Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/401F8D2B64577FDFE77DC42D056EA0756AB123BC.mft
File:                     401F8D2B64577FDFE77DC42D056EA0756AB123BC.mft (raw, json)
Hash identifier:          hbv5cLMR8S4wY4P07GdLyulDjKyseN4IJ85ausmo4fw=
Subject key identifier:   ED:D0:0A:48:A0:C3:A3:FA:6E:6E:62:C3:3E:38:21:91:6B:D7:94:BC
Authority key identifier: 40:1F:8D:2B:64:57:7F:DF:E7:7D:C4:2D:05:6E:A0:75:6A:B1:23:BC
Certificate issuer:       /CN=401F8D2B64577FDFE77DC42D056EA0756AB123BC
Certificate serial:       1EEFF82D1C74032B99D1AA1BA534091CFF874368
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/401F8D2B64577FDFE77DC42D056EA0756AB123BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/401F8D2B64577FDFE77DC42D056EA0756AB123BC.mft
Manifest number:          15
Signing time:             Wed 19 Apr 2023 16:42:04 +0000
Manifest this update:     Wed 19 Apr 2023 16:37:04 +0000
Manifest next update:     Thu 20 Apr 2023 16:58:04 +0000
Files and hashes:         1: 323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa (hash: BTIhocBqAy7WmsgVAoZbpSUI4x10uRn+umX/0ENCgSA=)
                          2: 34352e362e3139382e302f32332d3233203d3e20323636353633.roa (hash: +WAL7A7Q/cGReGimWazhjq6AVcfMlxVi6q4EL52Fk0c=)
                          3: 323830343a336465633a3a2f33332d3333203d3e20323636353633.roa (hash: JKtUJaCYoOpWqUtIi+fIwg+cGfs4ZWIaLpmCss8iX7k=)
                          4: 34352e362e3139372e302f32342d3234203d3e20323636353633.roa (hash: xYIbe7byW6esKLhP5IV90zcrBOXJGrrgYO20TWcZ8Qg=)
                          5: 401F8D2B64577FDFE77DC42D056EA0756AB123BC.crl (hash: Ex6I0NXBc8ryjyemOAzTHFg3L4XAdRuclHlQYgJUF1I=)
                          6: 34352e362e3139392e302f32342d3234203d3e20323636353633.roa (hash: +HST9mHfEsHKa6W4psG6V4omrbiNaXkdMD8afHARGAE=)
                          7: 34352e362e3139382e302f32342d3234203d3e20323636353633.roa (hash: +v58gdMfO9gdcWf6hqyeiGqldOne0H/AADbHP4Xpjzk=)
                          8: 34352e362e3139362e302f32342d3234203d3e20323636353633.roa (hash: JwkMwTOnWVYaoDuds33qGuXTxq/5Yepyy9o2NY4j8hI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ef:f8:2d:1c:74:03:2b:99:d1:aa:1b:a5:34:09:1c:ff:87:43:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401F8D2B64577FDFE77DC42D056EA0756AB123BC
        Validity
            Not Before: Apr 19 16:37:04 2023 GMT
            Not After : Apr 20 16:58:04 2023 GMT
        Subject: CN=EDD00A48A0C3A3FA6E6E62C33E3821916BD794BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:91:0a:1a:ca:fa:e5:ca:2d:5f:c0:80:56:
                    c9:f0:56:ef:44:8c:14:4b:ee:65:6c:e3:ca:88:66:
                    fb:45:82:c0:44:a9:40:ad:78:8f:60:0e:b5:f2:45:
                    c9:3b:6b:f4:1a:5c:1f:d7:a1:84:f3:dd:a2:bb:5d:
                    ef:2b:0e:ed:2e:90:8a:48:66:68:15:70:36:87:e1:
                    e1:3f:0b:62:20:95:1f:f2:4d:56:ee:d7:13:28:fa:
                    a1:86:88:e6:38:13:f2:49:7d:ea:fb:9e:d3:5b:74:
                    21:2d:22:57:ba:d7:5c:2b:c3:a9:72:6c:9e:93:33:
                    ef:57:33:fe:b7:47:b2:00:26:3f:8a:7b:5b:d8:2a:
                    1d:a1:a4:0a:b4:fb:d9:96:7b:8c:f5:f3:f5:5d:b2:
                    54:48:49:60:79:7d:d1:d7:76:7a:03:90:1b:f5:e3:
                    f9:16:08:eb:c9:01:8a:f5:21:44:64:cb:60:f0:fe:
                    0d:a8:0e:ca:6e:cb:f0:42:dd:5a:bc:9e:bd:c3:41:
                    1c:33:e8:ef:75:5a:e4:71:e5:70:0f:31:fa:34:1e:
                    0a:54:57:61:0d:55:42:bc:54:49:d3:58:8d:56:28:
                    52:ab:aa:ab:94:f9:a9:ba:5d:7e:0e:29:0a:25:7b:
                    2d:d9:0c:2d:26:96:5c:5d:33:d7:23:ae:c7:8b:8a:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D0:0A:48:A0:C3:A3:FA:6E:6E:62:C3:3E:38:21:91:6B:D7:94:BC
            X509v3 Authority Key Identifier:
                keyid:40:1F:8D:2B:64:57:7F:DF:E7:7D:C4:2D:05:6E:A0:75:6A:B1:23:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/401F8D2B64577FDFE77DC42D056EA0756AB123BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/401F8D2B64577FDFE77DC42D056EA0756AB123BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/401F8D2B64577FDFE77DC42D056EA0756AB123BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:50:76:c5:f2:d9:a0:1d:ed:df:ed:f3:27:c8:54:b4:40:fb:
         33:5d:b8:ed:42:14:33:ca:cf:79:61:72:7e:1b:32:d1:03:24:
         73:18:8e:9a:e3:b2:3b:6e:94:d1:69:cf:83:30:7d:c4:13:7c:
         37:46:d8:38:5d:ba:64:a6:99:d0:7b:bb:0a:eb:d4:db:35:2a:
         05:35:b9:10:4c:02:92:51:29:61:ce:ce:14:7c:cd:c8:d6:7e:
         94:c6:a6:d5:3e:1a:1b:68:73:71:70:ee:fc:e3:58:26:b4:03:
         c8:b8:0c:91:d9:c4:a5:5e:08:b6:0a:c0:fc:23:3b:14:9b:89:
         c5:6f:be:ca:3e:cc:56:d4:1d:c2:9d:18:92:65:72:37:19:d4:
         72:31:a3:25:ce:e5:df:12:ea:b3:27:a1:c0:f5:e9:ee:05:9f:
         eb:7a:4a:2a:ce:76:f8:5f:59:b0:78:a7:08:88:08:b0:1a:0f:
         99:5d:16:12:22:cf:ff:39:8b:2a:4c:34:ef:32:14:4f:94:33:
         54:ce:de:35:06:80:c7:d6:84:b1:c3:2e:04:62:c1:47:d8:61:
         e5:e4:a9:f2:e6:96:e2:c0:30:fe:25:92:a4:71:a1:ba:db:81:
         6b:30:d1:0b:a9:60:f7:f6:6b:53:1b:2b:67:ff:fc:f4:a9:d2:
         76:c7:c3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:01:22 2025 by rpki-client