Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.mft
File:                     DEC7A278CF3AD64BD52396CE08FE9432FC940997.mft (raw, json)
Hash identifier:          yNJ3CLyI0SnuGZhvCsn8sBLnwTn8+YngrGAO235OeuI=
Subject key identifier:   57:B8:8B:80:B5:45:2D:C1:F5:A1:85:00:A0:96:8D:58:D8:40:89:B7
Authority key identifier: DE:C7:A2:78:CF:3A:D6:4B:D5:23:96:CE:08:FE:94:32:FC:94:09:97
Certificate issuer:       /CN=DEC7A278CF3AD64BD52396CE08FE9432FC940997
Certificate serial:       439312CA3B53B81DB9A3E60BADFF2A8CA8DDF378
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.mft
Manifest number:          5D
Signing time:             Thu 06 Apr 2023 09:09:32 +0000
Manifest this update:     Thu 06 Apr 2023 09:04:32 +0000
Manifest next update:     Fri 07 Apr 2023 10:29:32 +0000
Files and hashes:         1: DEC7A278CF3AD64BD52396CE08FE9432FC940997.crl (hash: h8vT5v+cXfMpeWQGXhyShWzV7xIL+C3pqOPzLIWG7l0=)
                          2: 323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (hash: GHV7YNI7EexgcbWoKID94RByCcjeccQh45YWwttEmVk=)
                          3: 34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (hash: 4cRR79T/r4CquPZr1kWcMFFrgAA/hWfq3gdsSU0QSC8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:93:12:ca:3b:53:b8:1d:b9:a3:e6:0b:ad:ff:2a:8c:a8:dd:f3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEC7A278CF3AD64BD52396CE08FE9432FC940997
        Validity
            Not Before: Apr  6 09:04:32 2023 GMT
            Not After : Apr  7 10:29:32 2023 GMT
        Subject: CN=57B88B80B5452DC1F5A18500A0968D58D84089B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:78:6b:13:9b:1c:ef:95:46:7c:55:d7:f6:
                    03:eb:45:94:1c:02:17:3d:14:9e:a0:06:56:be:cc:
                    22:e4:70:24:04:b0:76:85:e6:77:74:f6:f8:8b:25:
                    1f:79:47:39:61:dd:69:49:8d:57:a6:50:bc:ae:da:
                    4a:b3:68:20:9d:82:83:23:2b:7a:76:5f:94:62:0f:
                    23:f6:fc:9f:e4:0f:eb:28:d0:45:7b:e4:10:1e:2b:
                    d7:1e:bd:98:56:78:d8:2a:28:e1:0b:87:b5:cf:f8:
                    f7:4c:2c:d7:68:bc:ec:fa:a8:5c:8d:5e:c0:35:3f:
                    82:2e:94:f1:0b:ad:c7:04:16:d9:58:66:0b:89:dd:
                    46:a5:b9:46:32:6c:27:35:8f:9e:40:ab:31:be:4a:
                    db:7c:48:76:c5:ba:f7:74:36:44:2d:cc:a4:a9:78:
                    f8:27:e9:b1:f6:ea:43:b8:d7:3e:f3:47:57:8b:81:
                    0a:8c:cd:ac:41:67:53:a6:6f:06:14:04:ad:6b:2b:
                    91:70:9f:d7:0c:31:73:70:d6:4e:5b:87:cf:00:36:
                    de:e0:86:ce:b1:6a:fe:60:f0:bb:3f:bb:5e:48:f4:
                    dc:e2:a7:ef:b6:4b:50:5f:ba:42:fd:d1:85:51:8e:
                    69:e2:70:f3:f3:3c:e0:e4:bf:f4:97:b5:c2:a5:14:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:8B:80:B5:45:2D:C1:F5:A1:85:00:A0:96:8D:58:D8:40:89:B7
            X509v3 Authority Key Identifier:
                keyid:DE:C7:A2:78:CF:3A:D6:4B:D5:23:96:CE:08:FE:94:32:FC:94:09:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/DEC7A278CF3AD64BD52396CE08FE9432FC940997.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0d:f7:d0:d3:4c:3e:0b:fe:a0:67:99:0c:d2:15:8e:80:76:
         89:77:8f:a7:27:00:86:2f:25:ca:2b:f4:8e:cf:1b:17:7d:b5:
         bb:97:ba:24:e5:02:9c:cd:1e:ed:d5:6a:25:8a:3d:34:7b:fe:
         7a:6c:61:13:0c:8f:6f:5b:14:f3:d1:b0:01:13:37:5b:dd:67:
         a3:4b:78:bb:d8:cf:85:44:93:66:db:07:c5:ee:e3:01:02:f1:
         72:1f:b4:5f:d5:74:8a:37:45:cf:98:fb:c4:14:aa:23:b9:4f:
         16:2c:f8:27:ee:80:a2:02:64:0e:1c:ce:b5:51:e1:e8:ea:75:
         1a:3f:a5:c6:33:18:9a:24:73:56:3e:9a:6e:2f:64:ef:67:2f:
         31:42:56:7c:ff:50:2a:63:8c:74:3a:e6:e4:87:95:1a:c7:a4:
         53:37:a8:4c:ca:63:3c:56:f7:fe:f8:20:61:e5:88:3c:bb:b5:
         cf:f9:2c:fe:03:c1:fa:92:ee:66:6f:66:7f:65:8a:6c:1d:7d:
         e1:8f:99:ab:5f:6a:33:e1:ae:6c:3c:4e:e5:39:69:e3:b1:5c:
         05:81:53:d8:28:6f:dd:e9:b0:9e:59:df:ab:e2:ac:9a:55:5e:
         3e:ec:a8:a2:4a:4f:ff:85:aa:b7:f2:2c:74:c8:e8:eb:ba:1c:
         84:23:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:56 2025 by rpki-client