Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/1/CD2F3A4F1911F35A642E721730D072EF6E3DB85C.mft
File:                     CD2F3A4F1911F35A642E721730D072EF6E3DB85C.mft (raw, json)
Hash identifier:          PfYKXlcp9/zHVtd+8H6E7BYcWD7q8SbH5pw7+mKDsd0=
Subject key identifier:   CF:D9:B0:4A:66:99:B4:2B:D8:27:4A:50:0D:16:AA:C0:75:73:96:54
Authority key identifier: CD:2F:3A:4F:19:11:F3:5A:64:2E:72:17:30:D0:72:EF:6E:3D:B8:5C
Certificate issuer:       /CN=CD2F3A4F1911F35A642E721730D072EF6E3DB85C
Certificate serial:       7C63E249340707FC6CB0772B85E824DB4E63F759
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2F3A4F1911F35A642E721730D072EF6E3DB85C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/1/CD2F3A4F1911F35A642E721730D072EF6E3DB85C.mft
Manifest number:          0114
Signing time:             Tue 07 Jan 2025 08:28:17 +0000
Manifest this update:     Tue 07 Jan 2025 08:23:17 +0000
Manifest next update:     Wed 08 Jan 2025 09:51:17 +0000
Files and hashes:         1: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (hash: r47jeAtXkDSSHBk4wmSQFxs2P6dr9ahrGD+qGiVL3x0=)
                          2: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (hash: kCs60p8MvM6NypDt/xNk3XjvUWV6narkaYkdBtVMmq4=)
                          3: CD2F3A4F1911F35A642E721730D072EF6E3DB85C.crl (hash: C6m8Hpi+s1LtKurN/G/JtpYuklkrH0cgj7YyR0EonvQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:63:e2:49:34:07:07:fc:6c:b0:77:2b:85:e8:24:db:4e:63:f7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2F3A4F1911F35A642E721730D072EF6E3DB85C
        Validity
            Not Before: Jan  7 08:23:17 2025 GMT
            Not After : Jan  8 09:51:17 2025 GMT
        Subject: CN=CFD9B04A6699B42BD8274A500D16AAC075739654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:fb:21:dc:70:0a:dd:84:f4:2b:61:0b:91:
                    c4:c7:f3:44:38:e8:f3:cf:73:3b:ba:e5:53:5b:f7:
                    87:eb:66:8d:9f:0d:0c:b5:3a:ea:f5:10:95:07:7e:
                    4d:c8:fb:eb:67:08:94:2c:25:a9:0a:c5:36:e7:2b:
                    a3:b9:c8:da:5c:12:6b:73:a2:e4:6e:a7:00:49:19:
                    07:5a:2d:9a:32:e7:9c:20:73:29:16:be:2d:c9:b6:
                    43:a8:da:e4:a5:ac:ad:09:89:e6:94:6b:fc:dd:f0:
                    f9:76:1c:5e:31:96:a2:be:e5:f9:44:7a:2b:ef:56:
                    bf:c1:8e:90:70:b7:43:f8:b5:ae:f0:7c:d5:ad:34:
                    2a:0d:1a:f0:f7:af:2b:b8:57:9e:e4:26:f7:5a:14:
                    b6:ec:31:26:56:f6:0b:79:1a:c5:d9:a0:01:bd:06:
                    c0:5a:1e:e4:16:d7:be:98:94:23:1c:1d:be:22:41:
                    16:55:db:fb:d3:6e:f6:ae:1e:f4:fc:1e:c6:d2:36:
                    4c:43:0c:71:77:2e:af:39:3f:aa:ab:64:e9:c5:36:
                    5a:a9:73:da:c5:15:52:c5:27:dd:84:6f:fa:f0:31:
                    d7:d1:3f:c4:92:2a:7e:a7:14:fe:9d:a7:59:76:a4:
                    c4:8f:cd:7e:44:ec:b3:00:2b:8a:e1:3d:94:ce:9f:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:B0:4A:66:99:B4:2B:D8:27:4A:50:0D:16:AA:C0:75:73:96:54
            X509v3 Authority Key Identifier:
                keyid:CD:2F:3A:4F:19:11:F3:5A:64:2E:72:17:30:D0:72:EF:6E:3D:B8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/1/CD2F3A4F1911F35A642E721730D072EF6E3DB85C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2F3A4F1911F35A642E721730D072EF6E3DB85C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/1/CD2F3A4F1911F35A642E721730D072EF6E3DB85C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d5:d2:b9:94:b1:94:79:dd:ee:f5:11:ca:c0:8e:f0:1f:ab:
         8b:87:de:97:90:e8:5b:29:de:9c:5e:95:1c:b8:80:03:f7:02:
         21:ca:de:5c:31:f0:38:14:3f:6e:45:7f:59:73:93:bf:da:7b:
         b4:8a:5f:fd:f0:b7:76:9e:bd:97:3b:aa:16:a0:f8:97:9b:b8:
         79:16:b0:99:18:bd:ff:5c:77:7a:99:ab:64:f2:99:95:8d:8f:
         39:cb:72:c2:e2:19:4b:fb:48:b9:6c:1e:25:c4:d9:57:f1:b6:
         44:6b:ec:ce:43:f9:dc:fc:c5:d8:65:9b:5c:d2:c2:7b:da:6a:
         ce:39:8d:d1:54:b6:e7:13:86:1e:0a:0b:9c:a8:fa:11:c9:23:
         7e:9b:c8:e7:20:7c:01:4a:d0:2e:d9:74:84:4f:93:31:85:25:
         db:80:11:06:7c:b4:3c:a8:23:43:2a:55:98:b9:63:0b:87:00:
         f0:af:a9:e6:45:d0:15:b0:bf:ed:7d:55:1d:13:85:b0:73:ed:
         c0:0b:41:63:7d:d8:49:c8:e8:da:0c:ef:8c:29:96:25:ff:94:
         04:68:23:ef:c7:12:3c:8d:26:3c:a7:e0:6f:ba:64:58:7a:32:
         a0:ec:fa:cd:38:9a:1d:86:e0:9e:3e:aa:42:92:c2:ca:36:d5:
         3f:e0:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:43:05 2025 by rpki-client