Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.mft
File:                     EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.mft (raw, json)
Hash identifier:          akR/mIATYBL0yaopMzlBrY3MfTRYa7cJHudarXGqmlM=
Subject key identifier:   CA:AB:0F:29:09:86:6F:30:F0:86:8E:6C:C3:EA:A7:41:14:51:61:01
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       32B09DEDB3F7743172BB2B4446F1F668AD043237
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.mft
Manifest number:          0120
Signing time:             Fri 11 Oct 2024 11:50:00 +0000
Manifest this update:     Fri 11 Oct 2024 11:45:00 +0000
Manifest next update:     Sat 12 Oct 2024 11:50:00 +0000
Files and hashes:         1: 3137302e3233392e3134332e302f32342d3234203d3e20323636333533.roa (hash: gtzsG0YLTgoiGwHPrY/2S6TBKNfDhCOpDivMFEVy7YY=)
                          2: 3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa (hash: 94IzcJ8entnDyXZz9MEcYYeWxfFifrQQawW74doJyiY=)
                          3: 3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa (hash: 1of8DeinXc5+EbEuNxwjhEJdgmshZGx++RVsVYYNn7g=)
                          4: 3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa (hash: EF3Vk0tLJRmFs/GU258yvgLYulNAU9dC3Q7EkGDuwvY=)
                          5: 323830343a333638343a3a2f33322d3332203d3e20323636333533.roa (hash: YnHaIzVY47VbOonxidaiZcheZWXGKwnn/62xa5ghPbQ=)
                          6: 3137302e3233392e3134322e302f32332d3233203d3e20323636333533.roa (hash: LNNBluZG8S4CGQHSDYw+ajxriS2dAq1dAfFodvohm1E=)
                          7: EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl (hash: jmMuj10rxFp45glv1GeZbRN5aGEsOuTlJ33uigD6eM0=)
                          8: 3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa (hash: 5QnXw14gvS0tanAmVkzX8lej+mGj9QA0YAL2wEVs2dg=)
                          9: 3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa (hash: L7UDSsamfjUXbKKUzhKItE5bvqtnve4WhKJ05HdaQ8A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b0:9d:ed:b3:f7:74:31:72:bb:2b:44:46:f1:f6:68:ad:04:32:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Oct 11 11:45:00 2024 GMT
            Not After : Oct 12 11:50:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:db:28:2f:35:26:e7:2e:37:18:a9:69:5e:
                    0d:e2:fc:bf:a3:a0:f3:fd:9a:14:bb:28:f2:15:06:
                    1b:23:8e:62:38:2b:58:f9:e4:ac:2d:84:46:f0:ec:
                    c1:ed:f5:5b:95:ac:62:dc:f3:0d:8a:f5:f2:6a:bf:
                    b9:75:07:8a:6f:2b:e5:02:24:c0:05:1f:26:d0:a0:
                    bb:a4:ab:c3:74:10:de:c5:8e:d2:3d:ac:0e:db:a2:
                    c7:a0:21:dc:f7:01:11:f7:c2:c6:db:1a:0b:94:96:
                    1e:d8:99:bb:f9:c2:66:ee:cc:6e:1f:29:8e:75:50:
                    af:20:32:3d:37:da:f8:27:84:4c:1e:7a:e3:d7:44:
                    d6:66:8e:b8:47:a4:41:84:a4:a7:49:78:70:b8:83:
                    17:2e:b0:09:ee:b9:44:06:33:5d:82:0f:78:7c:cc:
                    05:bc:d4:b2:ce:09:98:66:63:bc:fb:36:74:a6:18:
                    6a:41:ea:3c:d8:d2:47:50:3c:eb:08:b6:42:c1:9d:
                    80:07:b3:5b:07:38:ae:30:73:69:b3:e9:03:54:38:
                    6d:77:97:da:a7:be:1e:70:b9:a7:28:17:a7:cb:d0:
                    75:fa:a5:02:23:0f:bd:ad:2c:5d:3b:cd:e1:37:3c:
                    59:25:34:84:ef:2a:9c:c2:fd:c0:b0:08:00:0d:c8:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AB:0F:29:09:86:6F:30:F0:86:8E:6C:C3:EA:A7:41:14:51:61:01
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:63:e3:3e:02:4d:55:2b:a4:6b:46:75:04:e4:0d:cf:50:
         c0:8e:a9:48:59:83:dc:73:60:ff:fd:2b:06:42:6a:e9:51:7f:
         5d:8c:34:67:a1:b7:8b:ff:8b:fb:57:af:3f:f5:82:cd:e0:7f:
         2e:e5:2b:b0:66:85:b8:d8:87:86:a2:b2:cb:ad:52:e9:37:d2:
         68:57:68:31:33:12:3d:5b:55:d4:f0:63:d7:76:19:a9:6f:10:
         09:6b:be:50:2a:fa:a2:f6:f3:8f:d2:ef:0f:be:d2:c4:69:c6:
         ff:f5:c6:d1:20:57:5e:c5:a4:80:6c:41:08:ac:1a:83:06:93:
         98:7d:df:a0:c8:04:c7:dd:4e:6e:25:e0:2d:85:e7:8c:67:d8:
         87:9a:9d:1f:b5:98:5b:f6:2a:0c:eb:fb:b4:e5:95:7c:ec:da:
         17:53:1e:9c:3f:81:ee:81:9f:64:fa:13:89:d6:69:29:29:6e:
         68:39:a5:1a:3f:56:af:7d:59:86:15:2b:73:bf:ed:41:1c:41:
         6f:c4:94:f8:3c:1c:95:92:1d:ad:5d:19:99:25:b4:4f:7f:f5:
         dc:ca:4c:5b:82:ab:22:f6:44:a1:1f:5a:88:b6:75:13:96:a9:
         84:9b:33:4e:0b:a0:e5:61:dc:3a:48:dd:71:be:ea:16:78:c9:
         f5:63:18:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:45 2025 by rpki-client