Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
File:                     F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft (raw, json)
Hash identifier:          5KE/jpQHYN4JVS7SdJ4kz/ukpwbHX1XuWm9cd2OQPKQ=
Subject key identifier:   38:05:D6:E6:4E:DC:D5:F2:BC:06:E9:FF:41:11:AF:CB:97:53:2B:1A
Authority key identifier: F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2
Certificate issuer:       /CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
Certificate serial:       0A98AD05CCE91254A8BA1C24CEAB65CFED49C752
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
Manifest number:          EA
Signing time:             Fri 20 Dec 2024 20:28:32 +0000
Manifest this update:     Fri 20 Dec 2024 20:23:32 +0000
Manifest next update:     Sat 21 Dec 2024 22:11:32 +0000
Files and hashes:         1: 3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa (hash: GmaQeTZOFJs3menusG5mtFfmR0Luwo8fe+lN0gFr7So=)
                          2: F737E609C9AE9595DC55025FC95C8BF63244E8F2.crl (hash: mAxU+iWiEB8ns/1lw3zLozk9snurowffs7tggqZJce0=)
                          3: 323830343a323337303a3a2f33322d3334203d3e20323634313632.roa (hash: 3nirVVK6FJEFbEtvuDNbcgJs1cfo9Q5yOVgBMVpZjkY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:98:ad:05:cc:e9:12:54:a8:ba:1c:24:ce:ab:65:cf:ed:49:c7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
        Validity
            Not Before: Dec 20 20:23:32 2024 GMT
            Not After : Dec 21 22:11:32 2024 GMT
        Subject: CN=3805D6E64EDCD5F2BC06E9FF4111AFCB97532B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:a2:a8:7d:fc:3e:58:5a:e7:f1:2b:d2:f4:
                    2f:dc:1b:8c:00:57:87:b7:fc:b4:44:06:5f:4c:79:
                    90:3e:2e:03:f2:77:eb:a1:15:0b:10:7c:69:3d:2e:
                    7b:bc:4a:46:f7:50:f6:20:ad:4c:18:79:d1:e7:d2:
                    a7:cc:db:d2:d2:16:57:86:b4:d1:2c:7a:3a:32:1a:
                    c9:15:4b:23:c1:0c:96:39:d0:ca:73:11:93:51:66:
                    d2:cd:63:ec:67:ba:50:ed:42:0a:32:00:22:c2:1b:
                    03:a8:0f:cb:a1:98:88:4e:8c:eb:db:41:58:9e:fa:
                    eb:2f:b9:32:ad:e3:c7:c7:9c:ea:52:6d:ff:6a:0c:
                    df:56:a5:df:67:90:83:83:11:11:c4:a1:bc:80:b5:
                    77:99:6a:36:5d:9c:e9:4b:f4:59:23:f7:a5:e8:d2:
                    96:4d:67:1c:b1:ed:b8:b2:4d:50:63:64:1b:c7:7f:
                    01:2a:8e:75:a1:03:80:cb:5a:9d:36:f7:5b:f5:2d:
                    d4:1b:3d:99:13:87:b0:39:4d:f6:99:9d:22:05:a4:
                    58:d5:b5:7e:8c:ed:58:76:e6:5e:ce:dd:ad:a4:45:
                    c0:59:a8:b2:db:d9:9c:e7:67:ae:aa:a9:d4:46:37:
                    77:a9:5e:94:fe:35:b3:79:b3:fa:c9:b9:bb:89:a9:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:05:D6:E6:4E:DC:D5:F2:BC:06:E9:FF:41:11:AF:CB:97:53:2B:1A
            X509v3 Authority Key Identifier:
                keyid:F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:08:c8:71:e6:60:f3:57:7d:dc:6f:05:21:c2:07:26:94:69:
         e8:8c:d5:4a:82:e1:b0:eb:47:33:fc:b1:83:21:a4:57:3e:1d:
         f0:d3:a6:76:19:7e:ec:f8:65:61:47:39:ce:8c:c1:0f:d4:fc:
         1b:60:fe:a4:45:7e:ae:a0:e5:23:b9:b7:e8:ab:6e:6e:4e:18:
         0d:23:75:ed:ce:c0:d9:2d:a2:28:38:18:74:66:d0:0e:5f:5e:
         2c:24:a4:b7:9e:06:a9:51:83:94:76:f8:ec:65:ac:bf:91:80:
         1a:5c:5f:3d:14:40:ec:fd:bc:de:bf:d6:cb:af:0d:34:b9:87:
         7f:16:a8:9d:59:21:7f:43:62:cf:a3:b4:cc:e2:a8:11:1d:28:
         98:39:d5:32:d2:aa:db:ac:5f:a0:fb:c3:d6:86:3e:59:ef:b9:
         0b:53:0c:df:37:fa:1b:51:72:34:6a:99:e2:16:8c:21:7e:ed:
         47:fc:46:31:e3:ac:1d:36:51:f3:62:73:b3:6f:78:b8:b2:6e:
         df:29:34:9e:62:81:1c:6e:73:b8:1b:51:70:e3:a4:55:99:9b:
         63:b3:11:08:c7:86:d0:e5:1e:92:06:fb:7f:d4:cd:1f:c2:09:
         6b:98:01:78:c5:35:dd:a5:5c:5d:a4:2f:8e:fd:af:51:ab:04:
         d8:a5:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----