Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File:                     D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier:          f7VfUxYQcQUzSq1NO82/FkxtfifMOZQU6F0cR/B9xqk=
Subject key identifier:   BA:8B:34:9C:45:18:11:98:D4:F1:F2:2D:76:36:70:FC:9F:3E:7C:95
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       7DA0D470D0B804930FE414543DF9505DBE43ABDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 05:10:00 +0000
Manifest this update:     Fri 31 Jan 2025 05:05:00 +0000
Manifest next update:     Sat 01 Feb 2025 08:08:00 +0000
Files and hashes:         1: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: 6PGW+Rf7aX8NMKDhBD+QnaBcUDo0OpCXYXelgQZ345Q=)
                          2: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: XwAbVluroeNkyzBjibfz+PgBH9CzYtqRzhmE0dHJDdE=)
                          3: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: F4ouV0N4JFek744NCHTLhEekrBAxvnmRnmy9zQ6BNPU=)
                          4: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: m4JXSkgWMMrCGu+j5VuQZu3jejUoCzZmOim8z3Mdqz8=)
                          5: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: 5scHsCrt6AxiYdpEpaanhT3HBBQctWvewWdWbOEdE6c=)
                          6: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: Hf7Vw95VAYrF2tYLf+TURdD4y5r52OhlBunatFazpk4=)
                          7: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: dqbsEWye1KX52bwkiYiWD0+ifAaQ54+TWOT8OQmi22U=)
                          8: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: jLcM/WBg8p0zkY3QGni4+7NiYJk1nmeX5+8/v3BUBKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a0:d4:70:d0:b8:04:93:0f:e4:14:54:3d:f9:50:5d:be:43:ab:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Jan 31 05:05:00 2025 GMT
            Not After : Feb  1 08:08:00 2025 GMT
        Subject: CN=BA8B349C45181198D4F1F22D763670FC9F3E7C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:3c:4a:d1:1c:1c:2b:ba:6f:4f:c2:84:6e:
                    cf:81:4a:98:7c:a2:9c:ee:84:da:6b:3d:c5:00:02:
                    83:41:fe:57:df:c7:84:d3:29:fe:0a:bf:b0:49:ec:
                    a5:c8:d3:5a:fb:ae:a4:a5:f1:b8:90:16:46:09:28:
                    72:ee:66:e7:64:3b:3e:ce:63:64:a4:9b:43:5a:a7:
                    c9:78:e0:7e:69:2a:58:6a:af:18:b6:55:3c:6c:60:
                    5e:2b:d1:b9:d9:a4:4d:f5:b6:12:01:f4:61:dc:05:
                    0a:48:6f:d1:6c:1f:d8:d7:e1:08:e9:ff:05:b4:53:
                    ff:da:5e:cb:34:7e:ca:fa:6d:30:84:da:e0:f4:fa:
                    2f:de:c3:89:e2:14:93:36:4c:77:44:c5:8c:6e:79:
                    00:55:d3:0d:79:56:bf:d1:d7:a7:ec:34:73:f3:19:
                    3a:64:74:bf:09:54:9f:a7:81:28:02:4b:45:df:2b:
                    85:73:0e:52:67:24:23:e0:68:f1:dc:44:0b:6a:04:
                    c2:cf:9b:a4:0c:be:b8:a6:4a:97:1e:e9:83:13:bc:
                    55:45:65:66:d3:d9:2e:68:88:63:41:be:ff:40:56:
                    31:d4:e1:42:cd:e2:55:f1:80:61:dc:49:c3:29:dc:
                    40:12:9d:67:bc:4d:85:99:0f:9f:23:68:2f:93:c9:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8B:34:9C:45:18:11:98:D4:F1:F2:2D:76:36:70:FC:9F:3E:7C:95
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9c:4d:2d:6a:b7:a7:53:1c:cd:c3:9c:5f:b5:fe:bc:24:a5:
         e9:df:07:27:f8:c4:ba:d0:b9:21:5b:9e:cd:9e:0d:d8:b4:9f:
         5d:d5:6b:f1:8b:2f:4a:60:70:da:35:3a:9e:74:bf:d5:64:89:
         34:7f:81:bc:94:08:92:bf:2d:b8:ea:d9:62:42:bf:03:1a:30:
         f4:15:ee:71:d0:3d:4f:5e:41:ba:72:b1:09:a6:63:b4:3e:c0:
         0c:73:0e:20:a0:e0:2c:ce:64:a9:7c:ca:3b:0a:d3:25:91:da:
         51:ba:0d:33:2e:0a:f0:08:ec:0f:04:df:e5:2e:0f:53:92:01:
         30:89:8b:04:ca:93:79:bd:c2:4c:4a:2a:1d:67:b3:ad:2b:2c:
         b9:87:97:c2:03:ec:70:15:22:d5:0c:0a:58:8b:bf:a0:b7:01:
         ab:0b:b3:96:43:35:bc:01:e4:99:36:95:cd:09:d9:b4:0c:38:
         af:da:fa:83:da:84:46:b3:95:11:b1:63:bb:ec:ba:5f:8f:bc:
         64:96:5e:05:68:26:27:be:8d:d3:7f:66:f5:83:99:ba:52:10:
         86:54:1c:24:c4:b1:a6:47:6f:b0:65:9b:11:11:90:6e:0d:bf:
         35:23:a6:c7:05:99:e5:58:c2:1b:ef:32:48:f5:79:40:8f:4b:
         a9:49:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:53:08 2025 by rpki-client