Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.mft
File:                     D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.mft (raw, json)
Hash identifier:          U4mIyl5LIhXeS8bSKv6hIJjGil7iW32r5Sva9qjVYlI=
Subject key identifier:   A9:74:42:E7:0C:47:44:0A:E4:9F:30:90:B6:B8:70:C9:89:17:17:00
Authority key identifier: D8:85:13:0E:44:A5:EE:4B:6D:B1:87:29:BF:AF:1D:19:E7:8D:A9:5A
Certificate issuer:       /CN=D885130E44A5EE4B6DB18729BFAF1D19E78DA95A
Certificate serial:       799036104C24933B106F7E1E48CED17FD858DEEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.mft
Manifest number:          013F
Signing time:             Mon 02 Dec 2024 14:07:43 +0000
Manifest this update:     Mon 02 Dec 2024 14:02:43 +0000
Manifest next update:     Tue 03 Dec 2024 15:59:43 +0000
Files and hashes:         1: D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.crl (hash: dlCfe61YAFmroIM7bPdaRWqCnVWqXQY+KprIZfPc85k=)
                          2: 323830343a363736633a3a2f33322d3438203d3e20323639363237.roa (hash: 8U+V6+7NUIGrNrALdlCw4ei8iq93dB3ANFryZ/EyHpo=)
                          3: 34352e3139302e35322e302f32322d3234203d3e20323639363237.roa (hash: SjtItByAgwqtI9w/mkOkkV6TQ8SEK7j07FGkg0ljkP4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:90:36:10:4c:24:93:3b:10:6f:7e:1e:48:ce:d1:7f:d8:58:de:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D885130E44A5EE4B6DB18729BFAF1D19E78DA95A
        Validity
            Not Before: Dec  2 14:02:43 2024 GMT
            Not After : Dec  3 15:59:43 2024 GMT
        Subject: CN=A97442E70C47440AE49F3090B6B870C989171700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:f2:06:4d:6f:aa:a7:b8:24:dd:b2:5f:f6:
                    81:5f:6d:e3:07:bb:1e:ab:5e:39:cc:e4:35:21:de:
                    df:b6:eb:5c:ae:d4:a3:3c:a5:65:6b:b9:2f:ca:22:
                    ec:8f:7e:0c:57:d9:b8:f2:a8:ad:7d:e0:7e:a8:41:
                    60:8c:bd:45:78:5d:9d:6a:7b:b2:a8:ce:c4:56:c8:
                    44:cf:aa:fb:48:22:01:31:49:c4:1d:d3:ba:66:10:
                    c6:ea:8e:f3:d4:ec:17:21:2b:9c:84:b7:65:73:70:
                    ec:d5:a5:8c:37:85:40:06:23:c0:2f:dc:09:b3:e1:
                    32:9d:11:79:82:62:8f:63:14:a9:a9:e5:b0:c9:43:
                    9d:7e:ff:c0:37:3f:f1:b6:ea:42:f9:02:36:a6:2d:
                    50:23:26:b2:c2:de:58:72:2e:85:51:a1:f9:77:d2:
                    71:ce:9d:87:99:7b:f5:fd:6f:57:c6:07:6f:00:f2:
                    30:d6:cc:61:fb:52:37:57:ec:ed:a0:e8:02:94:ac:
                    9f:ef:69:14:91:9d:48:f6:f1:8e:f7:43:92:34:e5:
                    0f:6a:bc:eb:01:64:74:2f:a6:d1:54:41:c1:df:50:
                    f7:08:09:5d:c7:c7:ec:12:55:7d:d0:f7:fd:a4:3e:
                    c6:2f:71:1c:7e:c7:4d:b9:bf:49:f0:7e:df:b0:b7:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:42:E7:0C:47:44:0A:E4:9F:30:90:B6:B8:70:C9:89:17:17:00
            X509v3 Authority Key Identifier:
                keyid:D8:85:13:0E:44:A5:EE:4B:6D:B1:87:29:BF:AF:1D:19:E7:8D:A9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/1/D885130E44A5EE4B6DB18729BFAF1D19E78DA95A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:83:4c:7d:a6:98:51:a5:c3:86:41:5f:b6:67:78:c1:64:
         0f:6e:48:f8:7e:57:8f:06:62:7f:62:b2:4a:76:e9:84:f3:4e:
         99:07:30:6a:6e:8c:64:28:49:76:5c:61:bf:0a:ed:3c:eb:e5:
         e1:c8:33:a5:9d:a9:cc:31:47:b8:61:bb:d2:29:4d:3d:d5:a6:
         28:5e:4e:35:9d:4b:c8:fb:f3:43:85:5e:1f:5a:ce:8f:f4:8f:
         5e:b4:87:96:8b:f7:b2:16:7f:ce:04:bf:54:43:35:21:f4:10:
         f0:d3:74:57:d5:a9:63:88:49:02:84:ac:88:bf:09:78:d6:77:
         69:aa:88:68:b3:3f:89:0a:9c:6a:13:b4:97:0c:37:89:9f:ea:
         7b:55:8a:b0:7c:72:ae:5b:08:c5:be:4a:b3:e1:fc:5d:02:83:
         a5:5e:4e:bd:23:c3:59:e8:ec:9e:39:e2:6c:63:9c:3a:eb:af:
         90:5e:34:29:08:3b:c0:51:4f:e5:d9:c5:07:6b:8a:01:d4:f2:
         1c:b8:37:e3:db:3a:67:75:f6:ff:a6:f2:8e:29:da:b2:98:8f:
         10:2a:18:dd:18:f9:4a:51:b1:2b:bb:76:43:15:7a:a0:74:2b:
         64:06:e1:6d:fd:ff:e0:5b:f3:ab:72:80:5a:49:01:73:0c:9c:
         7b:3c:d1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:02:01 2025 by rpki-client