Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
File:                     1A3ED1628CA42B3B4C8213417B61162F196BD434.mft (raw, json)
Hash identifier:          oja9DSBMnJa3Uc0qaDjUFGk54Xr5HjFbgJyaQcpsFs0=
Subject key identifier:   B1:EE:ED:73:BF:53:B1:3B:88:88:04:DE:18:DC:1B:74:13:7B:90:05
Authority key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
Certificate issuer:       /CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Certificate serial:       5F0FBF73F52CBBF72B56D4D6249AE7D5D659CF0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 06:31:35 +0000
Manifest this update:     Fri 31 Jan 2025 06:26:35 +0000
Manifest next update:     Sat 01 Feb 2025 08:31:35 +0000
Files and hashes:         1: 3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa (hash: 5mrG32Aq0kBk9BROA6eBOnYg5HchRoRbxSN1ixT2qUk=)
                          2: 1A3ED1628CA42B3B4C8213417B61162F196BD434.crl (hash: /rgXCS755qhg9Be+Q6/2JBaNxebaNVrGDXsC+gRrgTw=)
                          3: 323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (hash: igM/yX2kPkLtYctUQDJgalreQIzXExkoYM0G/o9QaIE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0f:bf:73:f5:2c:bb:f7:2b:56:d4:d6:24:9a:e7:d5:d6:59:cf:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
        Validity
            Not Before: Jan 31 06:26:35 2025 GMT
            Not After : Feb  1 08:31:35 2025 GMT
        Subject: CN=B1EEED73BF53B13B888804DE18DC1B74137B9005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:36:50:cf:6c:45:22:68:d7:e7:9a:a3:57:
                    10:a7:52:78:b2:ee:07:4b:06:67:77:02:9d:93:a4:
                    eb:d5:c5:27:a9:1f:c4:4f:f0:4a:63:fd:6d:b8:0a:
                    8e:06:4a:cc:ad:3d:ee:84:96:ae:20:92:27:93:84:
                    d8:c5:b5:62:7a:d8:08:e0:d6:9c:52:62:0d:15:13:
                    9f:e7:02:c5:d2:48:b3:93:37:35:ee:12:03:76:7b:
                    da:25:9d:8e:80:8d:52:14:b0:63:cd:18:09:71:27:
                    b0:64:41:8d:97:49:f4:6d:6e:50:7f:08:b0:71:3e:
                    35:12:8a:8c:5a:f8:f8:ff:e5:0b:f4:d7:16:fc:2d:
                    72:e7:c8:6c:b1:40:e8:78:95:27:0f:76:b8:f1:c4:
                    21:75:93:ff:47:e4:76:cb:d2:ad:cc:69:9b:2c:79:
                    3e:4b:b7:ed:76:60:51:d9:f9:d1:f0:b4:dc:d5:d8:
                    38:6b:b7:52:61:43:dd:ac:a5:e6:ea:44:23:ff:e5:
                    c5:67:c3:d2:87:8b:a0:13:a5:fe:40:26:ac:85:f3:
                    1e:7d:b9:ad:45:5c:dc:a1:d8:76:46:2a:e0:83:4b:
                    10:2d:11:fa:48:c0:02:a3:14:53:1b:fb:de:85:47:
                    4d:dc:8e:9f:31:37:f4:37:5e:d4:b2:44:31:c9:91:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:ED:73:BF:53:B1:3B:88:88:04:DE:18:DC:1B:74:13:7B:90:05
            X509v3 Authority Key Identifier:
                keyid:1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:e0:0d:ae:a1:0c:ad:63:83:96:98:89:19:ad:07:c3:59:
         36:fa:31:cd:bd:24:56:fd:90:72:0c:a2:01:63:98:26:ba:6c:
         97:be:3f:ee:0a:f9:a6:d5:f0:c0:26:49:bd:ba:db:13:2c:9c:
         a9:90:42:20:60:9b:96:e3:79:5d:40:1b:ed:b0:c3:84:fe:7c:
         6f:10:69:a1:bf:5f:ad:31:94:f1:46:08:4b:28:3f:d1:6b:11:
         a8:1b:5f:be:6e:2c:11:de:fe:bd:20:37:06:e3:db:e1:81:0c:
         7e:48:99:2d:04:ff:4b:f5:b9:47:62:a0:58:12:18:1e:45:82:
         b6:56:7a:9f:aa:29:e6:9e:5e:94:c0:6b:15:0c:71:76:01:82:
         23:95:b4:ff:4d:d3:a2:4a:8a:51:3b:b2:72:50:01:df:df:13:
         76:63:6c:50:a1:20:b1:76:dc:b5:25:f8:cd:7d:4b:48:af:9d:
         83:10:cb:09:6a:d0:89:77:3e:a1:bb:d0:b7:c8:07:15:bb:41:
         99:2f:2d:54:ef:ec:58:8d:e8:43:75:7a:f8:4f:54:a7:72:ef:
         f9:23:f2:41:77:05:03:a6:b1:86:6b:3c:b6:0c:b5:e2:c2:0b:
         a2:90:50:c9:a3:87:1d:f0:c3:d9:7b:43:84:ed:2a:b7:a0:42:
         fe:d0:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:25:33 2025 by rpki-client