Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.mft
File:                     2C4950C71122E144532D0ECA84E49D609A511FEF.mft (raw, json)
Hash identifier:          fnU4RqPtO00PcemkxdhkDGOqIkgtOBC32gEcbmYXpoo=
Subject key identifier:   AD:0F:73:D2:87:8A:42:5D:46:9B:E7:C5:C5:73:44:0B:B1:0A:1D:F5
Authority key identifier: 2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
Certificate issuer:       /CN=2C4950C71122E144532D0ECA84E49D609A511FEF
Certificate serial:       27AE20C2CC70197965DB8153D6D74C5A07E08361
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.mft
Manifest number:          63
Signing time:             Sat 13 Jan 2024 23:08:52 +0000
Manifest this update:     Sat 13 Jan 2024 23:03:52 +0000
Manifest next update:     Sun 14 Jan 2024 23:42:52 +0000
Files and hashes:         1: 323830343a3466383a3a2f33322d3438203d3e203238323633.roa (hash: zExzLjCYYdgX+abnQJuWuPlWYdQU82T351lnA8AQ5wQ=)
                          2: 3230312e34392e36342e302f31392d3234203d3e203238323633.roa (hash: gxR9FobN4Fjlk5pi5ZuSshyZVBAY9YmcBmftyDENr1s=)
                          3: 3138372e31372e3136302e302f32302d3234203d3e203238323633.roa (hash: K21PTFG1RfxJ/ZSjyfzeoRn7689NCRWbHWPB9FrJXbw=)
                          4: 2C4950C71122E144532D0ECA84E49D609A511FEF.crl (hash: mmeZ+K5DrrukMoZ4ohGHLtkz4FOlLJpC6+5lMkdopls=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ae:20:c2:cc:70:19:79:65:db:81:53:d6:d7:4c:5a:07:e0:83:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4950C71122E144532D0ECA84E49D609A511FEF
        Validity
            Not Before: Jan 13 23:03:52 2024 GMT
            Not After : Jan 14 23:42:52 2024 GMT
        Subject: CN=AD0F73D2878A425D469BE7C5C573440BB10A1DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:cc:6b:77:cf:81:67:30:f5:9a:ae:3d:14:
                    bd:b1:ec:12:ea:3a:27:9c:5a:34:31:94:b4:da:11:
                    cc:0d:b2:ac:e2:c2:e4:e3:27:28:ba:aa:91:27:50:
                    3e:28:de:15:11:d2:b7:4f:dc:b7:cb:75:23:f9:f5:
                    84:24:b2:13:ed:44:7a:fb:1f:68:60:38:30:b9:c1:
                    62:18:6e:87:65:02:bf:2e:07:2e:59:c1:27:9b:8e:
                    e8:06:db:cd:e9:3f:9f:ca:ca:54:41:63:ee:ee:a2:
                    79:cf:8b:03:1d:c1:a1:15:8c:15:aa:c3:52:80:09:
                    ac:97:9f:e9:51:ff:3c:b0:86:04:d9:6e:54:10:31:
                    28:9c:ef:cb:10:36:1c:7b:87:31:08:f3:fd:d8:48:
                    e2:9f:6b:e4:ca:91:99:ca:11:61:77:ce:95:b0:1b:
                    e8:31:28:b2:bf:ae:f4:ba:54:31:3b:1f:47:9c:2c:
                    de:2d:3f:12:d1:f7:36:1a:b5:58:63:3d:c2:3e:a2:
                    fa:5a:0b:85:99:4a:f2:3a:05:4b:7d:cf:e8:a0:18:
                    d2:02:90:9d:d0:8e:c4:30:81:2f:7d:9e:b2:a6:60:
                    83:67:95:43:34:f1:9d:51:f9:b3:f3:01:ad:c4:45:
                    a4:fc:fd:8d:04:0b:cb:ec:ed:6e:f3:b0:60:8d:9e:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0F:73:D2:87:8A:42:5D:46:9B:E7:C5:C5:73:44:0B:B1:0A:1D:F5
            X509v3 Authority Key Identifier:
                keyid:2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:90:33:48:b4:58:f3:8f:7c:c4:bd:e1:df:78:50:a3:19:e2:
         b2:07:2a:1f:5d:55:55:23:22:8d:67:94:7d:47:c8:8a:dd:09:
         2b:44:0f:99:e4:32:bc:be:f9:f4:17:92:7a:71:7c:22:ef:f0:
         7e:20:52:ef:29:1d:1c:25:d4:d8:a0:ac:04:21:5b:3c:be:4d:
         3c:77:e5:f6:77:21:b3:90:3e:61:ad:ff:45:0e:51:82:58:65:
         2f:ef:f0:02:5f:e9:09:64:fb:7f:5a:b3:f2:c6:99:61:fd:15:
         78:11:a7:74:a6:e9:09:09:20:32:43:df:d4:66:6f:4a:62:de:
         77:42:6b:76:41:4b:85:c3:9b:57:d8:c8:75:4f:3f:82:f1:10:
         9a:5f:05:44:c9:18:bd:59:c6:ef:d0:96:a4:b0:c8:c5:8d:5e:
         dd:a7:a2:6a:b3:1c:3f:b6:3f:e9:b5:f6:db:db:54:62:83:f3:
         fe:4e:15:29:b9:aa:d5:c2:6a:cc:76:19:10:15:df:0b:f3:45:
         cf:30:c9:d6:62:26:63:56:37:c1:8f:ca:29:70:b1:e7:e3:ad:
         cd:1b:20:b8:ab:0b:63:5b:23:d3:ab:76:56:88:65:74:bb:a4:
         ce:c6:1e:99:0e:84:4d:fe:08:36:8c:bf:67:81:68:4c:b0:cb:
         f9:29:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----