Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft
File:                     3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft (raw, json)
Hash identifier:          NdQz5dX9GcHvrLMDSi4T1qWDlvDEPP509OTy8cJHj/I=
Subject key identifier:   2F:D8:91:86:80:7A:8F:05:7E:21:78:47:F6:CC:47:CB:43:F3:53:BB
Authority key identifier: 3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8
Certificate issuer:       /CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
Certificate serial:       0268175B9CB783C13BF494762A43018B8C6C9E30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft
Manifest number:          DA
Signing time:             Sun 14 Apr 2024 17:51:47 +0000
Manifest this update:     Sun 14 Apr 2024 17:46:47 +0000
Manifest next update:     Mon 15 Apr 2024 19:55:47 +0000
Files and hashes:         1: 3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.crl (hash: 25SXqU7NnqmnrW/bjrK15BikuKQhmIEsUdExRww5xJM=)
                          2: 34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa (hash: yXdSsW3hx5SfLoS6TJhdBXiQdkIIYsjpYOliZGZ3Rfk=)
                          3: 323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (hash: mdWRqFoWzO3ezaaqqzDDbma4V4EDj9pbzfPF/e1gKwg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:68:17:5b:9c:b7:83:c1:3b:f4:94:76:2a:43:01:8b:8c:6c:9e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8
        Validity
            Not Before: Apr 14 17:46:47 2024 GMT
            Not After : Apr 15 19:55:47 2024 GMT
        Subject: CN=2FD89186807A8F057E217847F6CC47CB43F353BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:92:d8:e7:be:9e:3e:a7:5b:74:1c:7a:d2:
                    46:04:06:15:58:77:81:1c:d3:f8:93:83:43:f1:d2:
                    e0:c9:86:16:e9:2e:2d:76:55:8a:4f:ff:92:93:2e:
                    24:7f:c0:1c:56:21:c7:eb:59:ee:2d:49:85:7f:c8:
                    22:d8:5a:6f:bc:a3:de:34:cd:04:69:3d:b7:dc:5c:
                    2f:86:83:ee:85:94:6d:d2:d0:ee:9c:9f:da:da:2b:
                    d8:74:31:2a:39:a6:d6:c7:74:4c:5d:fe:79:1b:fb:
                    71:28:c8:92:df:f5:ed:08:b2:95:87:e2:eb:c8:9e:
                    ec:41:c9:10:dd:94:a3:bc:0e:2b:c0:bd:e5:4a:14:
                    00:32:50:ac:99:c7:97:ad:da:03:40:17:7a:e4:cf:
                    b7:15:76:a4:6d:6a:05:6c:4a:f7:a3:db:2f:6d:aa:
                    2a:22:28:c2:fc:fa:a4:ea:17:d1:d7:fe:ae:7d:bb:
                    57:30:39:eb:61:f7:84:80:e8:6a:53:43:73:93:8c:
                    5d:33:9b:83:ea:bf:a5:2f:71:26:15:a8:32:71:7d:
                    9d:da:80:5c:b1:2a:66:03:ee:2a:72:d7:44:1f:d3:
                    b4:3f:dc:dd:96:10:6a:f9:3e:2f:26:71:51:4f:9a:
                    9d:c4:1a:a7:9a:4e:88:a5:15:dd:1e:ba:c5:cf:b8:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:91:86:80:7A:8F:05:7E:21:78:47:F6:CC:47:CB:43:F3:53:BB
            X509v3 Authority Key Identifier:
                keyid:3A:D5:52:9C:A1:BE:DB:06:41:BC:71:82:E9:7E:66:4E:AF:EC:22:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/0/3AD5529CA1BEDB0641BC7182E97E664EAFEC22C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:65:b9:74:9d:64:67:61:dc:60:df:00:7f:bc:7c:a2:43:b2:
         80:ec:0c:be:22:8c:09:7d:47:80:cf:a4:9f:b2:72:f5:98:a7:
         0f:17:a2:59:3a:e1:aa:98:13:e0:38:da:57:df:5c:ec:b3:21:
         2a:22:e2:a0:be:23:cb:52:14:64:ed:08:d1:3e:83:c5:71:3a:
         2a:12:a5:40:1f:59:5e:4f:6e:ba:68:94:04:ef:3f:70:64:47:
         4f:64:ea:95:7e:c9:e4:3e:58:3b:5d:49:03:e4:9c:7c:96:74:
         3a:63:3d:3d:03:76:3c:03:10:76:d1:b9:d3:07:f5:69:f7:da:
         5b:7a:30:18:5c:26:b7:de:bd:1a:cb:93:f3:e4:90:45:e8:7e:
         54:70:d3:51:70:d2:82:28:81:0e:9e:9e:85:b9:56:e7:29:18:
         51:6a:b2:da:14:9a:e2:ad:a7:83:ab:8a:8f:aa:7c:17:1f:ea:
         d7:a5:f3:a6:84:92:57:a7:2f:8a:9a:58:fc:7f:f6:6a:4e:03:
         cc:87:46:56:c4:fb:98:71:60:d8:f0:b3:6a:f5:13:95:5b:e3:
         42:4e:73:db:68:18:e7:0b:bd:93:6d:0f:44:55:3a:f6:1f:8b:
         3d:12:5f:46:04:b1:08:6d:94:a8:b5:0a:73:96:2e:20:69:6b:
         96:62:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:01:35 2025 by rpki-client