Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
File:                     D495C627858363377EC2F78374A56D2330185EC0.mft (raw, json)
Hash identifier:          0jrlcCUNgMTwyyCJl70np0bZC1bxH2RE/cu/Wt3+Twg=
Subject key identifier:   EC:F2:47:A8:54:39:24:DA:02:B5:5F:8A:4F:A7:D4:C3:98:87:77:0F
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       38747BA0F55F382B592CF4B6B036F77FD5DFB85D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 03:09:29 +0000
Manifest this update:     Fri 31 Jan 2025 03:04:29 +0000
Manifest next update:     Sat 01 Feb 2025 04:24:29 +0000
Files and hashes:         1: 34352e3139312e3230342e302f32322d3234203d3e20323033.roa (hash: O4Gq5FvegfduSDm57Q2f5VxR9Pk09lqnrGJ5ClU3G+M=)
                          2: 34352e3139312e3230342e302f32322d3234203d3e2033333536.roa (hash: pF1UD0ohRrUrA/uoF1MvhgOp3OOokkhl3tDCRmc9boU=)
                          3: D495C627858363377EC2F78374A56D2330185EC0.crl (hash: Kgk0DAgI87O6wJxhGLFVOzplhwzuzOAyGO5VjewAMmk=)
                          4: 34352e3139312e3230342e302f32322d3234203d3e20323032.roa (hash: dmChxSPeq0RZCKndH6z9ALcY3I6SKPJrJ6VEoJz4Zao=)
                          5: 34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa (hash: g3gHjnyNPy+fcdPkBGHvbzuhq6eeutkKC7ncHuaZyHA=)
                          6: 34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa (hash: 4mVjWqaaT4/GqCZNJ7t40C4M4BgIh8QZBcQEuHa3O9M=)
                          7: 323830343a363835303a3a2f33322d3438203d3e20323639363834.roa (hash: 8reTZJCJoxR/68mo+O6JIRstN6RVpKSozX9ZpRx+CKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:74:7b:a0:f5:5f:38:2b:59:2c:f4:b6:b0:36:f7:7f:d5:df:b8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: Jan 31 03:04:29 2025 GMT
            Not After : Feb  1 04:24:29 2025 GMT
        Subject: CN=ECF247A8543924DA02B55F8A4FA7D4C39887770F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:df:69:3d:c9:33:b1:93:58:ae:62:7a:e7:
                    5b:08:f0:42:07:a0:0c:d6:f9:e8:a6:7e:cc:c1:10:
                    49:53:80:17:f7:a1:e6:13:b2:9c:18:15:24:68:61:
                    83:db:6c:ca:ef:fa:ee:c4:35:ce:50:59:b4:35:92:
                    3b:68:9f:92:31:1a:1e:12:5c:6e:66:da:2e:7f:7a:
                    39:e7:b2:ae:36:fe:eb:52:a1:4a:ec:21:1f:1f:5f:
                    21:01:3a:58:29:59:76:72:7f:2a:75:9a:b2:8c:58:
                    8d:56:fa:50:1c:99:6b:7a:c9:d8:a8:9f:6a:ec:c6:
                    1a:03:f3:24:a8:f0:b1:cf:92:e1:cc:2a:c0:98:c6:
                    04:86:d2:14:02:dc:8f:a3:d0:4b:3a:e9:2b:a1:08:
                    51:a9:54:e7:8c:2f:34:17:5d:79:12:03:4b:68:ce:
                    83:f2:d4:49:74:2f:80:85:e2:5a:32:97:f1:55:ef:
                    01:6f:2b:e2:6b:ab:5b:58:7e:36:e0:4e:f7:51:db:
                    d6:bf:28:9b:6c:35:8e:3d:e2:74:29:ca:21:6e:f7:
                    f3:dd:b8:80:52:52:99:6c:1d:1d:1d:08:d8:df:ff:
                    0e:c8:2f:d6:93:d2:9b:85:44:a8:58:05:2e:1f:0a:
                    4c:a5:11:af:0f:3d:7e:9d:7d:90:d3:9d:66:63:aa:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F2:47:A8:54:39:24:DA:02:B5:5F:8A:4F:A7:D4:C3:98:87:77:0F
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:74:c3:b7:5c:ee:49:9d:3e:37:e7:ee:27:53:5b:c9:9b:50:
         74:b1:36:f8:d5:de:ce:ad:56:40:a1:ab:62:f0:79:14:b4:03:
         20:98:e4:0a:a5:c9:93:f5:c2:2b:f3:9a:6a:3f:0e:7a:c4:12:
         c8:dc:17:12:82:cd:71:ee:6e:33:50:73:b0:8e:82:89:ce:a5:
         aa:6e:f6:5a:88:78:39:11:9d:97:83:b5:d7:04:8e:bc:82:c7:
         8b:14:63:fa:63:fe:57:af:0a:a8:4b:db:98:d5:7e:f5:dd:b1:
         3e:c9:27:00:e3:77:80:1c:99:0e:d8:36:c7:a3:51:55:3f:d0:
         dd:9b:71:c3:80:52:be:24:53:a1:8a:89:04:1b:fa:f3:54:66:
         9f:e4:fc:93:5e:62:38:ba:41:4d:a7:97:ca:e0:0d:db:c9:41:
         65:d3:63:08:dd:89:49:48:42:38:e1:5f:0d:31:83:ec:73:d5:
         f8:84:04:99:da:17:b4:b4:c8:f9:b3:cd:0b:f4:d2:e9:96:e8:
         78:01:fc:af:06:44:18:83:f0:91:67:43:16:4d:2c:d3:d3:28:
         21:6a:4f:79:db:29:19:fc:93:99:f0:03:60:9a:3c:ac:13:2a:
         2c:cc:d4:fd:66:c6:01:44:e2:d7:c6:ba:e7:16:24:c8:4f:6a:
         17:08:20:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:26:57 2025 by rpki-client