Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft
File:                     3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft (raw, json)
Hash identifier:          7bUbJGSN/s7idX9cToOqoZO21d7qLXk3NplHH2K5mlk=
Subject key identifier:   17:69:6D:41:04:97:D1:1F:EA:DD:E1:4D:B7:35:05:30:BF:3B:60:06
Authority key identifier: 3D:38:F4:A1:CA:6D:BD:93:4D:E8:9C:11:5C:65:43:9B:BE:50:FB:A8
Certificate issuer:       /CN=3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8
Certificate serial:       0E3CF7A3A5F480FE84EB8A538604A57BFDD92618
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft
Manifest number:          15
Signing time:             Mon 04 Nov 2024 06:38:24 +0000
Manifest this update:     Mon 04 Nov 2024 06:33:24 +0000
Manifest next update:     Tue 05 Nov 2024 10:10:24 +0000
Files and hashes:         1: 3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.crl (hash: taj3d7TcZ5PEO1kTYGoj2uNwU5NI/EHeq7xednPaTzQ=)
                          2: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: q1m3QIJp4jFUEMeFF2aJhYd4Lp+/32GIqZSqyl24erw=)
                          3: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: rMrkvP9QmWN+h2PB6NEsCgH6dlZXDlDmfpsFIfqiCT4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3c:f7:a3:a5:f4:80:fe:84:eb:8a:53:86:04:a5:7b:fd:d9:26:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8
        Validity
            Not Before: Nov  4 06:33:24 2024 GMT
            Not After : Nov  5 10:10:24 2024 GMT
        Subject: CN=17696D410497D11FEADDE14DB7350530BF3B6006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5d:fc:1e:02:fe:5f:fb:ba:80:bd:5c:d6:c2:
                    85:02:03:63:3e:1f:51:e3:5b:b2:3b:75:fa:ad:ec:
                    85:d2:18:db:6b:fa:b6:c5:e7:9e:e0:07:69:f7:9a:
                    fa:78:74:aa:83:0c:0e:f6:5c:3c:4a:a1:e1:48:f4:
                    d1:bf:85:1b:88:83:ed:5f:91:f4:80:71:51:c3:7e:
                    b3:69:97:bc:71:3f:42:54:4a:d5:06:1c:28:35:eb:
                    28:6e:dc:d6:d4:5d:7f:9e:ca:5c:f6:e6:0e:f0:fc:
                    99:40:9d:bc:54:36:f1:d7:ab:fc:9f:45:d4:a1:e7:
                    f9:78:8e:f3:c7:09:49:0b:80:f4:9c:69:5c:07:79:
                    db:62:bf:56:1e:b5:d5:56:96:51:30:f7:a7:05:87:
                    f8:1d:50:09:c5:96:87:32:dd:fe:5d:ef:99:d2:c3:
                    f3:e1:9f:97:b6:73:cc:2f:ff:0f:4d:19:98:49:97:
                    36:d3:5e:e0:79:63:0b:66:79:46:6a:d7:13:80:1f:
                    81:fa:84:34:77:9b:f1:46:da:b7:e9:49:2b:d7:01:
                    1d:cd:d7:ef:8a:c4:a5:8a:90:aa:e1:96:1f:aa:23:
                    0e:38:ca:d8:00:bf:7c:09:f6:b0:5b:91:d0:bc:5d:
                    ba:c6:8f:ee:77:a7:3f:09:e2:b9:68:e8:7a:0f:91:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:69:6D:41:04:97:D1:1F:EA:DD:E1:4D:B7:35:05:30:BF:3B:60:06
            X509v3 Authority Key Identifier:
                keyid:3D:38:F4:A1:CA:6D:BD:93:4D:E8:9C:11:5C:65:43:9B:BE:50:FB:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3D38F4A1CA6DBD934DE89C115C65439BBE50FBA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:74:01:ab:8d:4e:e8:ff:0e:c4:e8:ac:df:09:57:0d:5d:16:
         10:37:af:18:66:5b:25:e6:b6:29:c9:a2:54:0f:0b:78:a6:3b:
         b6:71:f2:b7:90:ed:b4:d1:1f:c2:25:de:26:da:34:35:41:51:
         8d:56:00:32:7f:97:0a:87:e7:45:21:4f:ed:8e:ff:d9:d6:05:
         ea:f3:3f:03:50:cc:d3:2e:ee:d5:a4:1d:b7:de:63:ad:64:42:
         52:e5:7a:08:1c:63:2e:4a:1c:f3:68:c1:cc:6b:f2:3f:46:06:
         97:55:9d:ea:64:6c:f4:7b:45:38:36:86:89:60:de:05:4e:b6:
         74:fa:24:f3:46:74:68:ef:9a:fe:cb:c3:a6:9f:96:1a:4f:bf:
         8d:d4:a7:62:94:9c:dd:43:99:90:9d:3b:3d:c9:72:86:1b:d6:
         a4:69:c5:dd:22:53:73:91:af:43:76:e7:32:9a:b4:64:e6:20:
         05:96:b0:06:cb:d6:78:9d:8a:b6:a3:a3:5a:61:38:59:48:ca:
         62:2b:b9:08:90:38:93:77:97:05:b1:39:77:2c:ec:54:9a:a8:
         db:43:cc:9d:5b:ba:87:52:4a:b8:21:1c:fd:c9:e6:b1:97:dd:
         74:30:05:30:de:8d:1c:a0:38:29:7b:a8:5f:26:5a:c4:2b:13:
         35:ed:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:56 2025 by rpki-client