Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.mft
File:                     A416EC91EB730A965AC756B83ABC9AE436C3DFC1.mft (raw, json)
Hash identifier:          hBEOaRzisQtekd+4EYukS+KiyJG8SK4kyBjGWFVYF9Q=
Subject key identifier:   2C:2E:00:5B:98:18:82:84:D1:99:DB:FF:79:50:68:C7:F8:C5:69:1A
Authority key identifier: A4:16:EC:91:EB:73:0A:96:5A:C7:56:B8:3A:BC:9A:E4:36:C3:DF:C1
Certificate issuer:       /CN=A416EC91EB730A965AC756B83ABC9AE436C3DFC1
Certificate serial:       572A8500010222E40745C61B3A5CB49B376AFE4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.mft
Manifest number:          02
Signing time:             Mon 14 Oct 2024 11:52:16 +0000
Manifest this update:     Mon 14 Oct 2024 11:47:16 +0000
Manifest next update:     Tue 15 Oct 2024 15:34:16 +0000
Files and hashes:         1: A416EC91EB730A965AC756B83ABC9AE436C3DFC1.crl (hash: 1pyzoNc3wLV86DGJTyTYMTG6J+UbBr+IgUdPFLVaqCI=)
                          2: 323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (hash: nsTYaO/myWT/MwE77+i/lZs+HL6JNZYykzB5GyvGrdM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2a:85:00:01:02:22:e4:07:45:c6:1b:3a:5c:b4:9b:37:6a:fe:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A416EC91EB730A965AC756B83ABC9AE436C3DFC1
        Validity
            Not Before: Oct 14 11:47:16 2024 GMT
            Not After : Oct 15 15:34:16 2024 GMT
        Subject: CN=2C2E005B98188284D199DBFF795068C7F8C5691A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:99:7d:c8:79:be:36:50:a1:6d:cc:52:a5:
                    83:6b:ec:e6:b4:84:1d:06:86:fc:2c:68:da:aa:08:
                    b4:b3:35:db:b5:2b:0b:8c:58:40:d9:dd:e3:ed:e9:
                    46:ee:3e:7d:c5:79:74:8e:8b:f6:4b:23:04:5b:54:
                    55:b9:73:0f:ab:a5:56:3e:4c:4d:aa:4b:47:af:a7:
                    0c:c8:0a:75:dc:45:a8:06:4b:c4:eb:0f:f9:b4:63:
                    21:92:07:1d:9f:b4:b1:94:b2:74:77:f4:57:a8:3f:
                    ac:ce:50:42:5c:bd:5c:64:70:9e:72:35:2b:f7:cc:
                    be:c5:a7:48:18:e3:03:f9:d5:da:7d:bb:7b:47:d8:
                    8c:59:df:be:76:66:35:e2:15:be:8b:90:ef:d2:cb:
                    af:f6:9e:c6:43:89:b2:6e:b3:e9:0c:60:d5:bf:e3:
                    66:29:99:86:66:e3:9e:32:6c:0d:7e:99:fa:96:22:
                    3a:da:7d:d3:5a:d5:6e:82:d8:e4:01:83:31:bf:fd:
                    41:c4:a7:43:e0:92:fb:20:4a:69:7e:52:91:28:e6:
                    a1:23:30:36:6b:7d:bd:7e:89:cc:ab:b1:19:b5:c6:
                    63:2a:c2:b3:b5:d4:dd:8a:5c:17:68:22:c0:28:10:
                    33:15:31:eb:49:37:82:d6:09:40:57:52:18:3e:dc:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2E:00:5B:98:18:82:84:D1:99:DB:FF:79:50:68:C7:F8:C5:69:1A
            X509v3 Authority Key Identifier:
                keyid:A4:16:EC:91:EB:73:0A:96:5A:C7:56:B8:3A:BC:9A:E4:36:C3:DF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/A416EC91EB730A965AC756B83ABC9AE436C3DFC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:60:bf:a3:5a:72:94:18:d5:01:1c:8c:18:17:e0:46:1c:
         a8:11:e8:d4:34:4c:22:a0:05:f8:9f:d5:48:b9:8a:62:27:41:
         9b:0b:be:fd:78:40:68:49:f7:0f:4d:7d:2e:51:10:23:ab:39:
         5a:56:1f:7b:17:2e:fe:9d:c5:54:65:cc:ec:ad:a1:5c:da:2f:
         93:4f:f4:8e:f2:94:c1:e6:c5:9c:df:59:1e:06:f1:27:13:67:
         80:5d:c1:22:33:6e:d9:ca:23:0e:d9:d6:34:ec:e9:98:59:e8:
         4f:c3:84:ab:8d:26:ff:0a:69:f9:f9:03:d8:95:95:84:f9:c9:
         33:84:87:7e:6c:0f:9c:14:8c:db:bc:a3:1f:76:a2:36:34:b4:
         c9:c7:42:ff:15:d1:c8:20:26:d5:55:09:05:cc:d2:f1:a1:75:
         ff:09:1a:0f:04:39:94:85:09:13:eb:2e:05:16:a3:31:83:d7:
         93:e2:53:90:31:d3:64:d3:c5:5d:c8:b4:56:d0:4f:67:6c:9a:
         4c:71:da:73:0f:ca:90:dd:8f:48:b5:4d:cb:9c:7d:86:10:4c:
         6e:4a:de:1c:fb:1b:2c:b8:d6:b5:87:5a:e8:25:1c:2f:1b:b9:
         4a:38:f7:bb:e3:67:03:91:26:5f:a6:c1:49:2d:72:3a:ba:1b:
         27:8e:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:28 2025 by rpki-client