Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/1C88D461B94EF8EE43920884F50159FE4B7AA009.mft
File:                     1C88D461B94EF8EE43920884F50159FE4B7AA009.mft (raw, json)
Hash identifier:          spsk0Q2Uf0/XmkHFKvqG5zyoWl7MJc/WhP99RC9T9Ug=
Subject key identifier:   2D:61:02:8E:0D:83:DC:9C:57:56:FF:AC:D3:11:D8:1E:95:7A:8F:E2
Authority key identifier: 1C:88:D4:61:B9:4E:F8:EE:43:92:08:84:F5:01:59:FE:4B:7A:A0:09
Certificate issuer:       /CN=1C88D461B94EF8EE43920884F50159FE4B7AA009
Certificate serial:       43B5332E8E205175BA4AB55C74DAE65EA1BFFA13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C88D461B94EF8EE43920884F50159FE4B7AA009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/1C88D461B94EF8EE43920884F50159FE4B7AA009.mft
Manifest number:          52
Signing time:             Sun 16 Mar 2025 10:39:02 +0000
Manifest this update:     Sun 16 Mar 2025 10:34:02 +0000
Manifest next update:     Mon 17 Mar 2025 11:33:02 +0000
Files and hashes:         1: 1C88D461B94EF8EE43920884F50159FE4B7AA009.crl (hash: GjEUZfxiC0SMyDzUVofxXrEyjPO0+7NgJCild7We1r8=)
                          2: 323830343a373634633a3a2f33322d3438203d3e20323731313032.roa (hash: It9gMQkiFYezhL5b5FlYqfO8RlYg5XALZuD8+pyIDj4=)
                          3: 3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa (hash: 3hVM4jnqYGabvGe6svjhj7370C+eBYU1QNi2kZd9GbY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b5:33:2e:8e:20:51:75:ba:4a:b5:5c:74:da:e6:5e:a1:bf:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C88D461B94EF8EE43920884F50159FE4B7AA009
        Validity
            Not Before: Mar 16 10:34:02 2025 GMT
            Not After : Mar 17 11:33:02 2025 GMT
        Subject: CN=2D61028E0D83DC9C5756FFACD311D81E957A8FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:7f:43:58:bc:63:eb:2a:93:24:15:e1:6f:
                    3d:ac:fb:c8:7a:84:bb:30:44:48:37:a5:5c:82:71:
                    1d:41:33:60:bb:2d:55:af:7e:2e:91:66:23:e7:0a:
                    31:b2:92:1b:1c:1e:02:7b:95:1e:57:7b:14:24:71:
                    b4:8c:47:68:03:d2:a1:a8:95:52:3b:67:a4:8b:9e:
                    d9:29:3e:13:02:77:3d:d2:10:6d:79:14:09:af:d0:
                    4f:8d:de:cd:fc:31:b1:9a:1e:57:06:73:53:92:89:
                    ab:7c:9a:b2:4f:e2:b0:2d:4e:2e:aa:ac:07:35:6d:
                    8f:31:ef:8d:01:c6:77:a0:bf:62:2e:ff:f2:34:30:
                    c6:31:f4:39:94:06:ec:c0:22:c3:78:60:98:79:bf:
                    d8:73:39:d1:e8:92:c9:93:93:1c:55:ec:d1:36:91:
                    f7:c1:45:53:19:1d:d6:98:2b:e5:0c:ee:2a:64:f0:
                    38:66:27:51:e1:b9:0d:0c:3b:8c:3f:1a:2d:b8:75:
                    97:dd:e3:32:76:bf:14:e4:76:d4:f6:c2:b6:b9:24:
                    f3:6e:1b:09:08:bb:cc:b4:49:f5:8b:94:4d:53:01:
                    d4:68:ed:32:bd:7b:94:87:03:c8:8d:52:1f:50:bd:
                    ef:39:f2:9f:3a:00:d1:78:42:26:ef:e4:88:36:e2:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:02:8E:0D:83:DC:9C:57:56:FF:AC:D3:11:D8:1E:95:7A:8F:E2
            X509v3 Authority Key Identifier:
                keyid:1C:88:D4:61:B9:4E:F8:EE:43:92:08:84:F5:01:59:FE:4B:7A:A0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/1C88D461B94EF8EE43920884F50159FE4B7AA009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C88D461B94EF8EE43920884F50159FE4B7AA009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/1C88D461B94EF8EE43920884F50159FE4B7AA009.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:73:05:ad:f9:c8:f5:bf:62:9b:f0:88:8c:40:bc:22:3f:
         7a:84:6a:93:a0:8d:37:dd:5a:8c:ed:90:e0:07:64:1c:a6:9e:
         76:7f:36:2f:40:76:05:bd:5b:ab:7a:82:e5:bf:97:47:17:d4:
         cb:0f:c7:57:a1:f0:95:62:41:e3:d3:bb:99:45:5b:0d:8b:eb:
         5c:dc:5b:65:90:e3:27:d9:43:4b:bc:1a:60:9b:35:b3:e2:25:
         e9:ba:f3:27:fb:18:53:0b:0e:86:72:81:50:c6:c3:f5:4a:1c:
         1b:9b:8d:9a:6c:ed:ea:1d:27:53:be:c9:c4:d3:6b:7f:d4:0c:
         01:79:cc:0d:4a:50:20:49:01:9b:21:cc:84:cb:20:28:2b:51:
         e5:6e:7f:52:72:cc:e3:8a:ab:d6:cf:7c:91:dc:6f:08:06:0c:
         73:1e:3f:a9:9d:69:2a:69:71:fb:62:a5:1b:48:77:d0:e5:ce:
         ac:f3:83:92:47:e3:31:f3:d0:b8:ba:c7:85:bf:58:1c:6d:9e:
         74:db:10:ae:51:62:0f:1d:9e:d6:4a:f6:c8:fc:86:08:17:94:
         b0:39:13:8e:7c:44:1a:f8:f6:7c:2b:b3:70:b1:2b:a9:23:a9:
         c2:73:5d:f1:8d:9c:29:58:09:8b:57:f7:47:7d:fc:88:7f:4d:
         22:00:32:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----