Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File:                     2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier:          LaO/l8HxEtwl8eZ1qQo4N07vRmwlwUn6idpu8bvI+CM=
Subject key identifier:   83:70:04:42:1E:B9:CB:1A:CE:57:B1:A1:3C:B1:CA:7A:A5:EF:3E:B4
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       639F280A88F776E387FDBBCBA9CD4B742D6C6EBE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number:          01E7
Signing time:             Fri 31 Jan 2025 14:30:19 +0000
Manifest this update:     Fri 31 Jan 2025 14:25:19 +0000
Manifest next update:     Sat 01 Feb 2025 15:58:19 +0000
Files and hashes:         1: 3230312e34392e3233392e302f32342d3234203d3e203532353332.roa (hash: KJQ1JwBum9NTl3xzJgF6CeArThudOJLd9C0jDzHW+sM=)
                          2: 3230312e34392e3232382e302f32332d3233203d3e203532353332.roa (hash: /qeIbhMH6MGtElICMrxi8juwGwtqNAvQALJ6bFPtFKo=)
                          3: 3230312e34392e3233312e302f32342d3234203d3e203532353332.roa (hash: eWtQHgJKmUOEgx6kMoKNr21PvAt5lBF+qycXgb0mgeY=)
                          4: 3230312e34392e3233362e302f32342d3234203d3e203532353332.roa (hash: CieiybvshnLYiPXEKunR7c7xEPNVERDL82bZEfRMkmA=)
                          5: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: 734R+ssKSoIPVhD66eWJfAcRlrIaytWD3is2WPWBX9M=)
                          6: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: laT4YEayLagKcoc07xRQjyTHpBjJyk4tHrVsgypfDOo=)
                          7: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: /8ICQ2apfd5qUXRjireRfcn1IUiuKHPK7lnYHTHQT00=)
                          8: 323830343a326635633a633030303a3a2f34382d3438203d3e20323634383836.roa (hash: 2eGgCvGItK/PSrO0VFvh2f6NIV8TPMqh/fbo5Vv3nAQ=)
                          9: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: 9aTBI2sZMOPxqfO/g2jC2KRFdpkFnGW8mhE2ifnlfzQ=)
                          10: 3230312e34392e3233302e302f32332d3233203d3e203532353332.roa (hash: s8NvQq/v6KvMN6eiFVfAWHT4+ZN/8ojexqW0QrJcukI=)
                          11: 3230312e34392e3233322e302f32322d3232203d3e2035.roa (hash: Th733cSpMhlr7V0fqeEJyFT1WG46K9gurxEXENo2n2k=)
                          12: 3137392e3130382e34342e302f32322d3232203d3e2035.roa (hash: rnDbcjoLBG6qfDS2DNlVU/MBZwqcXRNKkVKd9uETvJ8=)
                          13: 3230312e34392e3233372e302f32342d3234203d3e203532353332.roa (hash: eGPFDjIYmOo2KP8Obc0HtC+eKQxIEYSg2kpu636q/FM=)
                          14: 3230312e34392e3233382e302f32342d3234203d3e203532353332.roa (hash: 0I8hm5aekjLmqhNGBEI8ct8uweUEWZacqrpTwA2ntEM=)
                          15: 3230312e34392e3232392e302f32342d3234203d3e203532353332.roa (hash: knUiTSRCcfRqRCbS9s4HY5ek24I6rDHLbnGKEBzLO8I=)
                          16: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: LS0WxdEsryz8P15YwZSUMGr88ook9HWb4fVaNy2x604=)
                          17: 3230312e34392e3233302e302f32342d3234203d3e203532353332.roa (hash: Y/oyop9vnaI9G/ffOm9mRaUlYW+pfGkBvuMusSs7yV8=)
                          18: 323830343a326635633a3a2f33322d3335203d3e20323634383836.roa (hash: snd6nRzvXZmwn8Oo/dZNpJJ3eJ0I3IihZBnnBebYdl0=)
