Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          a1pia3sxgPVY9NEXqWEWlaHPVU+KNRiotdwW4qWmOE4=
Subject key identifier:   5E:7B:DD:AD:8C:9F:56:2E:F8:BE:8C:DD:DC:C5:F8:C7:F4:2B:21:2C
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       7AC1466D05C4CDAE8E6514CABB8BD15A9FC07149
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 14:00:02 +0000
Manifest this update:     Fri 31 Jan 2025 13:55:02 +0000
Manifest next update:     Sat 01 Feb 2025 16:15:02 +0000
Files and hashes:         1: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: 7sxcGkvauLeHZBHCaC8qW6Pztwa3QFVH7Rc+I4PW3/c=)
                          2: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: VpdcX5K/PgtOLgBv06n7D60IeLP2Cqz5thyEgjmgUeI=)
                          3: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: ogpxHo4GOKaP5t/wCds+NGruPlRv+YUrlCKmof7iAf8=)
                          4: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lV6dpYBF+UGIN0Zj7J9E69TkJzqBygSmd2nGIuF+xF0=)
                          5: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: D/KFo0Tmo4o2j6Ty6F9nmPDZGIWfU74MszSeTXVyYbI=)
                          6: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: uSLk4kLQjPWgYMdwBbjEeQA41Wa/ufWutjiTthkObTQ=)
                          7: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: x8/4qYtYhu4oTvhf+s0EgVdC8YbHA3C556/kgYOP660=)
                          8: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: IaO+M/0dGe0MHsmL3brZYR6BQsQKpxk4pS5D8hXmYNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c1:46:6d:05:c4:cd:ae:8e:65:14:ca:bb:8b:d1:5a:9f:c0:71:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Jan 31 13:55:02 2025 GMT
            Not After : Feb  1 16:15:02 2025 GMT
        Subject: CN=5E7BDDAD8C9F562EF8BE8CDDDCC5F8C7F42B212C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:6e:16:c2:5d:ba:bc:e8:96:b7:77:65:91:
                    a2:3f:7e:33:56:91:e4:b4:9c:dc:17:e5:86:cd:b9:
                    07:cd:c7:e2:99:b8:d2:60:ff:a6:a8:05:d4:e9:00:
                    2d:07:ed:3e:cf:80:ce:09:ee:54:ce:60:62:0d:29:
                    d3:67:5a:f7:ef:18:12:b5:50:ff:35:d0:9e:33:d3:
                    67:a6:3a:f0:fa:f2:9c:84:65:f4:8c:1b:02:1f:bf:
                    f3:b2:35:9b:34:03:ac:ea:63:cb:e9:5e:0c:b1:76:
                    bf:29:b4:53:00:07:9f:e0:da:f6:c4:7c:9e:f1:66:
                    82:71:ad:6a:8d:26:1f:8c:59:24:04:b9:cb:81:ce:
                    97:4d:4a:ca:36:b2:aa:6b:7a:47:69:a8:e9:a1:b5:
                    67:b5:a9:94:7f:eb:51:00:2b:59:e0:3c:78:9f:69:
                    8a:32:0d:77:3b:ab:d5:72:3e:e2:63:14:d1:bc:a7:
                    42:11:bf:cc:ad:41:ba:fd:64:70:f1:55:7f:29:49:
                    5e:da:af:01:dc:f5:10:78:62:97:6d:20:cb:30:1f:
                    6f:39:94:10:c6:da:4a:f6:fe:23:19:b7:8e:76:12:
                    72:c8:cc:4f:43:2f:a1:a1:90:e5:6d:48:6f:1f:35:
                    88:f9:fa:44:eb:81:ba:f7:29:8f:aa:26:22:ce:ab:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7B:DD:AD:8C:9F:56:2E:F8:BE:8C:DD:DC:C5:F8:C7:F4:2B:21:2C
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b7:83:4a:ca:05:e9:9c:48:c8:47:46:fb:16:da:02:7e:b7:
         a1:9d:55:fc:55:be:d4:58:03:ae:66:12:db:71:f4:2e:e6:0f:
         c6:8b:be:4f:6d:e4:6b:09:ab:33:95:96:da:c6:6f:8d:4d:3b:
         7d:79:1a:4e:1c:36:a7:1c:68:11:05:be:55:2a:d1:c2:75:e5:
         18:d9:97:8f:14:a6:c5:f5:c2:ab:c1:48:f3:02:2b:3b:88:b2:
         4d:80:99:38:90:f2:12:66:f4:2e:77:ca:82:7f:f1:2d:2c:92:
         80:9c:73:21:d4:da:c2:3a:e0:ae:22:4b:1f:29:a4:cf:80:7e:
         31:a8:f0:fe:0f:50:da:ef:6d:75:30:dc:ae:6d:26:7d:36:bb:
         73:76:13:91:0a:d1:6d:7b:cb:f5:70:98:fa:4b:48:ba:16:43:
         02:78:ba:74:ea:78:b9:55:70:c2:d0:1d:f2:8c:7e:f5:eb:8c:
         d7:78:81:2b:ec:61:90:d2:b7:e4:23:30:71:f4:da:b5:65:06:
         2b:89:f3:b6:64:62:63:04:65:0c:d9:b0:43:c2:de:d7:43:43:
         37:d0:61:f6:08:28:7f:d1:ba:8b:c4:fe:18:71:f2:14:e0:29:
         0d:8c:27:f0:c9:82:b9:ef:74:4c:05:35:37:77:df:9b:72:2d:
         20:02:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:59:32 2025 by rpki-client