Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
File:                     713D42750562117CA0DB7D96A623898EF91F6ADA.mft (raw, json)
Hash identifier:          xxVTo7qHd/vAUos7Cq0wnETTcmQkvndx1rSLzsWW3PY=
Subject key identifier:   49:D7:18:7E:F0:5D:47:34:D1:4A:20:FA:89:07:D4:28:EF:20:08:68
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       3171F39EFED8A4A4C5AEA8D939EBB40B62F09C7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
Manifest number:          0191
Signing time:             Fri 31 Jan 2025 00:06:08 +0000
Manifest this update:     Fri 31 Jan 2025 00:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 03:30:08 +0000
Files and hashes:         1: 3138392e32382e302e302f32302d3234203d3e203238323739.roa (hash: 49C5zHBnrfrYWPnFpGkbR2LIhNTKbD2jyeiyZTNvimY=)
                          2: 3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (hash: mcWsIrPTALDD/GqQFRUZxpyjOOMZSA1s6pw6sbjZ4x0=)
                          3: 3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (hash: wbAJJa7TRyYO99o9ZPo7rSNUiNtmafxGnM3FjAu/6Tw=)
                          4: 713D42750562117CA0DB7D96A623898EF91F6ADA.crl (hash: bVsdgDDo5n47QWuXk44Y4KDtm8/weTqBKGYZPt9gtPk=)
                          5: 323830343a3136383a3a2f33322d3438203d3e203238323739.roa (hash: zWrB6x6OMldh/tpUnHx8gQc8qAbY6c5stBsXnr8tMgA=)
                          6: 3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (hash: 9NhLJP32BryLXgNcKlmJLbksJDfmNOCyXB5Dl0rBYOQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:71:f3:9e:fe:d8:a4:a4:c5:ae:a8:d9:39:eb:b4:0b:62:f0:9c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Jan 31 00:01:08 2025 GMT
            Not After : Feb  1 03:30:08 2025 GMT
        Subject: CN=49D7187EF05D4734D14A20FA8907D428EF200868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:dd:8b:ba:96:07:18:76:58:21:9b:82:a4:
                    29:98:e3:de:35:d6:0c:b3:eb:d4:63:a1:2b:79:68:
                    4c:1e:b8:b2:d9:bf:89:53:d2:08:82:eb:2e:a9:ce:
                    2a:b3:b5:5b:ae:9c:37:dd:20:dd:15:b4:42:ad:05:
                    55:9f:85:f5:2d:8c:ca:d7:cf:0b:2a:8d:02:15:64:
                    61:8e:a9:91:ab:3a:d5:ca:a3:fd:a5:53:4b:d1:6f:
                    d3:11:8d:52:bf:e9:f8:0f:67:ec:b2:37:0f:07:46:
                    46:42:ce:f1:1c:b6:e1:3b:38:e5:e3:b3:b9:66:b9:
                    e5:9d:ce:4d:82:63:05:9d:2c:13:9d:e0:c2:e9:1d:
                    31:dd:01:84:72:a2:f5:f3:d6:d2:b9:48:cf:93:d5:
                    1a:e9:1d:74:ca:84:d1:4a:a2:12:72:0b:56:00:10:
                    d7:44:72:7a:16:bf:c4:f8:a7:aa:12:e9:e8:e7:e7:
                    5a:ff:56:ed:53:db:81:a6:42:f8:70:b6:22:87:02:
                    b5:15:23:48:27:e8:cc:c5:61:7e:b3:3f:56:c9:bd:
                    ba:05:9d:c9:3b:6d:13:01:75:63:8c:8c:ea:6a:f4:
                    8b:15:c3:0b:84:0b:3e:b7:c5:99:0a:09:9b:2f:b1:
                    99:3f:ba:f5:e5:fa:c0:29:f2:5c:a2:15:7c:dc:99:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D7:18:7E:F0:5D:47:34:D1:4A:20:FA:89:07:D4:28:EF:20:08:68
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:d5:45:28:c7:90:6c:01:a8:81:68:2f:99:f1:09:e5:79:
         1a:ca:3e:e3:71:4f:37:df:57:c7:0c:77:48:0a:3e:da:11:71:
         3e:b0:bd:d9:57:2a:d1:d8:7a:94:f0:c5:e6:86:cc:4b:7e:2e:
         17:64:7b:1e:0c:d2:1b:57:70:04:59:9e:50:7d:20:44:fc:d8:
         8c:01:21:41:71:7a:6c:b4:14:aa:53:93:79:3a:ae:42:d1:d5:
         2c:4b:4f:88:5d:93:2f:97:be:42:2b:cd:0c:08:78:75:69:6f:
         03:aa:76:76:d0:ae:06:8d:f9:8b:fa:14:72:9f:e7:73:b5:cd:
         9a:90:86:40:80:a9:a2:15:32:2c:75:af:0d:37:29:2c:ea:0a:
         47:59:56:ec:e4:17:9f:11:ca:f3:60:e6:46:ec:8d:ab:ef:b0:
         fa:34:b8:16:49:bf:d6:53:2a:26:08:d2:8e:9e:3e:e4:f5:9e:
         b4:84:46:9f:ab:83:51:45:29:07:dd:30:c3:c6:df:41:b0:72:
         70:95:cc:56:a8:9f:a3:3a:00:2b:86:5e:10:c1:0b:ef:bb:5c:
         53:1c:d4:43:98:2b:58:7a:c1:2f:14:5a:35:f4:a4:fc:cb:1b:
         82:e2:4c:93:51:d3:4b:03:70:70:18:59:89:bc:cb:02:02:18:
         d7:40:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----