Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
File:                     21619A6DD05DB15FE1B213C8C5C580B755346175.mft (raw, json)
Hash identifier:          xbegYvgegP/QDRckFweBlyAQnmqR0rqkMn2u7RlZAKQ=
Subject key identifier:   18:39:DE:86:5D:B0:C9:D8:8D:71:56:2C:D8:35:45:48:E0:E0:F1:C5
Authority key identifier: 21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
Certificate issuer:       /CN=21619A6DD05DB15FE1B213C8C5C580B755346175
Certificate serial:       3F302D2C4948E2BBDA90EF08CE9BBAB16D21B844
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 07:08:10 +0000
Manifest this update:     Fri 31 Jan 2025 07:03:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:29:10 +0000
Files and hashes:         1: 21619A6DD05DB15FE1B213C8C5C580B755346175.crl (hash: Tk17tc0sl82j3XooN//2iQA8NJtvd14p/gkMq2aaDuU=)
                          2: 3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa (hash: Z8KkPUpEd1MmbGIBznFG3N++jmghdw7xW5Vtu7tsOsE=)
                          3: 323830343a3964343a3a2f33322d313238203d3e20323632393936.roa (hash: qIZC+ZAgEN29i86/iMFoPE122oXxN9cLjfL/t3nZSSo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:2d:2c:49:48:e2:bb:da:90:ef:08:ce:9b:ba:b1:6d:21:b8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21619A6DD05DB15FE1B213C8C5C580B755346175
        Validity
            Not Before: Jan 31 07:03:10 2025 GMT
            Not After : Feb  1 10:29:10 2025 GMT
        Subject: CN=1839DE865DB0C9D88D71562CD8354548E0E0F1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:82:e8:fb:3c:73:69:49:ee:36:b9:84:be:
                    1b:d4:99:c0:60:30:bf:9f:86:95:2b:9e:fc:28:f4:
                    80:31:04:65:a6:22:3d:94:53:16:97:66:c7:cc:ef:
                    7a:3d:40:4e:df:1b:d1:4b:ec:1f:5a:90:ed:5f:3e:
                    dd:34:12:db:57:1d:1c:d8:f2:d1:c8:fe:6e:b7:96:
                    4a:71:1b:92:26:49:c2:91:40:82:a7:30:bf:bf:90:
                    68:2c:e9:cf:4e:a1:63:16:9a:5e:2e:0d:c0:63:81:
                    c0:e4:5e:26:f3:aa:0f:13:0b:c7:25:6b:23:48:73:
                    57:41:18:43:09:08:37:26:c3:05:ad:61:ae:3a:d8:
                    d7:9a:fd:39:ee:74:f5:bd:e2:5a:fa:5f:b8:22:a7:
                    66:76:fe:97:cc:84:76:a2:5c:61:79:7a:ad:47:df:
                    5a:e1:96:ae:dd:8f:7d:66:bd:a5:a4:69:75:e4:69:
                    19:3e:d0:d8:ea:27:7e:b8:08:7f:0c:65:8e:a6:0a:
                    d6:f2:d4:f9:22:ba:58:39:19:a8:61:60:d7:88:ce:
                    fc:f4:45:ec:d1:2f:ca:b5:8f:49:da:66:5c:49:7f:
                    1e:e3:5b:9e:e5:48:dd:2f:e6:b3:51:54:cf:b0:b7:
                    e8:bd:d0:12:f4:eb:d4:0a:20:f2:dc:a3:69:94:d6:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:39:DE:86:5D:B0:C9:D8:8D:71:56:2C:D8:35:45:48:E0:E0:F1:C5
            X509v3 Authority Key Identifier:
                keyid:21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d9:9d:28:ea:0e:2c:ab:fc:b9:2a:d4:07:e9:c2:6f:6f:90:
         a3:c4:29:25:37:ee:82:43:fe:e5:fd:9a:d5:bb:74:87:b6:50:
         ee:96:c2:38:ba:8c:6d:e0:2d:66:67:da:9c:87:c0:68:40:40:
         e1:65:c2:ba:93:7f:a7:2e:d7:18:5f:77:9f:65:ee:6b:25:8c:
         f0:fa:10:1a:d1:92:f9:d7:88:b7:bc:59:d0:f1:f4:67:e2:16:
         2e:7d:bf:ac:d8:e9:fb:e0:5f:de:bf:48:d5:72:bd:b3:16:17:
         0d:d9:f1:d7:fd:00:0f:96:a2:de:a4:5b:82:91:7b:47:da:f7:
         db:a2:70:e6:04:cc:8e:e4:bb:cf:43:3f:fc:0b:dd:19:a9:d9:
         c8:99:47:fe:15:53:d9:84:e2:84:bf:b9:4e:5a:e7:88:03:82:
         70:e2:c9:28:45:34:8f:80:41:7d:26:8d:79:9a:72:f4:87:50:
         e2:5c:45:5a:03:75:17:56:d8:ab:30:a4:de:d3:b2:04:96:c7:
         63:f7:0f:00:2f:83:50:d1:f5:19:7d:40:c8:f3:19:06:e1:99:
         84:53:38:ec:03:57:1f:87:a9:20:46:8e:2b:18:89:91:67:8e:
         42:b8:97:a0:17:b1:58:fe:9d:e6:87:bb:12:77:c9:45:d9:fc:
         55:d0:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:44 2025 by rpki-client