Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft
File:                     BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft (raw, json)
Hash identifier:          dVsdABB0JQCb6CxJLamqhMaZ3OvhAVoPaA5+npRD7sA=
Subject key identifier:   1A:E9:6F:4C:A3:81:3E:CF:7E:88:89:8D:BE:13:21:7F:C9:75:9B:E2
Authority key identifier: BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4
Certificate issuer:       /CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
Certificate serial:       63B1C430B313EF5EF1918EC4C05265356A0EF9E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft
Manifest number:          015D
Signing time:             Mon 20 Jan 2025 22:16:49 +0000
Manifest this update:     Mon 20 Jan 2025 22:11:49 +0000
Manifest next update:     Wed 22 Jan 2025 01:43:49 +0000
Files and hashes:         1: 323830343a386634343a3a2f33322d313238203d3e20323733343830.roa (hash: s1C6dfS4baVIyA9sGnMqQMXUH/dBej8e791Q36Cnud4=)
                          2: 3139302e3131312e39362e302f32322d3332203d3e20323733343830.roa (hash: tvYJdxakj1sWw7l/EYUsSHxFcDcr9WMEdUyLyt9gDGM=)
                          3: BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.crl (hash: rQ/0qPhu0TgRKIPk+NAd2k7Xz46KOGTxa4/EDOnc+z8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:c4:30:b3:13:ef:5e:f1:91:8e:c4:c0:52:65:35:6a:0e:f9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4
        Validity
            Not Before: Jan 20 22:11:49 2025 GMT
            Not After : Jan 22 01:43:49 2025 GMT
        Subject: CN=1AE96F4CA3813ECF7E88898DBE13217FC9759BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:eb:11:eb:33:c4:a3:37:1f:f8:21:50:52:
                    76:f5:62:eb:2a:c7:41:30:99:b5:22:ad:30:98:8c:
                    d4:de:6f:ab:ae:8b:2d:3a:ed:5b:45:a4:72:00:d4:
                    bd:71:b0:8c:8b:8f:d3:1a:24:26:8f:5e:24:c0:b9:
                    bc:3a:de:ea:d5:c1:7f:b9:09:b5:b6:76:f2:de:ac:
                    d3:ef:f3:ca:47:38:89:ad:82:63:1e:6d:d2:25:b4:
                    b4:fa:ac:fd:0c:3c:98:e8:ca:d3:82:92:94:e5:a6:
                    fd:a7:e7:ce:16:85:8c:00:45:eb:69:3f:e8:9d:67:
                    2a:0b:d0:9a:de:dd:93:07:52:72:25:49:4c:80:12:
                    92:de:5f:b2:04:d6:80:79:cc:fd:33:87:11:ac:0f:
                    7b:c2:b9:42:e9:d3:cd:6d:e7:6e:bb:b4:02:c3:2c:
                    d9:26:3c:9b:30:75:5b:8e:e5:b1:f4:6c:46:a7:73:
                    ac:d3:d0:bc:f1:46:fd:55:81:7c:d4:0b:ee:ff:1c:
                    ee:e9:b9:d2:c8:01:ef:9c:a4:8a:e4:c7:3e:85:f5:
                    97:46:2b:2d:72:dc:55:f0:9d:79:63:ca:40:04:af:
                    e7:72:b4:df:e2:48:41:9a:25:b0:90:3f:87:c4:f9:
                    72:f8:0b:36:cf:92:eb:35:d9:be:e9:68:e3:5f:46:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E9:6F:4C:A3:81:3E:CF:7E:88:89:8D:BE:13:21:7F:C9:75:9B:E2
            X509v3 Authority Key Identifier:
                keyid:BD:E1:DA:2E:E1:2E:76:23:CD:58:69:6C:FC:32:A1:D6:89:80:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LDCBWd83mNGY9Cq5pEdUJm4kYrcECuAQS1SpAxT7rd1/0/BDE1DA2EE12E7623CD58696CFC32A1D68980F4F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:34:f7:22:4e:19:99:cb:76:57:21:62:18:88:99:e5:56:59:
         fc:35:35:9b:bc:85:71:1b:39:78:c5:0e:13:a5:8e:92:50:8a:
         6f:9b:b8:25:1f:ce:7d:8a:cf:5c:11:df:6b:4a:7f:fc:11:37:
         9c:87:f4:56:49:29:3e:e3:59:0e:92:46:48:a1:1d:52:1b:fd:
         a6:d4:36:7e:41:1d:98:01:6c:17:10:73:17:e9:56:d6:e0:9f:
         9a:89:88:51:09:6a:ae:34:6b:5f:d3:b0:12:a2:72:a9:67:2e:
         0a:f4:f3:cf:48:3f:83:f1:c7:21:2b:45:33:a5:6d:7d:fd:d5:
         ce:fd:cf:a2:3e:21:d4:55:af:58:28:e7:01:fa:a1:5a:a7:b6:
         08:aa:fe:78:c5:c3:fd:c3:23:a6:20:15:5d:f9:86:38:7d:b3:
         40:03:b4:77:4e:d9:04:74:d8:78:82:b4:24:82:3f:35:d9:76:
         36:88:30:6d:31:4d:8e:b1:62:17:24:55:59:30:11:43:9d:4e:
         a1:f9:ec:1f:19:89:cc:34:bc:2b:0b:fa:2f:10:d9:a1:e6:3c:
         e5:b4:1b:32:62:29:51:6f:65:a2:b7:b6:c1:da:fa:3f:2f:d0:
         32:89:a1:ee:ae:c3:3f:00:ab:88:a2:07:08:e7:fd:5d:ed:6e:
         a9:f2:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:40:29 2025 by rpki-client