Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.mft
File:                     7844A4130B44EBA72382E59A5F8133D0DA50FC7A.mft (raw, json)
Hash identifier:          DB+9t2UARBcrShrHj8wQoX8/UzGvEWdaWv9mlfCCduk=
Subject key identifier:   43:78:C7:FF:97:62:FE:BB:60:9F:02:B8:96:75:74:1A:6F:6F:26:C8
Authority key identifier: 78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
Certificate issuer:       /CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
Certificate serial:       2680B843052AF99367BB2048951D953D4577EE7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.mft
Manifest number:          44
Signing time:             Sun 25 Aug 2024 12:08:43 +0000
Manifest this update:     Sun 25 Aug 2024 12:03:43 +0000
Manifest next update:     Mon 26 Aug 2024 14:32:43 +0000
Files and hashes:         1: 323830343a336237383a3a2f33332d3333203d3e20323636313531.roa (hash: nTrj1C8AjJgV3HMym3z87UKZC1pynfve31vTr52tM40=)
                          2: 7844A4130B44EBA72382E59A5F8133D0DA50FC7A.crl (hash: ayRb262/SyYsYF6oOF9gq6adUGKtjo8RvzH0JzJ2Bvs=)
                          3: 3136302e3233382e3130362e302f32332d3233203d3e20323636313531.roa (hash: C1lUKpP/j2zqQvXGj1TLoIG1LLgpO/Acyzm1jV9yFQE=)
                          4: 3136302e3233382e3130342e302f32332d3233203d3e20323636313531.roa (hash: BYq9pB6SGGzSQK9gBpT2ml/MleFkngJWXJD+H2ATuSw=)
                          5: 323830343a336237383a3a2f33322d3332203d3e20323636313531.roa (hash: r3hCHI4hFEupin34q0q/pjsxenpTyKE6/+EkRpclo5E=)
                          6: 3136302e3233382e3130342e302f32322d3232203d3e20323636313531.roa (hash: O3JEp0NAdUMPR/uUBNKQiu37azbFsTFLki8HMUyj4NU=)
                          7: 3136302e3233382e3130372e302f32342d3234203d3e20323636313531.roa (hash: fEV0gB/ylw3rjlBYK3Rt5Q5NGVyH8D3J4P88/7sda2o=)
                          8: 323830343a336237383a383030303a3a2f33332d3333203d3e20323636313531.roa (hash: 7hYlqlktFeIKN/ycbFh6VNcTSgvVaWO7NTyICQvM3bU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:80:b8:43:05:2a:f9:93:67:bb:20:48:95:1d:95:3d:45:77:ee:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
        Validity
            Not Before: Aug 25 12:03:43 2024 GMT
            Not After : Aug 26 14:32:43 2024 GMT
        Subject: CN=4378C7FF9762FEBB609F02B89675741A6F6F26C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:2f:91:16:d6:94:19:b6:48:e9:e1:e2:bf:
                    55:c0:dd:1f:ae:b8:64:b0:d9:f0:06:94:f4:f5:a9:
                    fb:76:f4:15:b6:a5:90:45:20:c5:12:c3:3c:d5:73:
                    fd:3b:ac:ff:c7:91:7e:f1:5e:c8:78:29:cf:72:ac:
                    d0:e5:8c:7d:72:91:e1:87:53:63:20:4b:ac:35:a9:
                    8f:43:20:a4:e5:1a:61:99:a5:fc:0e:76:bf:e3:73:
                    e4:be:98:7c:3d:b0:c7:95:11:8e:c8:2d:f7:65:77:
                    30:76:aa:7d:5c:b1:18:bc:01:a6:1d:69:31:04:5c:
                    32:04:70:c0:1f:c2:97:bc:d4:aa:d9:b5:ab:58:8e:
                    4a:ce:cb:32:98:a8:4c:03:3d:7f:71:ac:7a:f3:fc:
                    5c:df:f8:fc:d8:75:cb:c3:d8:c0:9d:39:4e:b4:ef:
                    71:d7:08:0f:eb:ec:e5:00:36:a5:0c:47:8f:ee:0b:
                    f8:63:8b:9b:3d:1d:31:9c:5f:4a:fa:66:fd:53:00:
                    58:0e:ba:16:c0:30:47:bc:c8:93:12:80:cd:5d:88:
                    31:29:50:60:8a:2a:24:4f:79:65:70:66:39:f1:e4:
                    99:5a:86:b1:1f:88:a8:39:1d:41:ce:84:e7:a3:ac:
                    17:52:cb:70:62:a2:15:2c:bd:ee:bc:ad:99:ab:1a:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:78:C7:FF:97:62:FE:BB:60:9F:02:B8:96:75:74:1A:6F:6F:26:C8
            X509v3 Authority Key Identifier:
                keyid:78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:24:ca:ac:65:66:ba:ce:dd:8b:00:43:ac:34:a6:70:fc:
         26:13:8f:7d:c4:f3:87:bb:ef:70:72:b5:ec:2a:a3:b7:e8:b4:
         ba:6b:c9:ff:2b:a2:0e:26:b5:69:07:1f:3f:d5:7f:29:e8:90:
         dd:cd:b9:91:ac:51:a7:54:7a:ed:d6:7b:2f:8a:8c:60:00:c1:
         97:94:f5:14:94:b0:9a:48:ec:31:c6:55:d9:fb:84:7a:7f:30:
         8c:64:b5:4d:9e:1d:e6:55:9a:d4:d5:bc:0d:9b:31:59:aa:56:
         b5:00:3d:b7:93:d6:f9:f3:36:b5:36:2b:fc:e6:27:2d:e9:6b:
         b3:fc:e9:2c:a6:89:4b:52:9f:fe:d2:a5:ee:be:1b:42:7e:4c:
         ea:14:da:dc:7d:4b:55:59:81:75:b5:d4:18:a9:af:ca:a7:d2:
         f4:d1:ea:f9:f5:24:cb:72:4c:2f:9b:84:fe:b8:47:f1:f1:cf:
         92:4b:42:cc:87:c2:a7:75:31:49:92:6a:5d:65:7c:a3:fb:07:
         22:ae:b2:2e:9d:9b:f9:de:d3:7a:cf:5e:77:f8:2e:e7:71:99:
         5d:77:87:a3:99:ee:a8:46:c7:09:dc:2c:ce:e1:08:f3:7e:13:
         25:4c:77:21:7c:de:f4:9d:8c:86:9a:e5:70:0f:e7:63:fe:7f:
         7a:94:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:26 2025 by rpki-client