Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft
File:                     AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft (raw, json)
Hash identifier:          GtZoz6TtMgsp0/qA8Y1qsyfn3hLYeLweoN68x3/ux1M=
Subject key identifier:   98:81:AA:3C:BB:DB:DF:39:84:0F:1E:42:89:CC:10:60:B8:31:DB:C7
Authority key identifier: AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66
Certificate issuer:       /CN=AA75E9D7C14B8290B067D83EABF023C9B420FB66
Certificate serial:       4858BD217F9ABFAB7E54258F661E02585AF31479
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft
Manifest number:          01D3
Signing time:             Mon 17 Mar 2025 15:20:01 +0000
Manifest this update:     Mon 17 Mar 2025 15:15:01 +0000
Manifest next update:     Tue 18 Mar 2025 18:57:01 +0000
Files and hashes:         1: AA75E9D7C14B8290B067D83EABF023C9B420FB66.crl (hash: 1JBG4P+a5AK2jG1AdtsOn21/Uc1eIhy9jBWzOnCDASM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:58:bd:21:7f:9a:bf:ab:7e:54:25:8f:66:1e:02:58:5a:f3:14:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA75E9D7C14B8290B067D83EABF023C9B420FB66
        Validity
            Not Before: Mar 17 15:15:01 2025 GMT
            Not After : Mar 18 18:57:01 2025 GMT
        Subject: CN=9881AA3CBBDBDF39840F1E4289CC1060B831DBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:85:e7:ca:c7:5d:61:3d:cf:8b:74:f8:6b:
                    f5:74:cc:32:df:37:5d:e3:33:d8:f3:bb:a3:ec:92:
                    b4:1c:f2:ec:4c:1d:24:24:44:64:0a:4c:ca:40:75:
                    14:cd:2a:ff:22:53:6b:51:3c:39:92:2d:92:f0:bb:
                    25:df:72:9e:ea:25:9c:63:2e:ce:3e:8c:3f:6f:c0:
                    6f:5d:fc:49:4e:63:dd:a9:31:28:ed:59:59:96:07:
                    ec:c5:95:1b:08:4f:09:7f:ed:67:fa:20:ce:e4:23:
                    56:2d:44:a5:ce:0c:c1:9e:bf:c0:e8:51:5e:66:03:
                    0a:3f:07:ed:f6:11:9e:84:51:7f:f6:50:bc:94:c6:
                    59:a1:6a:26:20:34:23:42:99:89:67:f9:44:6a:5e:
                    b3:02:34:c0:71:ec:f0:54:f8:a1:2b:22:8a:75:df:
                    32:4a:66:55:6d:55:2a:9f:ab:db:ae:64:18:68:0e:
                    05:c2:bb:a4:d1:93:f4:22:cd:26:15:a4:e2:16:5e:
                    31:45:75:fb:e9:8d:62:f7:d2:41:97:6f:30:6e:c7:
                    af:1e:84:32:b3:20:51:80:72:25:52:2f:b5:62:bd:
                    50:f5:08:5f:f9:d2:91:02:79:cd:8f:b3:07:e5:37:
                    9c:b8:dc:cf:fa:cc:f9:73:17:b1:90:92:00:8f:79:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:81:AA:3C:BB:DB:DF:39:84:0F:1E:42:89:CC:10:60:B8:31:DB:C7
            X509v3 Authority Key Identifier:
                keyid:AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:43:5d:23:7b:14:82:19:c4:cb:24:ff:47:88:61:6e:1a:1b:
         00:af:8d:98:38:75:d7:cc:1f:de:c5:14:7b:e9:dd:f6:7e:49:
         f7:ba:71:67:08:f1:a8:13:5e:2f:c0:79:9a:7d:c7:d0:9f:ae:
         86:d7:da:aa:73:c7:5d:52:20:ee:c3:b5:07:d1:a2:b3:1d:d2:
         1a:1c:46:bc:58:d5:73:6c:42:85:08:3b:af:29:b2:23:51:ab:
         ed:fb:da:c2:de:fa:d8:94:25:56:e4:c9:75:97:81:11:ab:84:
         5b:e0:e7:c9:bd:a9:69:92:03:18:77:af:a0:64:db:08:01:0d:
         b2:69:96:69:ff:80:24:4d:56:69:d6:67:62:9a:83:cd:57:39:
         db:32:8a:cb:23:4f:2b:14:49:25:3c:2c:93:76:c6:31:3a:ab:
         10:73:6b:b6:1a:fd:0a:41:32:49:d1:1d:42:77:76:78:4f:0d:
         17:e6:71:f9:be:11:2d:00:fb:09:c8:39:62:58:f3:7b:d5:06:
         76:a8:c4:56:63:ef:ce:67:e1:95:d7:7d:38:e8:b7:62:b6:3f:
         53:e4:8e:ba:c4:33:6c:82:20:6c:ca:b9:01:42:fc:80:0a:f1:
         4f:52:b5:7f:3f:ee:90:d3:b0:08:3b:5c:fc:95:97:f8:c3:24:
         0b:74:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:21 2025 by rpki-client