Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
File:                     068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json)
Hash identifier:          4EQh0DUxO24qPIgq9SGMwkiioEEZe/BEVj37hLS4KWY=
Subject key identifier:   CA:A5:31:97:53:BC:09:A7:5A:30:03:A6:58:79:2F:50:BD:1C:C9:69
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Certificate issuer:       /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial:       5DCDE9BF6C8E445353D0EBB783306D0F4759B188
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 18:10:36 +0000
Manifest this update:     Fri 31 Jan 2025 18:05:36 +0000
Manifest next update:     Sat 01 Feb 2025 20:26:36 +0000
Files and hashes:         1: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: 6g9hMk0+8owP3Oem4YNTydJH43PxLpKzYYhyGUr7WHk=)
                          2: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: jJaW1JIbNZVWgV1gpN+3FzBsfwPR149jRNwJEoDuaaE=)
                          3: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: JvNutHO6dlPs37OfGQecm4v/EcpQJ1cEgn/pzXObylA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cd:e9:bf:6c:8e:44:53:53:d0:eb:b7:83:30:6d:0f:47:59:b1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
        Validity
            Not Before: Jan 31 18:05:36 2025 GMT
            Not After : Feb  1 20:26:36 2025 GMT
        Subject: CN=CAA5319753BC09A75A3003A658792F50BD1CC969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:56:a8:74:2b:7e:7f:24:59:48:3f:c5:55:
                    01:28:d8:55:09:f2:cb:35:32:18:c8:51:f3:23:83:
                    98:55:eb:e0:c9:2a:37:09:67:b4:c3:5c:ef:1a:23:
                    b3:ad:4d:a9:6e:9b:28:a8:64:57:ed:69:a3:c8:f8:
                    a9:e0:63:66:74:f9:e9:b1:69:e6:ca:02:b9:ec:9d:
                    df:e9:fe:25:bc:30:79:5a:7c:98:15:bd:ea:93:fc:
                    7d:f0:43:a4:a3:69:89:2a:8e:ad:70:e3:06:45:96:
                    41:a9:81:7c:f2:83:04:d2:7d:0e:e1:e4:b0:be:6c:
                    61:4f:38:89:74:bf:02:72:f4:15:80:c2:c1:9f:88:
                    61:c9:aa:2e:3e:21:b2:5a:f8:02:ce:b5:fb:0f:c4:
                    b7:95:15:fc:08:d2:42:da:8b:6d:dd:cf:39:47:de:
                    13:a4:08:9b:32:3d:5f:10:af:69:c3:cb:71:71:64:
                    97:e9:f9:d7:44:a5:e0:80:f5:17:0c:86:ad:07:39:
                    30:4f:14:40:f3:09:d9:57:7f:4a:f3:f7:9b:67:2c:
                    b1:e5:9f:da:01:b4:c1:00:40:c7:32:bd:93:12:9d:
                    eb:b6:7b:9e:74:b8:2f:80:a7:10:30:e2:54:08:5e:
                    5a:15:4d:76:ee:44:af:34:43:00:b9:8a:d2:8d:72:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A5:31:97:53:BC:09:A7:5A:30:03:A6:58:79:2F:50:BD:1C:C9:69
            X509v3 Authority Key Identifier:
                keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:66:e1:ab:f1:2a:2e:d2:b0:ca:9d:ad:be:d0:4f:9e:a7:82:
         da:62:ff:77:04:dd:43:bb:11:2e:bf:4f:c4:c5:8c:20:40:54:
         5d:dd:c3:9c:a1:6f:2b:98:70:78:c6:5e:2d:d1:5c:99:1c:d2:
         de:63:ab:93:42:41:e2:b5:ba:a6:d0:ab:b0:39:13:89:95:a4:
         23:5f:1c:40:1e:f8:04:37:55:40:87:2d:9f:15:9c:57:63:f8:
         e0:5a:95:71:40:84:02:67:b4:ba:16:d3:2e:9f:34:71:d6:ad:
         1f:54:f9:df:d0:07:c2:84:15:c3:07:c7:ac:f6:41:eb:67:ef:
         4e:06:81:14:30:76:3f:ff:ef:b9:a1:e7:57:cd:29:8b:81:cf:
         d8:44:b0:86:f9:f4:4d:ba:8f:71:87:18:54:fa:7a:9c:23:94:
         3d:4e:ef:27:3a:c6:2d:63:64:95:d9:c5:68:fb:c2:e8:66:a7:
         2e:1f:9e:1c:cb:08:b1:32:0a:8e:95:fb:67:9f:0e:e8:48:d9:
         9f:f2:aa:a9:f2:15:eb:96:da:74:bb:81:e9:a3:6b:fe:34:f5:
         48:8e:9b:d6:20:be:23:98:e6:d2:04:4b:b1:9a:24:29:85:74:
         68:04:91:a1:55:1f:1d:6f:ea:6f:ab:0d:d3:72:44:a5:b8:9f:
         99:dd:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:51:40 2025 by rpki-client