Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.mft
File:                     1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.mft (raw, json)
Hash identifier:          blu2rwrdAzY8O2JCKtb0OTTwhlZB+o+PsZGlH8P5Eyc=
Subject key identifier:   6E:E7:05:4A:4F:36:8E:82:8F:B5:EF:03:5F:CE:EF:C7:1D:1E:C4:41
Authority key identifier: 1B:FB:D5:F0:4D:9E:AD:A7:4D:7C:8E:38:B3:06:6F:56:95:73:6F:16
Certificate issuer:       /CN=1BFBD5F04D9EADA74D7C8E38B3066F5695736F16
Certificate serial:       18C7DC973B891CA9FB2E1897FD821249180868D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.mft
Manifest number:          CD
Signing time:             Fri 27 Dec 2024 16:59:07 +0000
Manifest this update:     Fri 27 Dec 2024 16:54:07 +0000
Manifest next update:     Sat 28 Dec 2024 20:52:07 +0000
Files and hashes:         1: 323830343a343764343a3a2f33322d3336203d3e20323637303739.roa (hash: lijJTHD5/5c0b7hBkficpqm4xzlNWoeYsdb7ESzAVpw=)
                          2: 34352e3232372e34342e302f32322d3234203d3e20323637303739.roa (hash: 89d83wM5aXrnY6c4wumsNlQhXl7IPl1b6tMCSp+5fbs=)
                          3: 1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.crl (hash: aC9Pzhc8UkEw3KoWpkbPaoaGs0mfZVj5vpLrTLE8YuA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c7:dc:97:3b:89:1c:a9:fb:2e:18:97:fd:82:12:49:18:08:68:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFBD5F04D9EADA74D7C8E38B3066F5695736F16
        Validity
            Not Before: Dec 27 16:54:07 2024 GMT
            Not After : Dec 28 20:52:07 2024 GMT
        Subject: CN=6EE7054A4F368E828FB5EF035FCEEFC71D1EC441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:9b:ce:fa:7c:7d:67:af:5e:3c:c3:24:32:
                    c5:8c:0d:7b:b9:ad:4f:2f:14:6d:39:07:c5:c2:67:
                    d3:cb:37:83:36:c2:a6:1f:2e:59:50:98:56:e6:88:
                    49:85:2c:fb:78:ca:0a:b7:e3:bd:49:b5:8e:1d:70:
                    4b:ec:83:29:24:85:50:67:1b:f1:17:06:21:4b:85:
                    9a:4a:cf:f5:93:ed:46:38:fd:c5:2a:92:5c:fc:3d:
                    4e:36:64:c9:58:1c:70:17:ca:3b:e7:f4:0c:0d:07:
                    4f:51:8c:e4:6d:9f:b8:94:62:01:a9:dc:30:d6:ef:
                    2e:aa:0c:9c:34:f8:ef:ed:d0:65:02:f8:99:3c:b0:
                    f2:53:00:88:07:a3:57:52:26:6a:c0:ec:79:4a:90:
                    54:5a:dc:9b:72:9f:bd:31:23:28:17:04:5d:4c:bb:
                    81:b3:b1:c2:0e:71:1c:1b:f8:57:26:1b:6b:2d:7e:
                    ca:cb:76:5e:c4:7a:f2:74:10:f3:64:42:b5:03:6b:
                    cb:d9:44:90:ff:b0:f6:f8:8d:35:f9:07:b3:33:9d:
                    f2:b9:09:e0:4f:4f:9a:1f:ed:01:6c:21:4c:be:e2:
                    1a:a7:85:a5:25:03:f9:a1:cb:36:f6:0f:78:df:21:
                    83:ff:db:38:98:e1:27:01:bd:9d:f6:fd:f3:b8:c1:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E7:05:4A:4F:36:8E:82:8F:B5:EF:03:5F:CE:EF:C7:1D:1E:C4:41
            X509v3 Authority Key Identifier:
                keyid:1B:FB:D5:F0:4D:9E:AD:A7:4D:7C:8E:38:B3:06:6F:56:95:73:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:32:28:c4:e3:5a:ca:9c:f6:e1:82:92:8f:9c:c5:e5:15:
         0c:a5:e8:06:23:0b:87:87:0f:bd:42:48:c9:f3:27:a7:7a:c3:
         f9:99:0c:47:db:0e:e2:48:2b:1e:bb:0c:18:71:3a:d9:c5:27:
         74:82:d6:a9:ef:8d:52:c8:cd:62:16:0c:f2:6e:b4:c0:cd:ab:
         b7:91:df:1d:76:b4:26:07:3c:8e:fe:a0:7a:c2:05:62:14:d4:
         a1:aa:47:ef:db:2f:84:7f:1d:71:01:c8:89:25:7e:41:08:b6:
         ef:c3:25:50:6c:ec:9c:b2:c2:25:3b:2a:62:b7:98:31:39:b5:
         71:a7:e6:5d:78:48:e6:96:26:88:8c:ce:d2:86:11:b1:52:d4:
         71:86:e1:2f:b9:3e:e7:6e:22:35:1d:b6:29:b9:43:32:75:38:
         bd:65:29:4c:c8:72:a2:de:89:74:bb:21:c7:92:0b:c5:05:8d:
         a5:62:71:40:14:10:99:01:c8:25:11:3f:eb:a5:04:38:ae:36:
         d6:9b:74:ec:75:6e:78:e7:e4:27:98:e2:17:73:e0:70:40:d3:
         2a:ef:fc:7b:8f:78:29:59:31:c6:52:fd:a9:1b:d2:8e:3e:2e:
         3b:6a:bf:e7:a0:88:95:bf:4d:3f:d9:82:6c:d1:10:40:0c:f5:
         68:e9:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----