Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
File:                     3701790BFCD740698BF2D59FB7800495728B1041.mft (raw, json)
Hash identifier:          Fx57lcYx6S+cghciBIZEdFU2QO3Z99TykwHOP2eN6BU=
Subject key identifier:   DE:7F:93:E5:58:A3:3C:26:22:3D:49:22:32:AB:A0:C2:FF:C8:29:90
Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Certificate issuer:       /CN=3701790BFCD740698BF2D59FB7800495728B1041
Certificate serial:       77F968289D4BA8B25AFDE215863B01ED5B2A3565
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 13:06:49 +0000
Manifest this update:     Fri 31 Jan 2025 13:01:49 +0000
Manifest next update:     Sat 01 Feb 2025 14:30:49 +0000
Files and hashes:         1: 3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (hash: TEpcx2xap7jMlrtu6OdAeLXl9k+AMQawT+hB5kD1PDY=)
                          2: 323830343a316433343a3a2f33322d3438203d3e20323634333534.roa (hash: sg1c6lBSL5u6as5+8x8wweLfFHXWgMlRCgGQ1MCzn+0=)
                          3: 3701790BFCD740698BF2D59FB7800495728B1041.crl (hash: VwN6YGCip8570xbml1VsDpO3xhD+Z7wquPm4Onzi4Uw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f9:68:28:9d:4b:a8:b2:5a:fd:e2:15:86:3b:01:ed:5b:2a:35:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041
        Validity
            Not Before: Jan 31 13:01:49 2025 GMT
            Not After : Feb  1 14:30:49 2025 GMT
        Subject: CN=DE7F93E558A33C26223D492232ABA0C2FFC82990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:f3:65:59:38:3d:32:57:3b:19:f9:45:82:
                    40:3c:be:0c:8a:8c:d8:bf:4c:20:83:18:68:01:65:
                    5f:a6:9b:c6:26:05:b1:86:a2:09:40:5c:eb:27:f0:
                    df:d5:70:38:9c:f1:30:6d:f8:5b:8b:78:a3:35:ff:
                    bc:71:f5:84:44:db:ff:b2:47:9a:ca:2f:9d:8c:39:
                    e6:81:56:98:2a:cb:58:38:7d:61:ef:97:83:2d:40:
                    7d:5b:51:57:c6:d4:17:da:20:07:9c:20:c0:d0:0a:
                    70:7c:98:e6:da:bc:0b:ea:b1:a2:b2:cb:63:d7:a5:
                    f5:29:b6:04:17:1c:f9:92:a2:22:8c:4a:7d:53:18:
                    2b:6f:a4:f8:3a:17:cc:eb:93:ee:d1:d6:41:ca:82:
                    39:1d:8d:92:26:a4:ca:62:15:8e:3b:3a:54:8a:1d:
                    8b:57:95:5a:26:01:19:42:9c:aa:4b:35:76:f1:6b:
                    4d:5c:9a:4f:e1:5d:43:34:9e:80:7e:77:64:33:a5:
                    ec:ff:f2:03:76:6e:ec:74:da:83:96:de:73:bd:a2:
                    dd:4a:69:25:c6:e2:1e:d6:18:d9:1e:e2:e1:5f:d5:
                    be:1e:a8:f6:c0:2e:3f:f0:bb:c1:a3:39:a3:71:06:
                    bb:5b:95:1f:07:9c:a3:cd:5c:91:67:2e:77:b6:f7:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:93:E5:58:A3:3C:26:22:3D:49:22:32:AB:A0:C2:FF:C8:29:90
            X509v3 Authority Key Identifier:
                keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:34:e3:3a:b4:d6:27:2e:3e:c1:73:33:69:82:ac:b0:5a:
         44:82:71:8d:6d:77:41:e5:43:d8:62:e9:68:e7:50:4f:bd:ee:
         2c:bc:80:23:bd:e0:01:21:38:c3:c9:73:33:f5:1f:e5:b8:8f:
         36:7c:64:85:ce:41:a9:34:b4:d9:96:25:be:d1:81:67:c1:21:
         90:c6:70:7b:5d:05:1d:f3:40:8e:6c:db:a0:0a:e9:43:9f:5b:
         8c:e6:18:c7:a1:2b:10:c4:6e:f8:9d:b1:93:59:2b:8d:62:67:
         0d:f5:a9:c4:c0:ca:a0:b2:4a:0f:21:2d:80:78:79:8f:3f:55:
         f3:d5:27:4b:06:a0:57:6f:b3:1a:16:1a:bf:f3:51:a1:62:7b:
         9e:04:b3:8f:e9:9c:27:b7:b8:e7:99:b6:73:72:e4:a9:bd:05:
         1d:45:1d:ae:c5:8a:f6:7e:df:51:2d:61:56:b7:c4:48:0e:a4:
         db:90:19:c3:e1:1a:05:08:0e:9c:8d:9b:6f:72:32:9a:1d:40:
         4c:5c:15:ce:fb:3d:70:17:e0:c2:1b:53:d8:cf:0c:67:e9:8c:
         07:64:5c:04:11:11:79:c4:31:01:c5:c6:de:b4:4f:1c:d2:2c:
         05:6b:ba:0b:b2:b3:d8:a8:cc:09:92:a1:d2:ae:98:73:a9:a9:
         c3:43:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:26 2025 by rpki-client