Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
File:                     2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json)
Hash identifier:          8QIMgJXNGkHeTRtdBj20fjxDlwPL3nsghfvW/Ilzm08=
Subject key identifier:   08:0B:B8:19:36:09:7D:78:52:FB:FE:A6:0B:FB:E2:6C:B2:95:D5:40
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Certificate issuer:       /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial:       40532B6713F71DE7E6E16ABFF2C92FF4FD0B2EE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
Manifest number:          018E
Signing time:             Fri 31 Jan 2025 02:59:10 +0000
Manifest this update:     Fri 31 Jan 2025 02:54:10 +0000
Manifest next update:     Sat 01 Feb 2025 05:29:10 +0000
Files and hashes:         1: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: 1n3XeFUhVRxXwCSUXBYQnLZuNhF7UJTSYdVmVtHqop0=)
                          2: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: Rp1swjBjMh3FSNXdwqzfjpiHhRk1bK73IhW8dFN5d+E=)
                          3: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: Swuhg7atX9x58p8j2ceXWNOPJAztI7+EHGTeUDcTcFc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:2b:67:13:f7:1d:e7:e6:e1:6a:bf:f2:c9:2f:f4:fd:0b:2e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Validity
            Not Before: Jan 31 02:54:10 2025 GMT
            Not After : Feb  1 05:29:10 2025 GMT
        Subject: CN=080BB81936097D7852FBFEA60BFBE26CB295D540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:a8:3d:c5:e9:c8:4f:9d:b3:90:cb:26:b7:
                    26:1e:ae:00:dc:a5:8a:86:5b:b5:48:5a:58:cf:df:
                    af:bd:ad:73:99:75:49:08:88:1a:27:d4:01:ed:43:
                    e2:29:52:fd:9e:eb:d2:2c:9d:75:35:e1:de:15:a7:
                    ae:ab:6b:18:00:00:c8:dc:2b:70:7e:b3:25:71:1e:
                    91:a8:fc:fd:80:40:9d:76:15:14:15:ee:63:44:7f:
                    25:e2:59:37:50:97:09:02:b3:f8:4b:5e:74:57:25:
                    09:b8:eb:24:a6:63:85:6a:a5:22:d8:fd:22:74:dc:
                    31:27:c4:0b:a0:0b:93:04:64:3c:c7:2f:bd:ff:df:
                    b2:72:65:18:1c:dc:23:14:57:fb:c6:4f:cd:df:58:
                    0f:33:76:24:92:50:a9:62:5c:93:19:f2:fc:43:c7:
                    fd:64:76:f4:85:06:bc:b5:49:b4:bf:fa:24:78:cd:
                    50:d6:fe:59:72:b4:73:38:bd:13:70:78:8a:18:fa:
                    85:ed:3a:ea:d2:9f:f8:3c:6c:11:5f:f4:27:ce:b5:
                    35:ff:44:dd:6d:22:ce:e4:4e:5d:74:37:a2:d2:23:
                    e1:6c:8a:92:a9:40:51:62:0f:38:07:24:86:51:d4:
                    37:bd:ca:fe:38:65:ed:79:a7:51:c1:6f:b6:06:f3:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0B:B8:19:36:09:7D:78:52:FB:FE:A6:0B:FB:E2:6C:B2:95:D5:40
            X509v3 Authority Key Identifier:
                keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:a0:8d:9d:19:e3:e9:d4:9d:84:98:cb:19:d9:3c:8c:4d:
         c9:64:b3:4d:4e:3a:f6:c2:ba:2c:4b:f9:60:75:f1:e6:7d:3a:
         80:48:bf:0f:69:91:a3:c7:67:09:91:b1:c1:0b:44:f0:3d:8a:
         ce:38:62:d0:ef:1a:dd:a9:eb:26:35:2d:20:11:e3:f1:a4:94:
         95:c6:8a:ab:c9:ef:bc:43:cc:13:91:11:bf:23:ca:24:d6:f7:
         23:65:4d:8d:17:2b:b8:c6:f9:9c:c8:0c:91:b9:78:5b:44:80:
         82:6a:49:5a:bc:97:30:c8:bb:1c:e7:1d:e2:27:1c:f4:45:31:
         5e:46:34:b4:c3:87:b9:fa:9f:81:78:ce:63:91:9f:72:db:03:
         55:99:94:73:b5:d1:99:77:c2:03:e6:ed:e2:59:ac:79:d4:99:
         b1:f2:7f:d5:ef:1f:51:16:e9:52:e3:ae:97:ff:58:b4:e4:02:
         f6:3f:ef:8a:3c:d0:4f:44:e7:4d:a3:ba:53:00:5c:8d:74:6a:
         78:f7:5a:f6:01:a5:38:59:07:69:01:e8:85:aa:38:1e:c4:64:
         91:86:de:1d:4f:c8:11:2a:eb:12:7d:28:c6:75:2e:40:8f:9c:
         ff:6e:10:4b:e7:10:92:e4:35:7e:f1:8d:86:8b:73:11:be:1d:
         5f:a5:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:02 2025 by rpki-client