                          19: 3230312e34392e3233322e302f32322d3232203d3e203532353332.roa (hash: rOHu3HuupsnLff+g/L6wrCwyUmw1TdGcKSq9w0m/apc=)
                          20: 3230312e34392e3232382e302f32322d3232203d3e203532353332.roa (hash: wZQws+mFxQqiQ/tyvhVqXL5E1S0ILm+AscszcCmq4cM=)
                          21: 3230312e34392e3232382e302f32342d3234203d3e203532353332.roa (hash: /lmLSqH6zet8IXQCoJaCZziYT6wp/p9VaLWFC8iQyjY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9f:28:0a:88:f7:76:e3:87:fd:bb:cb:a9:cd:4b:74:2d:6c:6e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jan 31 14:25:19 2025 GMT
            Not After : Feb  1 15:58:19 2025 GMT
        Subject: CN=837004421EB9CB1ACE57B1A13CB1CA7AA5EF3EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:43:f4:7e:51:ed:c0:cc:ef:76:3b:5e:4c:
                    2e:d6:8c:9f:bc:00:24:de:f1:a0:c2:e9:77:53:55:
                    48:5b:b5:64:91:5f:de:0d:57:b5:1c:d1:77:88:6e:
                    82:4a:8b:3c:e2:cc:24:4a:b2:c6:52:76:92:56:87:
                    e7:f7:c7:c9:9a:a7:0c:46:27:7a:35:86:31:f5:ad:
                    2c:83:09:38:14:bb:fc:70:27:c2:36:d6:75:4f:9e:
                    39:ae:fd:33:94:1a:a1:10:c3:a1:a2:50:82:ab:8b:
                    e6:06:5c:93:18:46:71:cd:75:d4:6d:1c:07:9e:9b:
                    fd:d7:fc:4f:3a:e3:ae:ae:c2:56:a3:2b:c5:f5:a1:
                    c5:ba:14:36:77:ba:3e:6b:d4:34:5f:92:ec:c4:f4:
                    a9:2e:65:80:89:11:16:de:72:e0:f9:de:55:83:17:
                    3b:7a:69:c4:6b:14:d1:d2:6c:04:99:a5:18:e6:70:
                    11:6c:0f:e2:c2:ab:8f:d4:90:ad:94:c9:c0:66:61:
                    0c:08:2f:c4:f6:6e:26:7e:db:ac:5c:e4:f8:63:fb:
                    73:bd:71:de:96:51:8e:cf:21:1b:0c:f3:6b:d8:d5:
                    67:8a:34:28:d6:97:3e:f3:76:23:59:c3:f3:ee:bf:
                    45:24:75:cf:c6:0e:f3:a1:32:53:b3:ff:14:a3:7b:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:04:42:1E:B9:CB:1A:CE:57:B1:A1:3C:B1:CA:7A:A5:EF:3E:B4
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:04:28:a8:11:7c:aa:c0:82:f2:37:07:f4:d7:14:49:2b:
         62:56:fb:bd:f4:a7:9d:f7:ad:bc:46:19:2e:11:13:88:be:e5:
         4e:aa:35:32:43:36:e0:49:c5:fd:02:bd:61:6e:e2:df:8c:c9:
         31:47:30:b8:ff:4a:33:91:ec:27:a2:f5:0b:3f:e6:28:8b:5e:
         a5:95:59:bf:5b:f0:76:5a:6d:9e:2f:24:d6:2a:a6:76:59:df:
         22:d5:f4:a9:46:e9:17:7f:59:04:04:3b:8a:23:88:94:13:d8:
         cb:16:2e:4c:e3:1f:55:76:bf:12:d3:ec:a4:6b:bb:13:f2:be:
         07:48:f3:12:e8:37:d3:6e:4e:52:36:7c:35:93:a0:66:de:09:
         14:af:8e:31:4d:58:be:e9:f2:d2:56:5c:5e:2d:7d:14:42:13:
         da:75:8a:be:a9:82:06:20:78:f3:7a:32:86:2f:87:a4:e5:3e:
         9e:a8:03:26:71:1d:20:4d:5c:8d:59:c8:b8:f8:ea:6f:50:0a:
         b0:96:10:51:1b:54:ab:2a:32:c3:33:48:59:ee:d4:bb:96:3f:
         0a:b5:1a:1f:2e:56:9e:f8:b4:61:81:3b:4f:63:bb:db:e7:2e:
         66:9e:c2:8e:f6:3e:c4:cc:61:1f:ef:f8:15:4c:6f:90:2e:5f:
         82:e6:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:26 2025 by rpki-client