Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.mft
File:                     C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.mft (raw, json)
Hash identifier:          lipX62AiSx4xMix0WnocdQtgfPyGI3UE5IdE5abSr+A=
Subject key identifier:   DD:B6:42:34:00:7A:F4:0A:37:C0:57:1B:59:F5:9A:5B:7E:AC:9C:A1
Authority key identifier: C7:E3:32:D1:67:CC:9D:7A:81:FF:5F:5A:71:43:D4:6B:80:BD:14:8F
Certificate issuer:       /CN=C7E332D167CC9D7A81FF5F5A7143D46B80BD148F
Certificate serial:       66FADC49AA074E764AA0C524FCF7A6103FDD214C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.mft
Manifest number:          0111
Signing time:             Fri 31 Jan 2025 06:33:15 +0000
Manifest this update:     Fri 31 Jan 2025 06:28:15 +0000
Manifest next update:     Sat 01 Feb 2025 09:56:15 +0000
Files and hashes:         1: 34352e3232382e3139362e302f32322d3332203d3e20323637313137.roa (hash: RC7kkGsqUjsmn2CV4UAYS9JxDeIO12CvfCkCjnbXjZs=)
                          2: C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.crl (hash: WX+ObXzXn2yksjiagOB8jnthyL514v56Cjn9TcdOuEs=)
                          3: 323830343a343836303a3a2f33322d313238203d3e20323637313137.roa (hash: jBwppRfbIb1JBfdLTnBvRmWtfXBaLB1lO4u7i08qBvk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fa:dc:49:aa:07:4e:76:4a:a0:c5:24:fc:f7:a6:10:3f:dd:21:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7E332D167CC9D7A81FF5F5A7143D46B80BD148F
        Validity
            Not Before: Jan 31 06:28:15 2025 GMT
            Not After : Feb  1 09:56:15 2025 GMT
        Subject: CN=DDB64234007AF40A37C0571B59F59A5B7EAC9CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:b2:2f:66:37:2d:2d:20:57:53:0b:7e:10:
                    ac:76:75:df:21:7a:ae:cd:8e:d6:31:7b:0a:1f:24:
                    75:55:02:67:a0:07:e9:53:ba:9a:38:07:bc:9c:c0:
                    6e:e1:3f:94:03:a4:34:2b:89:5f:ff:e1:fe:9c:80:
                    48:d1:4d:0e:63:4b:96:cc:12:47:4c:fd:af:30:cd:
                    ec:68:bd:b6:8e:23:18:26:fb:54:4d:a8:7a:65:3e:
                    ba:93:e6:9c:ae:0f:96:bb:1e:dd:a0:be:59:04:cd:
                    dc:2c:82:a9:0c:7c:32:31:c8:7c:0f:0e:df:ce:cc:
                    22:8d:21:bc:29:87:5d:31:72:1f:3b:46:cb:99:76:
                    ba:a3:64:a5:98:4d:44:d4:4a:de:a2:40:47:4c:04:
                    2b:11:a6:12:92:fa:e0:b3:60:5f:7d:d6:85:a2:0e:
                    4b:f2:69:2e:07:8b:23:3d:4c:ed:51:47:5d:28:68:
                    90:c7:fa:e8:02:44:b3:75:46:fd:77:fa:e0:70:5b:
                    77:58:1a:e5:e5:10:f7:76:df:62:13:ff:a3:2d:2a:
                    93:87:ad:03:b4:49:1d:a9:33:6c:77:bc:e6:b1:e5:
                    c1:e1:bd:5a:d7:0c:b2:3c:c1:b4:be:b7:53:09:a1:
                    ee:98:d1:07:fb:cf:1d:43:33:c7:12:9d:d3:02:b0:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B6:42:34:00:7A:F4:0A:37:C0:57:1B:59:F5:9A:5B:7E:AC:9C:A1
            X509v3 Authority Key Identifier:
                keyid:C7:E3:32:D1:67:CC:9D:7A:81:FF:5F:5A:71:43:D4:6B:80:BD:14:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRHwtzbSi2K4paUBdnopgi7iuKpdZcNHLfRqfbDtDaBZ/0/C7E332D167CC9D7A81FF5F5A7143D46B80BD148F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3a:95:b4:63:7c:f0:a9:36:86:87:57:0a:3d:84:6f:46:2e:
         b2:a1:56:29:e2:d7:1a:ec:66:7a:bc:43:60:e3:b1:c3:6c:1e:
         07:85:34:37:5f:06:dd:af:c5:9f:68:8e:24:1e:29:ca:aa:5f:
         7a:ec:94:b3:2f:61:e6:26:c6:69:20:40:d4:d5:1d:3c:e7:ba:
         7f:b0:7b:98:bd:0c:15:9b:64:21:02:a4:b3:14:48:e1:cc:a3:
         bb:0a:cf:73:14:ea:85:16:82:32:29:6a:fb:41:00:a2:35:19:
         cb:a7:04:55:33:70:93:3d:fb:6c:bc:4b:4b:3e:a5:db:0e:a8:
         60:67:44:bd:97:c3:9c:58:8b:3e:45:c9:48:f9:8f:59:c2:74:
         59:31:2b:46:a6:f7:75:ca:29:31:34:16:f6:0d:c2:e3:a6:68:
         b1:3d:90:96:f4:ef:cf:06:9e:cf:fc:88:a2:95:31:62:4e:4c:
         49:8e:9f:af:24:65:40:2f:56:aa:e2:9b:2d:8b:17:f8:84:a6:
         1e:38:0f:ad:9e:35:3a:24:e3:83:29:93:1e:3f:89:92:ad:34:
         09:7d:43:4a:95:44:1a:cb:c8:8f:ce:fe:b0:6e:a7:1a:78:4b:
         70:68:ad:a4:39:2f:7e:fd:a0:e0:b7:97:ac:cb:b8:d8:f2:ea:
         d1:d1:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----