Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/BBB83B38EA5EB25A3C08B48A7E316969024A9327.mft
File:                     BBB83B38EA5EB25A3C08B48A7E316969024A9327.mft (raw, json)
Hash identifier:          1P1bTvbBNMeYphGplwO/s5ayXkRPHDr8dRhBVlBlifA=
Subject key identifier:   52:D6:23:EE:28:EC:CE:08:AE:F7:51:4D:7E:42:AC:FA:C6:3C:E6:42
Authority key identifier: BB:B8:3B:38:EA:5E:B2:5A:3C:08:B4:8A:7E:31:69:69:02:4A:93:27
Certificate issuer:       /CN=BBB83B38EA5EB25A3C08B48A7E316969024A9327
Certificate serial:       42D7B64CDB8F6995C765F08C88F76F0B1249AA23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBB83B38EA5EB25A3C08B48A7E316969024A9327.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/BBB83B38EA5EB25A3C08B48A7E316969024A9327.mft
Manifest number:          1F
Signing time:             Tue 03 Jan 2023 20:45:39 +0000
Manifest this update:     Tue 03 Jan 2023 20:40:39 +0000
Manifest next update:     Wed 04 Jan 2023 22:49:39 +0000
Files and hashes:         1: 3137392e34392e3137362e302f32322d3332203d3e20323731323033.roa (hash: Qver0fMcrLzdFTcxx2eE7tJpYPpJlIX4/KKvxaAQnyg=)
                          2: 323830343a373764383a3a2f33322d313238203d3e20323731323033.roa (hash: vuyG6Mdvo1Xb8XtBw6KKIqaVVGCdQHDFglmsDDTpy48=)
                          3: BBB83B38EA5EB25A3C08B48A7E316969024A9327.crl (hash: jpltBoZ4za6AeQ/d4sCZCdUJYf0P8IuvT5MqvziNh2Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d7:b6:4c:db:8f:69:95:c7:65:f0:8c:88:f7:6f:0b:12:49:aa:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBB83B38EA5EB25A3C08B48A7E316969024A9327
        Validity
            Not Before: Jan  3 20:40:39 2023 GMT
            Not After : Jan  4 22:49:39 2023 GMT
        Subject: CN=52D623EE28ECCE08AEF7514D7E42ACFAC63CE642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:4c:f3:12:9b:e5:6e:8a:16:b6:ef:48:d8:
                    67:59:04:af:13:ab:d3:b4:93:7f:fd:7f:ff:af:50:
                    8d:9a:55:98:74:3d:12:ac:a1:e3:19:43:9a:0e:c2:
                    d9:63:aa:d5:65:db:2a:fc:05:c9:1b:6b:50:ae:f1:
                    1a:d4:8b:f2:ec:ae:05:12:95:ed:dc:28:de:6f:7d:
                    57:2a:bb:d2:d1:23:c8:3d:7a:99:4f:1a:66:46:f2:
                    0f:dd:79:7f:63:ef:29:08:bb:b4:12:f7:27:52:fd:
                    59:83:63:14:01:67:37:30:9e:54:c1:5d:6e:a4:51:
                    2b:c4:c8:11:c5:f1:3b:4c:03:04:e6:a3:24:63:9b:
                    bb:d6:3a:e8:90:ec:36:44:ef:ee:43:37:01:9e:0d:
                    86:a2:54:64:22:85:26:6a:f8:66:48:9c:4f:13:f4:
                    30:1b:07:78:21:ca:fd:c7:94:c1:23:b5:90:76:0f:
                    a1:ad:68:6d:b4:24:13:88:ac:8f:3f:be:e3:f6:80:
                    1b:70:1c:39:b0:57:bf:e3:44:a8:3a:49:b2:7a:14:
                    d6:df:12:e6:33:b9:93:dc:15:e1:9f:77:ec:a0:99:
                    a1:6c:ec:66:7e:b7:40:6e:75:10:21:96:fd:9f:2e:
                    e0:d3:95:21:9a:5e:82:97:ab:60:2b:25:d9:3a:47:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:23:EE:28:EC:CE:08:AE:F7:51:4D:7E:42:AC:FA:C6:3C:E6:42
            X509v3 Authority Key Identifier:
                keyid:BB:B8:3B:38:EA:5E:B2:5A:3C:08:B4:8A:7E:31:69:69:02:4A:93:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/BBB83B38EA5EB25A3C08B48A7E316969024A9327.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBB83B38EA5EB25A3C08B48A7E316969024A9327.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/BBB83B38EA5EB25A3C08B48A7E316969024A9327.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:17:71:b8:3e:4c:ea:72:4d:e8:81:14:81:68:83:14:c3:f4:
         00:e3:02:23:58:98:a2:01:27:7f:80:55:a6:b7:d9:fa:04:be:
         65:2a:1c:1f:19:80:69:57:06:b1:72:12:c3:53:36:e0:4f:82:
         ad:67:2c:12:33:fb:8d:fc:90:8d:f8:93:ee:ac:ee:99:2d:75:
         35:d6:9d:d1:ad:5a:fd:4a:79:ad:22:c2:96:00:b4:8f:1c:45:
         65:29:e5:2c:76:b5:af:d9:b6:46:e7:be:6a:1c:a8:ee:2a:ba:
         37:44:81:d6:b9:a0:8a:db:74:22:6d:c8:d5:50:b3:09:a1:62:
         ee:47:f4:28:4d:ff:64:70:7c:9f:bf:d2:96:69:48:e2:ba:bb:
         6a:94:92:73:99:ab:6f:46:2d:23:4a:dc:90:57:80:69:8c:32:
         50:70:5f:0b:39:a8:aa:61:24:1b:62:ec:88:cd:5a:e9:ef:40:
         d5:10:77:a2:4e:58:2e:fc:0f:1d:e9:83:cf:7d:ef:87:06:5c:
         c5:e2:1a:b3:9f:5b:b9:a0:4b:dc:90:e1:60:1f:c3:f6:d2:5a:
         6c:b9:37:17:37:1c:db:45:b0:91:da:9e:ec:78:1a:e6:84:d5:
         f4:b5:60:ca:ce:2e:2b:37:88:ee:ad:b0:bd:58:01:fd:ce:ab:
         6e:9c:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:40 2025 by rpki-client