Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
File:                     4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json)
Hash identifier:          IaJkpSb8JoLhwhV4DWMpKHfpytNnkmseEbSLhdvZZUM=
Subject key identifier:   C1:E5:B1:2E:FF:ED:E6:01:47:5C:E1:AC:95:8B:80:DC:E5:7F:93:DB
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Certificate issuer:       /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial:       4DF17C9E07C20BD104D768A3EC5CC8901073BF3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
Manifest number:          015A
Signing time:             Fri 31 Jan 2025 13:26:29 +0000
Manifest this update:     Fri 31 Jan 2025 13:21:29 +0000
Manifest next update:     Sat 01 Feb 2025 14:45:29 +0000
Files and hashes:         1: 323830343a313165303a3a2f33322d3335203d3e20323633343435.roa (hash: GNeDmm0qcfygBaxMiayV6uq32HK4LVVzSQf3o/etWU0=)
                          2: 3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa (hash: D4LFZh5TEkJX8WwbEQ6sdmD+bJCKQadVtkf7Gb95RLo=)
                          3: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: 5gowfvzHY2yE+kuTjcwJOUHBf/Iuu6TGK83yTz7B4kQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:7c:9e:07:c2:0b:d1:04:d7:68:a3:ec:5c:c8:90:10:73:bf:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
        Validity
            Not Before: Jan 31 13:21:29 2025 GMT
            Not After : Feb  1 14:45:29 2025 GMT
        Subject: CN=C1E5B12EFFEDE601475CE1AC958B80DCE57F93DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:7d:10:a9:36:d5:a5:8b:57:6e:81:da:2e:
                    a2:bf:cd:cb:fe:ac:2b:0f:ec:36:37:47:6e:ce:1f:
                    50:ea:59:ad:e2:79:2f:05:0f:6e:33:80:3d:0a:c8:
                    4d:7f:c9:c5:67:05:20:e7:89:31:bf:1f:25:b4:07:
                    95:c7:90:cd:b1:6a:c2:ad:27:0b:37:3b:d2:b3:b1:
                    62:63:d7:1a:9e:61:5e:88:d9:27:99:2c:51:2d:21:
                    da:a9:ae:55:aa:bf:b4:0f:d2:df:af:96:c7:02:cf:
                    40:e8:e8:d3:96:8b:60:ae:86:f6:eb:a6:ec:3f:5f:
                    70:1a:40:56:c3:71:93:7d:fe:9d:88:52:a0:4b:81:
                    10:73:ca:aa:9a:f0:f9:ac:f8:7b:2b:61:3c:3a:de:
                    9a:a0:a6:04:56:e1:8b:22:0c:3b:00:b8:57:78:b2:
                    6e:d5:dc:5e:a8:9b:b4:0c:61:9c:e0:fd:41:cb:75:
                    24:36:10:d6:a7:4e:aa:0d:28:f5:42:e4:40:85:cf:
                    6f:f7:2e:b3:a6:de:88:0d:f9:3b:a1:85:95:02:17:
                    6d:32:ba:5c:8d:6e:13:f0:02:48:01:a3:51:75:ab:
                    bf:08:48:47:4f:1a:2d:37:ed:3c:25:26:6f:05:a1:
                    52:40:56:f9:7a:6c:f0:d3:44:22:5f:f1:12:97:26:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:B1:2E:FF:ED:E6:01:47:5C:E1:AC:95:8B:80:DC:E5:7F:93:DB
            X509v3 Authority Key Identifier:
                keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:13:02:48:38:d7:89:79:59:e3:4a:69:5f:69:fe:e6:6e:f5:
         6c:a7:02:a3:7f:48:de:23:29:02:7a:2f:73:5b:b7:71:f4:02:
         8c:51:90:27:52:e4:91:90:17:4c:49:92:7b:c9:d5:11:d4:ae:
         80:24:ee:49:57:62:48:40:f4:29:2d:bc:ef:8d:0f:37:d8:9c:
         03:c5:26:23:d7:aa:4f:43:38:44:5d:9e:90:a1:6e:39:f3:04:
         58:78:19:8d:58:53:4a:0a:7e:24:19:35:3f:a1:e3:bd:c0:30:
         b5:d7:0c:16:db:f1:6d:e0:54:bc:c1:5d:4b:b9:21:c0:5f:42:
         26:3a:a8:0a:b0:da:e1:22:d1:4e:2e:40:12:64:38:cd:15:7e:
         90:b4:e1:f0:c5:3b:01:a0:e2:09:dc:f0:51:8d:7c:3a:1e:6e:
         7e:f7:8a:e6:e4:4f:96:65:98:ec:f4:db:6c:02:ef:c8:9b:59:
         b0:ad:cf:c3:bb:94:38:1b:eb:74:fb:98:60:a4:02:01:ec:5e:
         42:6e:bc:9e:82:93:c1:e4:e0:ac:56:97:8a:33:f8:9e:2d:8b:
         35:23:8f:9f:df:b5:00:53:5e:21:c6:56:d6:d6:50:a5:4a:21:
         f7:0e:c0:7e:c7:2e:2d:16:14:15:72:db:40:36:f4:ee:3d:77:
         2c:90:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:38:39 2025 by rpki-client