Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.mft
File:                     7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.mft (raw, json)
Hash identifier:          LfGv8K1GF2CAqcWtwy7GcTI8FaxRxF7enTtkhDzg5EA=
Subject key identifier:   26:68:29:A1:75:A4:C1:9A:27:44:94:45:59:56:C2:0B:8D:A7:AA:6A
Authority key identifier: 79:57:B9:FD:FB:5E:8E:73:FB:ED:C1:96:5C:13:C4:3C:19:79:2D:CC
Certificate issuer:       /CN=7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC
Certificate serial:       2E628D1AD86371A245E779338C4849ADE58DC773
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.mft
Manifest number:          0171
Signing time:             Mon 20 Jan 2025 10:52:47 +0000
Manifest this update:     Mon 20 Jan 2025 10:47:47 +0000
Manifest next update:     Tue 21 Jan 2025 11:17:47 +0000
Files and hashes:         1: 3137392e36332e34382e302f32322d3332203d3e20323732363734.roa (hash: SJFl58xUaTuoYx+vl53Hsr0+NSavQEHv0/xbwXf2CHo=)
                          2: 7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.crl (hash: jd8sQ9VXJ+Ho6nIPTvfYPx9uHxgq8GouBmGChCPDWxE=)
                          3: 323830343a383665383a3a2f33322d313238203d3e20323732363734.roa (hash: F/SEvydgD4jZwhjj4gh8qqyVztV5luXxapqRxzpa2GQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:62:8d:1a:d8:63:71:a2:45:e7:79:33:8c:48:49:ad:e5:8d:c7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC
        Validity
            Not Before: Jan 20 10:47:47 2025 GMT
            Not After : Jan 21 11:17:47 2025 GMT
        Subject: CN=266829A175A4C19A274494455956C20B8DA7AA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:f5:3f:53:70:df:95:73:a4:f8:04:a0:c2:
                    b7:d7:4f:de:78:c5:2c:ac:47:14:73:5d:61:24:fe:
                    1c:1e:a3:2e:3f:3a:8e:81:fc:f4:1c:59:b7:04:2b:
                    68:ac:4c:5a:ac:b1:83:1e:f6:12:00:15:c6:ec:41:
                    76:2d:13:5e:87:6c:6b:29:83:1b:70:42:f0:c4:4b:
                    c9:6b:a2:2b:f0:9c:06:f6:7f:49:26:3a:9c:51:6e:
                    18:5e:10:60:67:08:ff:8a:4d:27:22:a9:e3:df:0f:
                    db:ef:ee:6d:fe:84:ae:cf:cb:bd:81:0d:30:fd:8e:
                    75:21:3f:96:ae:7f:e6:6e:53:b8:bb:ed:e6:51:20:
                    d4:6f:1d:15:29:54:63:80:7e:03:90:40:99:78:a7:
                    4a:d5:53:f5:ec:17:51:97:2d:51:5b:50:33:c1:d7:
                    9a:d5:8c:6c:95:87:59:87:08:a9:8b:72:9c:c7:cf:
                    d8:88:00:06:99:d0:4c:9a:25:14:a8:75:ba:10:a8:
                    1a:f8:de:74:2b:3a:2b:dd:8b:11:8e:bf:25:26:d8:
                    19:c3:1a:33:a4:fe:e6:6f:8e:b3:70:8e:20:48:3d:
                    67:74:41:01:88:97:56:90:49:2a:b6:cb:47:53:56:
                    ba:e1:0b:02:0b:0c:65:73:5d:8a:43:88:5d:e8:72:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:68:29:A1:75:A4:C1:9A:27:44:94:45:59:56:C2:0B:8D:A7:AA:6A
            X509v3 Authority Key Identifier:
                keyid:79:57:B9:FD:FB:5E:8E:73:FB:ED:C1:96:5C:13:C4:3C:19:79:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/2/7957B9FDFB5E8E73FBEDC1965C13C43C19792DCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:8e:29:d7:6e:6f:75:56:20:16:5a:28:de:e1:91:e4:87:
         b4:8b:f3:cf:df:e5:07:2f:49:b3:5e:69:c3:eb:78:21:5e:3e:
         93:1f:23:72:a2:91:62:d0:11:79:7b:d0:14:5c:15:df:26:ed:
         0b:39:19:28:81:c7:da:b7:fd:a3:a4:c3:b2:64:2b:ee:01:d1:
         58:ae:84:e6:af:22:ee:e9:da:53:c7:7f:ae:46:5a:40:db:1c:
         e9:a6:a9:8a:0f:19:37:9a:7b:43:d9:2a:05:a0:11:5d:cf:94:
         19:34:e7:de:eb:f4:3e:ed:1a:ac:78:c1:1d:e7:2a:fe:72:ee:
         ef:03:f7:70:5b:27:03:d5:ed:62:dc:b4:10:c0:a5:ea:41:d2:
         59:28:db:42:27:16:62:e2:b7:dd:e4:ab:86:0e:f0:60:fc:ef:
         c9:1e:91:51:97:8f:b2:8f:f2:b0:b2:e9:3d:ca:3b:94:d0:b9:
         1b:05:18:e4:c4:12:fa:c6:fb:fe:32:34:0b:87:68:56:cc:35:
         5e:10:24:a2:6c:33:f9:24:5b:b7:08:ac:7e:3f:00:f2:18:6d:
         46:44:16:1c:b7:58:59:87:5e:86:51:01:a3:31:ff:bc:b1:64:
         59:88:4e:66:38:ed:57:f9:36:aa:e8:c0:64:a0:ee:2c:14:3b:
         2a:fb:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----