Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
File:                     9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft (raw, json)
Hash identifier:          by5zt6IOxireQctqYTdoFeMW1ZnoruO+AZFzLY+AU10=
Subject key identifier:   08:12:4F:85:73:2A:45:B2:10:51:57:F7:C0:DE:78:B0:2E:D8:DE:7B
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       7900B27397A468194BBD40AD43C82BC3491C703B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
Manifest number:          0121
Signing time:             Fri 31 Jan 2025 16:34:25 +0000
Manifest this update:     Fri 31 Jan 2025 16:29:25 +0000
Manifest next update:     Sat 01 Feb 2025 19:19:25 +0000
Files and hashes:         1: 3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (hash: VlLW/dq6Wvsot8mOawcbg0Poo1eLpVJL+gDEbmozf2Y=)
                          2: 9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl (hash: nnB+iKFGLeS+py+b9ghTgEKpNl92pqpQvSfAyoyd8+U=)
                          3: 3136382e3232382e3130342e302f32322d3234203d3e20323633353836.roa (hash: oWFkLM93NWDbXjW2QG1T+UE4IbGchdy6D4wybVFoHP4=)
                          4: 323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (hash: VJzecU48ioa3iAVVf/f2xHbHXBr8u/4DSSwkheRhY3M=)
                          5: 3133382e3131372e36342e302f32322d3234203d3e20323633353836.roa (hash: 2CQKBGiLfQ+Am4jAhbTnE/gBsHU9315HpmbXTQn1ol0=)
                          6: 3133322e3235352e31362e302f32322d3234203d3e20323633353836.roa (hash: 42fbfI/mYSyed1AE3QkjiinEOseG8jtE+TqzSalK9FY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:00:b2:73:97:a4:68:19:4b:bd:40:ad:43:c8:2b:c3:49:1c:70:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Jan 31 16:29:25 2025 GMT
            Not After : Feb  1 19:19:25 2025 GMT
        Subject: CN=08124F85732A45B2105157F7C0DE78B02ED8DE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:03:31:ef:67:c8:0f:72:13:15:c4:22:58:
                    48:22:08:52:10:c1:15:90:46:50:1e:3c:46:60:57:
                    99:b3:05:61:7e:e0:65:6d:3a:0d:a8:36:57:5d:92:
                    91:80:b8:55:f9:6a:53:ec:93:92:5a:a7:50:e6:01:
                    e5:55:0e:60:32:b9:f9:18:d9:0c:63:81:3f:dc:9d:
                    91:1a:4b:26:66:1d:50:d2:de:84:4b:70:d1:1c:ea:
                    9f:90:69:aa:9f:f7:a8:1d:0c:47:8f:07:5f:00:62:
                    e5:ff:a2:9b:64:70:3f:ed:e6:bb:a6:64:21:dc:72:
                    ad:6a:5d:11:68:be:6a:41:d0:87:4f:b2:81:a8:8b:
                    c5:0b:db:3f:4a:6c:30:13:4e:bc:5a:f0:6b:46:01:
                    d2:d6:26:07:6a:e5:9f:54:00:ff:15:58:8e:64:91:
                    c6:e3:0a:ae:91:c5:2d:56:86:bc:e0:98:5b:23:76:
                    ce:45:7f:b6:ff:ee:e9:9d:ab:d2:df:1d:9c:de:57:
                    c8:41:32:fa:8b:68:cf:86:2e:68:25:6c:d8:e6:ad:
                    53:a0:66:2b:cb:59:72:a1:18:b5:c9:98:39:5e:f8:
                    fb:2b:7f:db:3d:c0:5f:15:b8:86:0a:c4:a2:8e:55:
                    83:13:a7:67:79:a2:62:41:4b:3a:eb:13:be:dd:4d:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:4F:85:73:2A:45:B2:10:51:57:F7:C0:DE:78:B0:2E:D8:DE:7B
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:af:88:d7:15:22:0f:5e:29:1c:c1:87:d3:42:25:a0:9c:d8:
         a6:a7:57:c2:3e:7d:ee:0e:ed:c5:63:03:23:94:c8:26:9b:12:
         f1:71:fc:d3:ae:16:23:bd:32:e6:23:c4:7e:79:c0:9b:6a:46:
         28:87:5d:ee:7a:e5:4e:8e:37:7c:19:cb:9f:93:1c:aa:cb:e5:
         d1:84:78:c9:7d:ad:2f:6d:bf:ea:ba:ca:da:bf:86:26:db:92:
         14:21:e3:b5:75:93:29:7c:88:3a:dd:65:a0:03:fd:04:87:6a:
         80:c9:45:1e:23:4e:68:c5:c5:0f:bd:47:6d:c8:5b:6d:5c:65:
         59:d3:ea:58:a5:8b:11:3b:ea:af:23:7f:ee:31:b0:87:7b:80:
         b3:92:b5:0b:8e:2a:ce:47:0a:76:05:f4:0a:ee:0f:49:4b:62:
         51:f6:e1:33:10:27:4d:5e:a5:13:38:b2:03:bf:63:34:60:c5:
         f2:46:6f:2a:ca:a2:58:ec:2f:d4:19:4b:6d:ff:1c:06:54:fc:
         cd:7d:41:88:86:54:b1:c9:28:75:4a:6b:ca:48:ad:b4:19:d2:
         bd:e2:89:56:48:6c:ab:63:e7:c5:24:34:78:e8:35:e4:29:2a:
         da:ae:17:ab:2c:e5:44:0b:c3:eb:ae:e5:08:33:d5:64:bf:0a:
         9d:1a:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:42:24 2025 by rpki-client