Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.mft
File:                     9BE05977B60E4F720D421198D070234D3CC75446.mft (raw, json)
Hash identifier:          qFDCZrsjoN9IZKX5FozAL/PaQ13HcUV6xMY8Q1z1Uh4=
Subject key identifier:   F4:04:42:B3:D5:7D:4A:0F:78:34:94:2A:A6:DB:58:2B:F4:5B:49:F3
Authority key identifier: 9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46
Certificate issuer:       /CN=9BE05977B60E4F720D421198D070234D3CC75446
Certificate serial:       67F0056B472E2BE8F43B8DB4FD37A4D345BA0212
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.mft
Manifest number:          37
Signing time:             Fri 31 Jan 2025 15:59:11 +0000
Manifest this update:     Fri 31 Jan 2025 15:54:11 +0000
Manifest next update:     Sat 01 Feb 2025 18:41:11 +0000
Files and hashes:         1: 9BE05977B60E4F720D421198D070234D3CC75446.crl (hash: uckVD6selTSKBt6MQan3eD3Xm+57V7hJO6VTDu7vS0c=)
                          2: 323830343a336534303a3a2f33322d3438203d3e20323636353833.roa (hash: WgUSLZBDGT1AvD3FOPEOWwDCXbHhukVuusjVznQTtdA=)
                          3: 34352e372e3130302e302f32322d3234203d3e20323636353833.roa (hash: 5AYnkvmjcDyAPzw3DqQAb+a8XBraOCw+w8ZlncQU4Xw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f0:05:6b:47:2e:2b:e8:f4:3b:8d:b4:fd:37:a4:d3:45:ba:02:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE05977B60E4F720D421198D070234D3CC75446
        Validity
            Not Before: Jan 31 15:54:11 2025 GMT
            Not After : Feb  1 18:41:11 2025 GMT
        Subject: CN=F40442B3D57D4A0F7834942AA6DB582BF45B49F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:be:12:eb:98:72:0c:58:4c:c2:be:9f:d4:
                    48:6e:a4:dc:19:87:f9:75:8b:bd:40:35:41:67:38:
                    37:2e:33:db:84:8b:97:66:83:dd:44:0d:de:54:e9:
                    19:ba:26:e7:ed:4a:59:11:90:1d:30:df:ec:60:47:
                    e5:b8:09:5d:31:b7:e3:32:1b:c7:b6:2f:5c:c4:51:
                    7f:3d:cf:52:82:0c:29:05:64:61:35:e6:fa:0e:d7:
                    76:0a:18:e9:ef:1f:87:71:d9:9e:ff:da:c3:03:c9:
                    bd:21:f3:3b:98:ae:bd:8f:f7:5a:52:a9:bb:78:a2:
                    e6:cc:42:0c:f1:90:a2:5a:7b:8f:26:49:96:9d:f8:
                    00:9c:41:7b:b4:a7:8e:e4:57:cb:6f:84:f9:97:dd:
                    27:53:45:3c:3e:19:a6:49:0b:64:6b:69:9d:85:aa:
                    81:49:4c:ef:bb:6a:02:f1:a9:c9:d8:6f:7f:1e:dd:
                    2d:75:84:c4:0a:7b:05:62:3b:7c:94:7d:89:b8:d7:
                    a9:f5:df:78:bf:26:36:04:43:53:1b:ab:0f:df:56:
                    c3:13:fd:17:db:e2:4e:cb:23:8e:21:f4:7f:d5:ed:
                    bd:5c:e3:e9:3f:97:7c:d2:da:4e:16:cb:bd:b6:ab:
                    fc:3c:3c:8e:52:27:67:68:71:21:f1:8f:84:f1:8d:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:04:42:B3:D5:7D:4A:0F:78:34:94:2A:A6:DB:58:2B:F4:5B:49:F3
            X509v3 Authority Key Identifier:
                keyid:9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:14:91:7c:54:98:6b:e4:92:2c:1b:a7:7f:11:a7:df:fc:2e:
         e0:66:bc:f3:d2:ed:7a:9e:18:ae:be:78:0f:1c:17:95:e4:72:
         8c:63:95:56:87:7b:6f:ef:8c:af:d1:76:c5:d8:00:b9:f1:53:
         41:82:05:48:6a:c2:67:8a:8f:00:8c:de:1e:3e:48:6b:90:89:
         09:67:33:c0:75:e9:61:42:40:7e:c1:85:30:ca:40:12:c5:f0:
         03:05:26:dd:24:08:c0:53:b1:23:8b:52:c3:b9:2e:e6:e3:ed:
         de:61:f0:28:0d:a5:18:66:03:2e:d1:20:ab:d4:ad:f2:06:cf:
         80:4f:8b:5c:e8:3d:22:81:64:47:9c:3c:92:6c:d0:fd:ae:e5:
         b9:f8:83:f2:0d:0f:06:70:56:cf:71:f9:ac:86:db:8f:df:6f:
         83:24:c1:fe:7f:83:9b:82:cc:45:2f:69:8a:f8:6f:15:c9:70:
         1b:62:6b:4c:ea:ba:f4:9e:02:3e:3f:e4:95:f5:d4:d8:d2:af:
         86:91:db:dd:74:f2:67:8f:ca:bb:51:5d:8a:7e:c8:eb:78:d5:
         bc:75:1d:c4:45:22:e6:32:18:a4:8c:98:d0:f1:2e:7f:ec:d3:
         a0:2f:1e:fb:de:1b:6f:15:0e:14:17:8f:5f:1e:28:20:ac:6f:
         91:b5:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:30 2025 by rpki-client