Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.mft
File:                     42F1C78060CC641617C8788CC89AA356D71F344F.mft (raw, json)
Hash identifier:          DLxdIdLSv1OXEl/FAhzXAegriKz2U40LsvNACre9D44=
Subject key identifier:   46:A7:EA:8C:33:31:26:7C:27:DE:2B:EF:BA:AB:D2:F6:39:F5:4E:7F
Authority key identifier: 42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F
Certificate issuer:       /CN=42F1C78060CC641617C8788CC89AA356D71F344F
Certificate serial:       5C380B815CA2D8861F0CA257E34D449715D5E3E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.mft
Manifest number:          016D
Signing time:             Fri 03 Jan 2025 15:25:56 +0000
Manifest this update:     Fri 03 Jan 2025 15:20:56 +0000
Manifest next update:     Sat 04 Jan 2025 18:13:56 +0000
Files and hashes:         1: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: U0i4Yq+WUYddiSAHwVS2v9eM+D/q+zMy+i675bbmlxU=)
                          2: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: LEdyPh6aoBmL5R1REd7zd040lXzzdg0V048z4YxIViA=)
                          3: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: BME9n1BUGXotEq5M3188ns7ORE2HIQ/aGYIeSezd66k=)
                          4: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: HCtVfxUGWKX/P37KryMpWD7YUyuPozAqIIArorHwkqU=)
                          5: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: 4XINJsbH13Gxm8KJg51Kc36aaa4K1AcFgcjiVFlx0vs=)
                          6: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: 5Beu0I/ABAuYMJ3WI98mbLSSRyQPZkFXupXyQ0bzKd8=)
                          7: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: PNAk0BE0sumRMV6l9eoDAxX0BseeLxkk50LJRR11x5s=)
                          8: 42F1C78060CC641617C8788CC89AA356D71F344F.crl (hash: eBOw4PNMgksjVMbEueXoFKHYZz6ThlpplBaUtTFed/g=)
                          9: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: aHJHGcRThQxnbnym3BNjgMoxGYmBaZAnRYT6e+Le7wI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:38:0b:81:5c:a2:d8:86:1f:0c:a2:57:e3:4d:44:97:15:d5:e3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F1C78060CC641617C8788CC89AA356D71F344F
        Validity
            Not Before: Jan  3 15:20:56 2025 GMT
            Not After : Jan  4 18:13:56 2025 GMT
        Subject: CN=46A7EA8C3331267C27DE2BEFBAABD2F639F54E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:64:41:e8:6e:e9:1f:07:e0:7e:b0:70:15:
                    55:36:97:0c:1f:37:45:b7:a5:2f:10:9e:28:83:9d:
                    08:9d:54:ed:0c:3e:64:a7:13:c1:57:40:c2:e8:96:
                    57:31:b8:30:c8:9e:84:ac:1f:3b:71:5b:e3:ae:c7:
                    15:59:f3:a7:f4:3c:b7:d1:b5:4e:14:ca:cc:e7:f0:
                    00:79:47:a7:d3:6f:65:41:40:27:36:87:05:7f:c5:
                    11:9b:f8:17:83:d1:da:ca:81:66:83:18:21:cf:98:
                    58:55:ee:35:48:fb:ed:d9:ef:ce:67:ab:63:bd:eb:
                    ec:d4:7e:93:01:92:26:f5:13:df:8c:9c:50:d1:e9:
                    bd:f4:b4:35:15:59:d8:d7:bf:64:da:20:66:41:e1:
                    f3:6f:be:a0:fa:2c:73:ea:c0:3b:73:66:83:24:38:
                    32:a6:5f:92:43:22:fd:62:7e:08:23:fd:9b:d7:f7:
                    0e:c4:d7:41:85:80:19:c2:f7:95:17:89:6c:44:4b:
                    c3:27:c6:d8:e9:36:3b:d1:09:ba:d9:33:c9:29:4a:
                    e1:25:c1:b1:b9:4d:2f:37:cb:31:5f:ea:89:f1:74:
                    19:f4:94:1e:3a:f3:40:70:13:96:5f:c3:ee:72:ed:
                    ed:af:2b:f4:87:fb:41:c3:b5:d2:62:c3:ca:02:45:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A7:EA:8C:33:31:26:7C:27:DE:2B:EF:BA:AB:D2:F6:39:F5:4E:7F
            X509v3 Authority Key Identifier:
                keyid:42:F1:C7:80:60:CC:64:16:17:C8:78:8C:C8:9A:A3:56:D7:1F:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42F1C78060CC641617C8788CC89AA356D71F344F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/1/42F1C78060CC641617C8788CC89AA356D71F344F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:db:15:d1:23:fc:79:4d:42:01:7e:da:fa:e8:81:87:b9:
         e3:26:67:c6:44:50:0f:b5:84:25:5c:f1:35:9c:a4:36:de:49:
         3f:a7:90:b6:b4:97:4e:d9:73:52:89:e5:d0:b2:fc:6e:d3:51:
         72:9f:5c:47:39:28:32:93:65:a5:e9:62:b8:fe:6e:71:a2:ca:
         af:62:2d:9e:42:e0:fc:37:06:6a:9f:cd:9e:26:60:5a:0c:5b:
         a1:09:2a:24:a4:16:09:81:f2:5b:5b:e1:d2:10:b7:1f:cf:fe:
         f2:f6:68:32:1f:97:06:cd:55:50:10:25:27:b7:60:12:25:cb:
         d6:d5:73:1a:f5:bd:5b:c6:5e:96:89:e8:2f:4f:48:f1:0d:17:
         4b:3a:34:07:4b:71:7b:1e:0b:8f:45:47:47:a3:25:9c:f5:fb:
         82:64:85:54:82:51:e7:4b:3e:76:18:5a:64:7d:64:ae:f6:66:
         8e:60:13:21:96:12:5f:4a:99:31:8d:59:ef:8e:84:7b:da:0a:
         f0:00:a4:e5:bd:9e:e9:db:47:2d:ac:da:6a:c1:de:5a:ce:d1:
         c3:02:a6:69:e4:eb:6c:79:e9:91:2e:53:b1:7e:12:72:2b:02:
         47:f9:82:55:8c:c8:4d:d0:6e:fa:34:fc:c1:32:cd:dd:c6:eb:
         8a:c9:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:48:46 2025 by rpki-client