Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
File:                     2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json)
Hash identifier:          RBLXp41jyIfhZpxrWEERHnPeJqdBDrVVVJlLfCzcDbU=
Subject key identifier:   8F:FF:9E:9D:ED:CF:DB:BB:BA:65:58:76:C8:80:79:4F:30:2C:F5:70
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       7701D1A739F51F19235BACFFEB05BA3D85174E86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
Manifest number:          020F
Signing time:             Fri 31 Jan 2025 12:05:53 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 14:24:53 +0000
Files and hashes:         1: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: ghAn3Lh3T9Qh7t9I/ECqDFmLC4qwqo9vWOmfY3RfyjE=)
                          2: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=)
                          3: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=)
                          4: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:01:d1:a7:39:f5:1f:19:23:5b:ac:ff:eb:05:ba:3d:85:17:4e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Jan 31 12:00:53 2025 GMT
            Not After : Feb  1 14:24:53 2025 GMT
        Subject: CN=8FFF9E9DEDCFDBBBBA655876C880794F302CF570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:de:1a:2d:cd:dc:49:b6:f0:a7:52:a0:ef:
                    c1:8e:f3:2c:4a:ba:31:ca:c9:15:b0:f9:da:17:98:
                    45:ad:5f:7a:ce:7d:be:6b:60:ea:84:36:24:83:cd:
                    79:f5:46:77:6c:4e:18:72:bc:c6:64:40:9b:77:12:
                    8a:fb:9d:ef:24:d6:93:ee:b7:99:8f:c6:33:a3:12:
                    1d:58:24:df:fa:ae:de:e4:5c:e9:00:61:64:cb:5d:
                    4b:a1:bc:4d:1b:81:ff:ab:34:f8:35:06:f6:25:e6:
                    72:e0:35:1a:fe:55:7b:69:9c:15:b8:d3:c2:9c:c2:
                    fe:32:f4:77:44:a8:07:20:11:29:23:68:82:63:5c:
                    18:de:84:a1:06:a5:2a:8e:20:e7:b1:bf:fa:bd:6d:
                    14:71:00:15:7d:82:2d:a3:e8:0f:dc:2c:6f:36:d9:
                    01:96:1d:0a:40:6b:84:d3:86:e9:8b:e6:f8:df:c1:
                    2a:9f:18:f5:c9:34:63:92:99:ec:ed:8e:bd:0f:08:
                    ce:5f:19:40:90:f9:8c:b3:6b:ae:ec:ae:b9:c8:34:
                    a1:db:16:6d:c5:1b:cc:2d:47:c0:f2:f9:e7:fe:ee:
                    0d:e3:5d:d3:32:dd:63:e9:d2:1e:ad:ef:bd:bb:08:
                    b0:3e:8e:bf:fd:04:8b:26:63:5c:fb:c5:5f:4e:0c:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:9E:9D:ED:CF:DB:BB:BA:65:58:76:C8:80:79:4F:30:2C:F5:70
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:40:59:a2:45:66:5a:40:09:f5:49:6d:1f:63:5d:44:e5:
         b6:96:3e:09:8e:34:c0:70:e9:b7:6d:62:9c:af:d5:0f:9e:7e:
         3e:72:fb:b9:9c:9f:75:60:b9:2a:02:d0:c3:fe:05:32:ce:f4:
         25:c8:be:5f:0a:f4:2f:09:a9:37:a9:f3:54:cc:c7:5a:14:c3:
         ba:ad:79:d2:92:8f:e6:f3:63:c3:c8:25:a1:77:64:9a:86:1f:
         3e:3d:91:81:ac:25:d2:bd:ad:a9:e2:38:9b:b7:3a:43:bd:0e:
         76:03:5d:3e:fd:ed:94:4e:c5:07:1e:af:38:f6:09:8d:83:da:
         95:8f:d5:17:40:cc:f0:60:40:b9:13:bf:c7:1f:9f:2c:fe:f4:
         1f:2f:9c:7b:a2:fa:cd:e8:3b:b3:72:dc:2a:b5:6d:f1:cd:2c:
         1c:8e:c6:4b:f7:96:f2:31:df:cc:ae:f5:e9:7b:2b:7f:01:7d:
         9b:c4:c2:58:c2:98:e3:46:a6:c7:a0:31:54:e0:63:6f:be:5e:
         32:1e:33:db:d2:8a:1d:dd:ed:7e:6b:82:c4:36:19:fa:9d:6f:
         1d:d1:48:49:a2:d6:d0:0b:a1:7d:b8:91:0c:ab:f2:d8:a8:0c:
         dc:22:9e:aa:fd:95:00:d9:0b:e1:57:f2:cf:2e:7e:38:71:bd:
         d2:c4:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:39:25 2025 by rpki-client