Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
File:                     A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft (raw, json)
Hash identifier:          bbnTLoWXK5u4pDrX6eWk5R1J4DNCapCBCIOpVClgTSs=
Subject key identifier:   1E:C4:9D:E7:2E:93:71:DF:48:A4:91:D4:42:98:6E:C2:1F:BC:D7:5E
Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
Certificate issuer:       /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Certificate serial:       455B56F7B5EBFC5B157D8EFC7512DE1DB72FC59B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
Manifest number:          32
Signing time:             Fri 31 Jan 2025 09:18:41 +0000
Manifest this update:     Fri 31 Jan 2025 09:13:41 +0000
Manifest next update:     Sat 01 Feb 2025 11:59:41 +0000
Files and hashes:         1: 34352e362e37322e302f32322d3234203d3e20323636313236.roa (hash: fqgs2eFmIRLdUTGy5kMf68dcobrxQa4f6/bOtmUuRGc=)
                          2: 323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (hash: b78eH9iE1lP2ssDkb0TNloMMWzmhsxuPlTJnnpjNVZo=)
                          3: A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl (hash: mfb0KlIzbkDdK981diiiVN81+wv5x3mb9nz24yAO4ng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5b:56:f7:b5:eb:fc:5b:15:7d:8e:fc:75:12:de:1d:b7:2f:c5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
        Validity
            Not Before: Jan 31 09:13:41 2025 GMT
            Not After : Feb  1 11:59:41 2025 GMT
        Subject: CN=1EC49DE72E9371DF48A491D442986EC21FBCD75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:42:07:c2:fd:c6:12:65:fd:03:35:39:1a:
                    7b:1d:33:26:15:18:38:51:ab:fe:ea:2a:9c:ce:0c:
                    ed:81:6b:2d:50:b1:d0:d7:85:a3:d6:a2:1c:92:2b:
                    4e:0a:3a:cd:41:81:0d:d1:e3:e4:b4:1a:f9:5b:0f:
                    63:6f:45:ea:24:7e:72:8f:18:6d:23:b8:87:60:65:
                    71:27:ca:3f:29:57:b9:67:e3:03:df:00:30:6c:53:
                    34:4e:fc:e6:cc:87:8a:6f:68:6d:75:53:09:2c:0a:
                    c3:7d:32:0e:87:3b:37:41:0e:b0:a7:56:c2:27:07:
                    39:ec:00:06:84:0b:a3:fd:ae:81:87:f0:ae:70:1b:
                    e4:6e:be:b2:dc:be:bf:86:ef:05:4e:13:3d:7a:33:
                    a4:7a:2a:95:75:28:35:46:f4:ce:22:5f:6d:db:d7:
                    a3:1b:dc:58:60:e0:8f:51:2c:c9:46:8d:06:5e:d8:
                    71:c7:13:d5:49:32:c1:2e:2f:9e:bd:e4:4d:23:f6:
                    62:5a:c5:99:c4:d6:82:5f:4b:7b:6a:e8:ba:58:1e:
                    e8:a8:30:08:4b:95:58:62:ec:66:9a:fc:51:17:b8:
                    93:78:63:ac:92:71:cc:c6:27:af:09:e4:62:07:48:
                    91:b4:9b:72:84:82:18:16:50:5e:de:e6:ce:28:3b:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C4:9D:E7:2E:93:71:DF:48:A4:91:D4:42:98:6E:C2:1F:BC:D7:5E
            X509v3 Authority Key Identifier:
                keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:31:6c:c8:68:3b:5d:d3:41:19:91:41:34:3a:8c:71:c0:f3:
         f6:20:61:3e:73:66:4c:f0:59:b9:8b:32:17:9f:fe:92:ef:1d:
         d2:48:a4:c7:00:79:3f:ab:fa:27:61:08:43:3b:85:59:1d:ab:
         79:bf:55:e6:70:9e:de:33:a6:c2:a5:09:e5:b4:62:3b:3d:a5:
         ca:5b:49:46:07:85:f7:a5:82:f6:ce:07:76:32:b8:44:63:2f:
         26:e9:9b:c9:ca:d1:df:28:b2:67:af:ea:0f:15:84:04:0f:1a:
         a9:6e:08:f7:d7:e7:88:a6:c9:0d:52:0c:9b:e0:a6:96:06:a7:
         fb:9a:df:2e:2d:b5:d7:2f:25:8c:04:79:cd:cf:ca:fa:3c:f7:
         ec:e1:20:1d:4f:c1:83:85:30:58:64:27:d9:5d:8b:96:35:41:
         7d:1a:18:02:73:09:54:34:3c:c1:b3:eb:57:fc:d4:8b:60:4f:
         c6:e6:db:b3:13:3d:64:c1:5d:9c:5a:ff:0d:40:cf:a4:b2:22:
         db:f9:f1:fc:1e:c4:2b:60:c6:6c:ae:8a:ed:b2:a0:10:11:4e:
         80:4e:9a:35:6a:2e:ee:f4:26:96:72:7a:3f:b9:84:13:84:f9:
         dd:9e:1e:93:a4:be:86:3f:ea:f0:f7:ee:9c:db:31:8c:8f:02:
         c5:69:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:30 2025 by rpki-client