Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.mft
File:                     66E0B9C43F6F84B853D630A67B75676B8CA39CF7.mft (raw, json)
Hash identifier:          HD7ReLmoIpn3sSxhg8T1VHv71NGxJMQSq7MKM38U/sM=
Subject key identifier:   48:11:AB:B9:67:51:B1:49:09:31:6F:CD:8E:14:FF:A7:36:2C:7E:88
Authority key identifier: 66:E0:B9:C4:3F:6F:84:B8:53:D6:30:A6:7B:75:67:6B:8C:A3:9C:F7
Certificate issuer:       /CN=66E0B9C43F6F84B853D630A67B75676B8CA39CF7
Certificate serial:       0B854FDE06E7895DD8A6291BA9BB62C9094D79B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.mft
Manifest number:          4E
Signing time:             Fri 20 Dec 2024 18:08:16 +0000
Manifest this update:     Fri 20 Dec 2024 18:03:16 +0000
Manifest next update:     Sat 21 Dec 2024 21:00:16 +0000
Files and hashes:         1: 323830343a346462633a3a2f33322d313238203d3e20323638323136.roa (hash: T23pasDCnq+bfZvmhhWHPmDggXFTxWWWqadNWxmPiDE=)
                          2: 66E0B9C43F6F84B853D630A67B75676B8CA39CF7.crl (hash: BTxhtmbVCwi/oQRXr7K2XBFn1899O5MqCrFaj8xFoVk=)
                          3: 34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (hash: eWqhVTyGryHnIJeU8XeNdI2YCE/fEMkjpsYjMcUsL4U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:85:4f:de:06:e7:89:5d:d8:a6:29:1b:a9:bb:62:c9:09:4d:79:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E0B9C43F6F84B853D630A67B75676B8CA39CF7
        Validity
            Not Before: Dec 20 18:03:16 2024 GMT
            Not After : Dec 21 21:00:16 2024 GMT
        Subject: CN=4811ABB96751B14909316FCD8E14FFA7362C7E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:c0:7f:13:00:07:f6:7c:6c:bf:98:d9:90:
                    0a:b1:d8:dd:a6:6f:c5:f4:b4:95:d9:54:10:78:84:
                    78:53:a8:69:43:aa:ec:72:c6:99:60:a1:32:6f:f5:
                    fa:a7:86:4c:c6:42:58:01:c8:2e:95:1f:0b:b8:a3:
                    c1:e5:94:b6:e1:f6:58:44:19:92:9c:bf:41:68:65:
                    a6:6f:9f:2c:ab:65:20:55:ed:0a:21:a3:b3:d8:2e:
                    c9:90:a3:a0:70:35:95:f1:54:b6:42:89:c8:3c:01:
                    2c:fd:da:35:ae:5a:44:0d:ef:06:c4:c1:09:4c:0c:
                    8b:00:88:bd:bf:d8:cb:c2:b3:5f:1c:df:9d:29:39:
                    7b:67:bc:7a:46:d1:e6:a8:bf:5a:eb:68:93:c6:24:
                    5f:10:8c:7f:eb:2b:b2:1a:59:c0:99:19:0b:bf:ec:
                    f0:d2:b6:1a:6b:74:d3:f6:3d:7c:cd:0e:4b:85:4b:
                    6a:ce:e7:8d:c0:d1:90:17:ee:7d:87:d2:05:44:c5:
                    b8:65:5c:82:85:17:57:9b:7b:c3:ee:c9:3f:bb:d9:
                    ce:6a:8d:4a:f6:63:35:7a:70:2b:c6:de:1b:1b:23:
                    46:2c:dd:82:2d:02:38:d2:9b:cb:02:33:6e:84:18:
                    b9:fb:5e:78:c0:a9:0b:ff:ae:68:97:2b:32:d9:8f:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:AB:B9:67:51:B1:49:09:31:6F:CD:8E:14:FF:A7:36:2C:7E:88
            X509v3 Authority Key Identifier:
                keyid:66:E0:B9:C4:3F:6F:84:B8:53:D6:30:A6:7B:75:67:6B:8C:A3:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/66E0B9C43F6F84B853D630A67B75676B8CA39CF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8c:6b:66:c3:4b:62:d2:a1:1d:b8:e5:0a:83:8a:8a:a0:c4:
         9f:35:85:6f:95:4c:7b:21:7c:b1:3c:d7:9e:a5:14:3f:1c:e6:
         a1:93:85:64:31:7d:dd:02:27:05:9a:33:d5:39:a5:7a:6a:06:
         83:ae:ba:77:e8:06:68:57:08:5f:4a:7a:96:cd:9d:ea:c6:09:
         a2:64:05:87:12:71:3a:b3:31:11:5f:0c:45:9a:d5:4c:96:3e:
         c9:53:4e:a5:fc:12:52:84:69:8a:01:53:30:7d:26:36:03:26:
         36:5b:6f:28:7f:c9:b5:a3:dd:64:e4:13:ba:b1:ad:94:35:7b:
         00:5e:a5:52:ba:3a:35:2d:52:eb:2f:8d:7e:1e:d9:2d:0f:a0:
         3f:d7:37:8e:b9:46:bb:12:9f:26:15:03:c5:79:c1:96:0e:46:
         e0:f8:42:ac:4b:aa:f6:0a:da:d2:36:7f:fe:34:d1:c4:29:96:
         92:a3:77:0d:df:26:ca:8c:58:b8:ad:b5:44:6d:d6:b4:65:1e:
         b8:9d:f9:da:be:59:bc:c1:00:c5:c0:c3:8e:00:eb:60:d7:7b:
         6b:14:03:4b:1a:d5:42:28:f9:98:77:ef:90:7c:94:4f:0d:5b:
         44:34:d0:44:6a:33:d9:09:7f:01:88:37:8d:3f:1e:60:fe:a4:
         bb:5d:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:13:26 2025 by rpki-client