2d:3a:86:2f:a4:f4:f1:93:8a:af:71:63:23:93:e7:1f:96:
         db:2d:da:6d:b6:13:02:9b:3f:19:79:5e:da:e6:df:87:9b:63:
         2d:eb:42:31:48:c6:6f:3f:89:fc:cb:ab:f0:7a:ba:e7:5d:96:
         96:45:ec:78:b1:e2:23:0a:93:54:73:05:0b:81:f0:dd:14:db:
         e4:1e:30:62:fd:6c:fb:93:e9:ec:50:40:dd:45:ee:22:96:5f:
         3f:33:51:06:8e:be:82:07:10:9b:e0:ee:61:98:d2:49:90:b7:
         29:5c:95:35:ee:42:01:99:ac:e2:73:6f:61:be:2a:5b:82:0a:
         20:e4:03:54:90:bf:d3:cb:25:40:2d:1f:4e:ef:24:70:a9:3b:
         71:77:ce:9e:45:48:2f:9a:7d:66:c9:36:91:9a:b4:a2:d3:f8:
         ff:0f:b9:98:84:ca:83:99:42:5b:33:1a:0d:95:ca:15:81:39:
         f9:83:08:3e:d0:5f:a9:c8:a6:86:94:64:15:ce:5f:cc:4a:09:
         f5:f6:d6:59:0e:ee:dc:b4:4b:f9:91:92:e9:5d:68:63:a4:26:
         31:60:2a:da:e1:e5:09:46:a3:3c:09:e3:93:7d:48:93:65:c5:
         26:12:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:29 2025 by rpki-client