Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft
File:                     211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft (raw, json)
Hash identifier:          Y/1ejw6lccGkQZP+BEcTUB98Q21Eifd3ljOqceWDdNc=
Subject key identifier:   29:4A:89:88:BC:13:CF:2C:CC:6B:91:7A:F1:8E:52:50:04:72:F4:F7
Authority key identifier: 21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8
Certificate issuer:       /CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
Certificate serial:       1219483B7B6E249F72FD84EB54F3FC4B359217F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft
Manifest number:          46
Signing time:             Fri 31 Jan 2025 09:30:46 +0000
Manifest this update:     Fri 31 Jan 2025 09:25:46 +0000
Manifest next update:     Sat 01 Feb 2025 11:41:46 +0000
Files and hashes:         1: 323830343a353562383a3a2f33322d313238203d3e20323637393532.roa (hash: /73K3hTxHSTHeFeJurKGp4NJmSxvPNjOmRCDWd4mo9s=)
                          2: 211BF480C17107F7AE6882CC3FE220E37AFE75F8.crl (hash: ELYFc9CgF+RlJvu37A7/XM9KkApDlVqLVYL5IB2lF/Q=)
                          3: 34352e3136362e34382e302f32322d3332203d3e20323637393532.roa (hash: e2suDiJaEpXBSlrJ1/EXQi7hg5S1UF3n3Et8JCDE39Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:19:48:3b:7b:6e:24:9f:72:fd:84:eb:54:f3:fc:4b:35:92:17:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
        Validity
            Not Before: Jan 31 09:25:46 2025 GMT
            Not After : Feb  1 11:41:46 2025 GMT
        Subject: CN=294A8988BC13CF2CCC6B917AF18E52500472F4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:f4:b6:8d:bd:18:81:62:b3:2d:9c:6b:f8:
                    05:82:0c:ce:b0:24:45:f6:12:af:53:3f:f2:99:ff:
                    ea:bc:a8:65:0c:c4:c2:76:79:6d:18:40:e3:0f:f6:
                    64:fb:f2:eb:4c:bd:33:c3:75:eb:ac:45:fb:87:7b:
                    db:21:1a:a5:b8:72:0f:9d:f2:2d:ca:fb:66:2e:76:
                    3a:35:96:b1:c6:1a:6c:87:bf:94:41:64:29:c9:96:
                    10:e1:1a:eb:62:91:37:fb:94:ca:d1:a9:e8:59:24:
                    e1:f5:63:c9:29:d0:4d:37:7b:b6:8a:95:36:52:6d:
                    4a:14:1a:c6:1b:23:56:c3:d6:e0:e6:8c:4f:28:39:
                    5e:c0:6a:53:78:48:61:98:30:15:8b:39:78:e8:07:
                    1a:e4:71:42:97:dd:81:6b:4b:9e:a2:03:74:b9:63:
                    3b:c1:4a:5a:f7:7a:8a:7c:f4:d0:50:8d:c9:d2:64:
                    07:81:b8:51:0e:ee:3a:75:0a:a7:b9:9f:15:f3:33:
                    b0:df:d5:aa:9f:08:ed:d0:ac:54:10:ea:c2:9d:54:
                    a5:e6:cc:cd:dd:8c:42:56:6f:b8:e1:cf:7d:fa:78:
                    dc:56:9f:df:9d:a5:63:80:73:a8:0f:a6:2d:0f:37:
                    e3:33:87:ab:64:37:4f:48:94:39:ef:4f:88:fe:d8:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:89:88:BC:13:CF:2C:CC:6B:91:7A:F1:8E:52:50:04:72:F4:F7
            X509v3 Authority Key Identifier:
                keyid:21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:13:72:cc:2c:90:68:33:7a:30:bf:2a:a6:4f:1d:d8:86:7e:
         4c:64:4f:ed:ec:be:46:d9:d1:e0:4e:c6:34:97:36:70:24:7a:
         d5:78:cb:98:b4:2a:49:7b:1d:22:57:e8:88:66:e0:3f:c3:b7:
         4e:d7:3f:1f:73:1e:19:c8:a4:df:52:af:51:0e:66:6e:aa:9b:
         d5:e2:62:24:67:07:c8:ca:8f:8e:59:86:1d:de:45:4e:ee:54:
         4f:5e:14:9c:53:82:03:d0:fa:7c:76:07:9e:b2:5f:b8:94:b5:
         63:17:89:08:3a:cc:58:27:7d:c9:ed:6f:f9:e8:1c:33:61:2f:
         91:a9:aa:ad:8a:d5:89:b9:a6:28:17:9b:01:43:68:9c:b6:c2:
         d5:b5:62:67:ff:d1:1e:ae:3f:45:17:11:92:d6:88:3f:07:61:
         5c:23:ea:8e:a0:87:b9:c7:8c:54:10:6a:b0:1c:1a:ed:16:ab:
         79:62:b1:d4:79:21:89:ff:5a:4e:a1:57:28:23:c2:bd:8d:e6:
         6d:82:3a:c8:db:9a:36:2b:eb:3c:20:0a:fc:1a:46:51:bb:9b:
         07:96:27:54:49:fd:d4:4a:0f:19:76:49:5e:77:52:9e:0e:e0:
         5b:2d:27:43:fc:dd:05:57:74:d5:e3:5f:73:c9:59:a9:38:38:
         ed:82:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:48 2025 by rpki-client