Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft
File:                     C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft (raw, json)
Hash identifier:          /mo1gohsPm3fG2CqsCIiQVxmVk21U2nhbRFYEwmW4NA=
Subject key identifier:   7F:01:8C:69:16:4D:17:A5:40:14:CD:3C:88:D1:0A:E7:C1:E6:AC:BB
Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49
Certificate issuer:       /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
Certificate serial:       09670DE18708BB0902F4D7AC4B837D407814C680
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft
Manifest number:          01DB
Signing time:             Sat 29 Mar 2025 09:27:56 +0000
Manifest this update:     Sat 29 Mar 2025 09:22:56 +0000
Manifest next update:     Sun 30 Mar 2025 12:53:56 +0000
Files and hashes:         1: C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl (hash: IWldWQtT+ztvy1f2yTUNzZryrRmj1XwPn8hr5PN+gbg=)
                          2: 34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (hash: xkndpxSWLgIvlVDbgR0GBVWnaeOnom0T/C1prhscmG8=)
                          3: 323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (hash: l5tMqCIL7uBusTfXV1I+XZ+H5PbxWfeLrf5CFIwer+Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:67:0d:e1:87:08:bb:09:02:f4:d7:ac:4b:83:7d:40:78:14:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
        Validity
            Not Before: Mar 29 09:22:56 2025 GMT
            Not After : Mar 30 12:53:56 2025 GMT
        Subject: CN=7F018C69164D17A54014CD3C88D10AE7C1E6ACBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:27:1d:ce:12:7f:33:b6:31:bf:05:2c:be:
                    09:8e:01:d8:99:50:f0:e3:2e:76:b8:97:90:5d:d3:
                    9f:cf:1b:1b:19:41:7a:13:b4:97:f0:33:d1:d7:ec:
                    69:cc:99:35:db:30:c1:8f:d8:d0:20:b8:37:85:27:
                    c6:ea:c6:99:aa:9e:61:76:6b:d7:26:f1:89:a2:bc:
                    f5:17:50:c3:78:4e:28:93:ce:4b:c7:98:60:47:c6:
                    fd:78:1b:f8:c2:51:43:b9:7f:8b:40:ce:b0:f4:e5:
                    9d:25:63:e5:0b:1c:49:24:ae:2c:71:58:42:88:6a:
                    31:9e:0b:c0:54:b6:e5:e9:e2:18:8f:f7:83:37:3e:
                    67:78:10:3a:12:4e:f7:8c:37:4e:a6:81:9a:23:72:
                    e3:21:4c:5f:61:07:1f:b7:4f:a2:64:8b:ae:34:83:
                    13:4b:c3:99:5f:9a:f8:5c:3b:a2:fe:f3:24:20:f2:
                    b7:91:23:a2:28:40:38:10:49:20:b2:8c:13:f7:2e:
                    64:09:dc:ba:cf:78:4b:72:66:26:ca:ed:d0:76:91:
                    e9:56:c0:5c:e4:54:c7:8d:36:70:cd:43:4f:6e:9c:
                    ba:c7:89:7b:8b:a4:f1:e1:76:03:be:cd:62:d9:0c:
                    3d:51:bd:f0:76:22:81:cd:e1:bb:f9:f5:bc:aa:a2:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:01:8C:69:16:4D:17:A5:40:14:CD:3C:88:D1:0A:E7:C1:E6:AC:BB
            X509v3 Authority Key Identifier:
                keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:f4:cb:05:8a:cf:ae:b9:1d:b5:35:9e:dd:42:ea:04:19:
         fc:33:b8:e0:5f:65:0f:04:6a:43:4e:a4:5b:b9:35:ff:20:a7:
         d0:91:24:7a:13:57:65:f5:fd:89:a9:de:1d:87:cd:c4:62:78:
         8b:44:bd:68:8d:19:cc:df:cd:89:1d:e6:e5:ae:e0:63:c2:ab:
         63:75:ae:9a:d6:20:86:3f:3f:cc:a1:14:aa:0d:bf:22:95:e5:
         e9:a1:5a:34:21:f8:7e:ae:42:0f:c7:f7:70:7c:65:d5:80:d5:
         cf:97:c5:a4:23:9a:4e:6a:85:5e:c4:04:cc:59:d5:c0:62:05:
         9e:2a:c6:6e:81:a1:4e:02:07:07:12:38:9e:79:b1:45:2c:b1:
         b7:57:b7:83:8a:5a:95:02:37:e0:65:c7:9b:59:96:7a:a6:2d:
         d6:1d:15:e0:4f:aa:d2:bd:8a:be:4c:42:8e:5d:da:ea:2a:e0:
         22:0f:17:6a:e9:3b:7c:ce:ff:cf:cf:5b:d5:60:2a:bb:bc:5f:
         d3:ba:d8:4f:1f:c0:a5:fb:02:0b:b6:f6:68:c9:10:2c:c2:f3:
         ed:fd:70:f5:ae:92:d3:c5:38:8e:49:7b:70:05:5f:ab:16:9d:
         45:ad:4b:c4:bf:b1:f6:f7:dd:2f:6a:44:7d:58:05:8b:22:11:
         39:c5:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:33 2025 by rpki-client