Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.mft
File:                     D1FBE89D5F67043ED369B1D24B2F8A18C9131156.mft (raw, json)
Hash identifier:          SdEirLWccdupwCNYd0ypUQ57Ee6WxnhCP9OWNmLQw54=
Subject key identifier:   CA:79:98:88:21:22:72:91:B9:69:D2:25:69:9D:99:7C:0D:7F:F0:98
Authority key identifier: D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56
Certificate issuer:       /CN=D1FBE89D5F67043ED369B1D24B2F8A18C9131156
Certificate serial:       79493AE070A2262027F6329AAEF312C81AF96DFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.mft
Manifest number:          19
Signing time:             Sat 11 Jan 2025 16:16:56 +0000
Manifest this update:     Sat 11 Jan 2025 16:11:56 +0000
Manifest next update:     Sun 12 Jan 2025 18:38:56 +0000
Files and hashes:         1: 323830343a356263383a3a2f33322d3438203d3e20323638383639.roa (hash: KLMT+N/V2nhCcycBuzZqNodgkVtRbl1aE0hcKBzLzWU=)
                          2: 34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa (hash: Ar3e7UqTADwfhhoz9F4spCauOjlFOGUDuUKWLupdqT0=)
                          3: D1FBE89D5F67043ED369B1D24B2F8A18C9131156.crl (hash: siP5MPbELIyBh1jcZ+TXZ7W2XlbzgkTEGnYkG78L5XY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:49:3a:e0:70:a2:26:20:27:f6:32:9a:ae:f3:12:c8:1a:f9:6d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FBE89D5F67043ED369B1D24B2F8A18C9131156
        Validity
            Not Before: Jan 11 16:11:56 2025 GMT
            Not After : Jan 12 18:38:56 2025 GMT
        Subject: CN=CA79988821227291B969D225699D997C0D7FF098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:d0:ed:6f:26:b9:02:8e:1e:d5:55:d3:5d:
                    9b:20:fb:8f:3e:3d:c1:17:89:89:65:12:c3:f0:8e:
                    98:c0:ca:2c:a3:e1:ce:bd:35:ca:fa:1b:ca:66:e4:
                    b8:22:17:0f:bd:81:ca:5c:97:d7:2b:31:01:ab:ef:
                    ee:c7:3d:03:98:98:57:c2:cc:4f:78:f7:be:a7:d9:
                    58:d7:24:0b:66:43:ae:75:47:42:99:53:c2:fa:26:
                    35:3f:6b:b7:23:31:07:b8:e5:b3:58:ae:18:66:2e:
                    ec:ef:c3:85:26:f3:2c:68:68:c5:9f:a3:12:14:60:
                    fd:1c:e1:7e:25:2a:7b:39:72:b7:b0:ee:87:ce:73:
                    54:a9:b0:d8:4b:63:f8:eb:82:e1:3d:d2:e0:65:ef:
                    97:cd:b2:0b:7f:42:29:f5:5e:13:85:90:22:61:41:
                    8f:21:a2:7f:7a:ba:5b:3b:f8:80:34:ae:d1:c0:e8:
                    66:32:c3:cd:3c:a3:c9:f2:26:15:8e:5a:5c:2c:ab:
                    be:99:ca:4f:ac:de:40:ec:5e:37:8c:15:be:8e:3e:
                    c0:dc:e9:35:6e:c0:d4:43:5b:ad:d3:a3:6a:7f:7d:
                    45:12:35:91:fa:3a:cf:8a:28:75:b4:55:56:56:21:
                    2e:2d:da:45:c2:7c:63:dd:1a:fd:a4:e9:42:3b:a8:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:98:88:21:22:72:91:B9:69:D2:25:69:9D:99:7C:0D:7F:F0:98
            X509v3 Authority Key Identifier:
                keyid:D1:FB:E8:9D:5F:67:04:3E:D3:69:B1:D2:4B:2F:8A:18:C9:13:11:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/D1FBE89D5F67043ED369B1D24B2F8A18C9131156.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:06:a4:b3:24:eb:69:65:d1:86:7e:d6:24:2d:0c:29:96:5c:
         ef:ae:b1:97:f2:04:99:c4:7c:23:2f:db:80:8f:8d:57:a6:0d:
         79:a0:a9:85:e4:a3:36:5b:63:75:fe:ba:30:7b:4a:f5:d3:f7:
         aa:9d:5e:c6:7c:60:af:e0:35:02:4f:f9:e1:6f:e9:0d:56:35:
         a4:18:a8:65:8c:b0:a2:ed:21:0e:95:9f:1c:d1:be:71:93:36:
         ed:57:9c:84:12:49:04:20:ac:f2:7f:6e:69:c3:e7:a5:31:a3:
         ab:13:0f:f4:f2:13:37:8b:49:64:eb:39:b4:94:07:b4:5b:f6:
         6e:3e:0b:b4:bd:4a:21:90:c5:70:5d:2f:7b:d4:33:f4:0e:4d:
         6d:ff:a7:47:b3:f6:08:1d:2c:a3:f7:38:3d:43:66:03:ee:b7:
         fa:62:29:8c:3e:94:2a:bc:6d:d2:2e:07:e9:d0:b7:dd:8d:a9:
         f7:17:c1:87:6a:50:fb:e2:57:9b:97:45:0d:29:7f:ac:0e:94:
         74:70:50:06:8b:20:b4:39:d1:5a:43:ec:52:c7:82:f8:a5:31:
         62:1c:ff:ac:79:d8:02:92:4b:ee:1f:4e:99:2e:6a:87:d2:e0:
         94:3c:94:11:ed:d5:a9:0d:19:61:56:31:cc:64:18:34:b4:5f:
         2b:92:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:41 2025 by rpki-client