Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
File:                     436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft (raw, json)
Hash identifier:          9cS4RDVI/oLUB4od8KKUMNxYjXPjdfeFwfRqUCtDQ/I=
Subject key identifier:   C4:87:E8:97:84:E1:67:43:7D:5C:24:D2:5A:1C:B0:1F:AD:7F:1E:7E
Authority key identifier: 43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61
Certificate issuer:       /CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
Certificate serial:       1CE4EDC8A505784240957E48EEE2FC61D79378BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 14:48:37 +0000
Manifest this update:     Fri 31 Jan 2025 14:43:37 +0000
Manifest next update:     Sat 01 Feb 2025 15:04:37 +0000
Files and hashes:         1: 3137302e37392e3139362e302f32322d3232203d3e20323636333130.roa (hash: eNLph14H+t/K0Hzr4wOPzbzNNB/0Es152wrjMpx8SSo=)
                          2: 323830343a333564383a3a2f33322d3332203d3e20323636333130.roa (hash: NlomxSQuCyKGj1B/gLuGOUjTGq8ZIOu+BZSjoD5uTrU=)
                          3: 436CDA1F9370BE6E582FE8897E382D5816B0AE61.crl (hash: P/MjV3JgPvfHUjFLjxkDNPeb1QqkKqJtjfJolkbGN48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e4:ed:c8:a5:05:78:42:40:95:7e:48:ee:e2:fc:61:d7:93:78:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436CDA1F9370BE6E582FE8897E382D5816B0AE61
        Validity
            Not Before: Jan 31 14:43:37 2025 GMT
            Not After : Feb  1 15:04:37 2025 GMT
        Subject: CN=C487E89784E167437D5C24D25A1CB01FAD7F1E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:fe:4b:b0:69:50:20:88:41:b1:ff:bf:4a:
                    60:51:b1:ef:e9:dc:02:c9:f6:90:d8:ec:a6:0e:fc:
                    a8:84:3b:74:e2:1a:f6:29:79:86:8c:76:65:5b:77:
                    01:00:31:95:2e:09:00:33:c1:4c:74:da:42:f0:91:
                    38:f3:26:5e:90:88:0e:af:58:65:1b:40:ef:0d:95:
                    51:cb:06:7c:39:50:3a:db:93:31:55:b9:80:35:2f:
                    e3:3f:2b:a3:f1:ce:96:7f:ce:21:7b:24:e5:d4:18:
                    c9:7d:e4:9d:ed:a7:fa:13:c1:cf:78:c9:a7:19:f5:
                    de:0b:bf:a7:12:83:5a:62:10:3d:bf:bf:67:23:c7:
                    4f:0c:bb:81:5b:67:54:91:43:36:ce:07:64:69:cf:
                    82:71:1f:29:a6:9d:42:72:fb:21:2c:4c:de:30:67:
                    26:52:74:f0:04:2c:1e:6e:03:d1:39:61:55:be:d3:
                    b0:50:e8:b8:81:fc:07:0f:94:bf:aa:a7:ed:de:55:
                    08:d0:44:d6:78:60:22:84:39:1d:eb:60:7d:8a:ba:
                    eb:17:61:05:e4:17:c0:60:d6:3b:0c:70:f8:3c:b5:
                    07:2d:9c:1e:0d:03:c7:b8:01:25:6d:19:53:a7:fe:
                    51:6e:0f:70:74:58:f3:d5:1b:2b:71:a0:1d:d6:69:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:E8:97:84:E1:67:43:7D:5C:24:D2:5A:1C:B0:1F:AD:7F:1E:7E
            X509v3 Authority Key Identifier:
                keyid:43:6C:DA:1F:93:70:BE:6E:58:2F:E8:89:7E:38:2D:58:16:B0:AE:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RZvY2SqjHmXdaekeTuVbpqQoYpvMDFrYWCPrcPgsjWD/1/436CDA1F9370BE6E582FE8897E382D5816B0AE61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:57:e8:18:e8:21:0d:87:9b:6f:0d:88:f5:f1:0b:75:61:29:
         49:b1:96:79:62:87:c4:84:ab:af:9d:e2:11:d3:af:1b:6b:86:
         56:64:33:bb:b3:3a:4a:c0:aa:e9:f4:86:cd:7e:e1:ec:14:4b:
         f0:42:fb:89:9b:97:f5:34:26:62:7a:0a:40:41:99:c7:cb:1a:
         5e:92:19:32:a7:25:34:a9:0a:f7:64:a8:64:da:46:93:f2:ed:
         a9:4c:c5:43:6e:a0:46:fb:19:f0:1d:38:9e:28:5d:0d:46:55:
         0a:75:ad:d3:7a:3a:f0:25:70:4a:b8:d5:31:ef:9a:9c:53:84:
         61:02:e9:07:5a:8d:f5:c0:81:5d:3c:e8:78:03:83:e8:75:2a:
         49:b1:21:1e:fa:49:fa:09:5f:a1:0f:9d:9a:e9:d9:ba:b8:4a:
         38:7a:9f:3b:52:0c:6e:49:df:f3:a2:56:35:fa:31:e4:c7:e2:
         4e:09:bb:8d:bc:29:9e:fb:42:29:5a:47:78:d6:1d:56:20:64:
         61:39:d3:81:44:26:32:9e:2d:6e:29:23:40:1b:0f:27:2c:5b:
         74:14:36:dd:07:6c:28:6f:4d:2d:df:9c:09:f9:94:05:21:2a:
         2d:d5:24:8b:a0:57:9f:a5:6a:92:cb:b3:a7:23:08:d7:4b:28:
         28:16:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:19 2025 by rpki-client