Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.mft
File:                     072B7E06D438A56222390C3DCE8D0145589533BD.mft (raw, json)
Hash identifier:          KlqfUMeKAG6FYjPxbKkh4yBHvQBSwJO02LYoUbVYGc4=
Subject key identifier:   DD:9B:41:0E:D4:13:82:5A:6C:22:1D:DE:91:6A:F7:B2:F9:69:4F:07
Authority key identifier: 07:2B:7E:06:D4:38:A5:62:22:39:0C:3D:CE:8D:01:45:58:95:33:BD
Certificate issuer:       /CN=072B7E06D438A56222390C3DCE8D0145589533BD
Certificate serial:       2266502B0F06A0CE65DDB35AC98EE67F5F3F45A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 07:58:02 +0000
Manifest this update:     Fri 31 Jan 2025 07:53:02 +0000
Manifest next update:     Sat 01 Feb 2025 08:13:02 +0000
Files and hashes:         1: 3230302e3231352e3234342e302f32322d3234203d3e20323730353639.roa (hash: +h5cfj49NGQ7vY5nLn04AWaAcD1kP2JbV8qV2+lf6ZU=)
                          2: 072B7E06D438A56222390C3DCE8D0145589533BD.crl (hash: yhLuiQL5d3Vv7xDolKqjOtD93ikbENhIReyT4GGC33o=)
                          3: 323830343a366530303a3a2f33322d3438203d3e20323730353639.roa (hash: /PkkV5IupmJ2ftBk8ynlDCGSFd+QJTcu9YhvHZYVq3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:66:50:2b:0f:06:a0:ce:65:dd:b3:5a:c9:8e:e6:7f:5f:3f:45:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072B7E06D438A56222390C3DCE8D0145589533BD
        Validity
            Not Before: Jan 31 07:53:02 2025 GMT
            Not After : Feb  1 08:13:02 2025 GMT
        Subject: CN=DD9B410ED413825A6C221DDE916AF7B2F9694F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:4b:72:76:ab:09:18:0d:03:7f:82:57:26:
                    0c:9e:63:77:05:49:5b:81:b6:63:b5:5b:36:bd:44:
                    93:cd:5b:73:93:08:25:fe:53:aa:56:8d:aa:f8:94:
                    1e:01:8c:8e:66:76:d1:aa:6b:d5:97:12:1a:fa:01:
                    6b:1c:3a:1d:3d:f0:d1:5c:b2:ca:f8:c2:90:10:bb:
                    43:1c:98:10:ee:27:02:30:cd:6b:1a:40:3f:93:6c:
                    88:3d:39:e6:1c:a2:da:2d:c9:e0:b5:bb:83:50:01:
                    30:62:bc:85:6b:2c:16:f0:f8:ae:a7:10:fa:53:4c:
                    ac:13:a0:0f:bc:f8:45:14:f4:3b:e1:1e:30:a2:d3:
                    b3:e9:c3:26:76:35:d5:d9:0d:0e:20:14:ed:3d:8a:
                    ae:49:ea:02:b7:71:59:f1:ef:42:00:f8:78:4b:7e:
                    39:f4:44:06:e8:fc:d8:c0:ab:53:d4:ea:8a:d1:6d:
                    03:fe:34:08:0c:ba:d3:e1:48:81:c3:c6:90:a9:ef:
                    7c:4a:7d:3c:51:f7:dd:54:a0:dc:be:4e:06:18:0c:
                    a8:14:8b:06:e0:84:89:e3:cb:49:1d:bc:cc:35:c0:
                    65:75:eb:2b:9e:25:02:95:1f:70:c5:25:b8:3a:34:
                    90:87:d1:a7:68:85:6c:81:49:9b:12:02:73:72:a2:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:41:0E:D4:13:82:5A:6C:22:1D:DE:91:6A:F7:B2:F9:69:4F:07
            X509v3 Authority Key Identifier:
                keyid:07:2B:7E:06:D4:38:A5:62:22:39:0C:3D:CE:8D:01:45:58:95:33:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072B7E06D438A56222390C3DCE8D0145589533BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXPtME3GjotYGyjw5edf9YP272vBgfdDGodoU2erwcqq/1/072B7E06D438A56222390C3DCE8D0145589533BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:54:94:1d:7b:88:c0:51:22:44:c8:54:a9:69:03:77:86:
         92:7d:c5:b4:ec:02:c4:ab:5d:07:8e:ff:4d:64:04:c0:f4:aa:
         83:07:10:59:ba:a7:2d:fd:69:2b:72:23:1d:48:b0:e5:bf:4c:
         02:e0:5c:e6:e9:d5:88:51:f4:34:00:04:db:20:f8:9e:98:c4:
         a1:6a:02:54:55:64:1c:8d:2b:bd:24:a8:6c:ed:62:d2:38:7c:
         c6:b1:7d:58:cc:1c:ea:d0:eb:34:c6:21:4a:e1:43:1f:b0:62:
         94:ea:04:35:51:bb:80:16:96:1c:5b:f6:7a:f9:83:f0:fd:de:
         ad:0f:4a:9b:78:7b:5d:6b:fc:13:af:17:b6:82:5c:98:3c:cf:
         21:92:27:51:2d:5f:6c:f8:f0:36:83:de:2c:37:56:09:61:12:
         c3:dc:2d:e2:eb:4a:ac:e4:ae:53:3a:89:22:5a:e1:16:28:f5:
         42:81:4d:7c:fb:d3:61:6d:bc:04:97:f0:45:bf:fa:3d:07:03:
         7e:53:81:7b:87:03:55:b5:52:2f:5a:e8:62:d3:32:c1:a5:d9:
         77:85:76:dd:7d:39:74:1e:8e:ce:15:54:7c:03:0d:00:11:0f:
         89:a3:e0:9b:ba:3f:99:bc:9a:0b:bc:11:73:b0:98:ff:d7:19:
         10:41:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:35 2025 by rpki-client