Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.mft
File:                     549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.mft (raw, json)
Hash identifier:          IA+XEnsIA6763hwyg3lkDDoCDJ6we+/0+jF8vMEdkAc=
Subject key identifier:   26:34:47:C6:A1:D7:80:63:15:73:79:22:1E:5F:8A:67:F6:64:6E:17
Authority key identifier: 54:9E:8C:D6:E2:0F:EE:E8:E6:9B:6A:65:BB:F5:C6:90:AB:74:CB:A3
Certificate issuer:       /CN=549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3
Certificate serial:       1DD7D3114426C7BFE680BBC823A9A53875778E81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.mft
Manifest number:          09
Signing time:             Wed 19 Apr 2023 05:37:00 +0000
Manifest this update:     Wed 19 Apr 2023 05:32:00 +0000
Manifest next update:     Thu 20 Apr 2023 09:20:00 +0000
Files and hashes:         1: 34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa (hash: iYuyP712wnzvSFuZR4/XxbFucOVDhdJKSr6eX8S3WcU=)
                          2: 549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.crl (hash: CJUvznj2L60zGnNZpXkaYagv6YV/fUVuKi3V0xnXzMs=)
                          3: 323830343a353138633a3a2f33322d313238203d3e20323638343539.roa (hash: QAKwjst3znihK+7nFYNjRis9rBhMwIDEVwi+SNDdozA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d7:d3:11:44:26:c7:bf:e6:80:bb:c8:23:a9:a5:38:75:77:8e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3
        Validity
            Not Before: Apr 19 05:32:00 2023 GMT
            Not After : Apr 20 09:20:00 2023 GMT
        Subject: CN=263447C6A1D78063157379221E5F8A67F6646E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:80:e2:81:31:cd:72:4f:a7:ce:68:9f:d7:
                    a9:8c:f4:89:f6:0c:bd:02:1d:1e:da:a1:e6:b4:1f:
                    08:9e:e3:06:ce:1a:d5:40:72:50:ca:dd:78:8b:11:
                    c7:36:df:35:7f:4c:9a:5f:0b:35:94:ed:20:4f:9e:
                    66:17:cb:52:40:4b:7a:cb:ea:dd:73:22:c2:6b:09:
                    c8:3e:33:17:c5:65:c9:a8:85:a5:76:b4:1b:da:1b:
                    45:ab:1d:d9:ab:eb:14:c6:eb:87:41:6c:c3:f2:4f:
                    91:10:51:ec:46:ed:25:27:05:f9:1e:1f:31:a3:c6:
                    88:1c:16:91:ec:65:7d:5e:a8:29:c1:1b:e7:03:d7:
                    66:ba:06:4d:74:db:26:f6:19:71:55:da:4f:03:d9:
                    4c:25:bd:ee:05:f6:2f:9a:b1:83:b9:6a:32:d5:ec:
                    35:91:17:ef:54:43:84:a6:88:92:84:de:25:36:5f:
                    17:21:b8:cc:fd:d0:9f:ee:fc:d1:21:11:96:f9:02:
                    93:46:62:ca:85:25:90:96:37:54:63:56:8f:4e:60:
                    5f:2e:f3:2d:15:21:80:86:f4:3e:6d:05:6e:0d:f2:
                    5a:f9:e0:5f:ee:ea:a4:8d:06:97:92:c9:b4:4a:db:
                    18:ae:1a:9a:82:b3:ac:ae:cf:39:36:9a:30:fa:20:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:34:47:C6:A1:D7:80:63:15:73:79:22:1E:5F:8A:67:F6:64:6E:17
            X509v3 Authority Key Identifier:
                keyid:54:9E:8C:D6:E2:0F:EE:E8:E6:9B:6A:65:BB:F5:C6:90:AB:74:CB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/549E8CD6E20FEEE8E69B6A65BBF5C690AB74CBA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:40:aa:6b:c9:a7:93:62:2a:c0:60:42:8a:7a:42:d3:bd:7f:
         c8:f7:07:41:13:f0:0b:0e:fd:10:7f:5c:c5:33:6d:ad:cc:a3:
         f2:8d:c6:f7:9c:24:1a:55:44:c2:ac:32:65:7a:5c:f3:1f:7a:
         20:e1:9b:a8:9f:5f:6c:1b:d6:c3:e0:84:24:2b:49:e6:75:41:
         7f:b8:fb:9f:fe:c1:c1:1a:bb:98:47:28:e8:99:6c:2f:93:d3:
         93:1b:5a:09:06:22:44:1a:39:3e:db:b6:9a:db:20:43:21:a7:
         07:fe:1d:51:43:5e:1d:e0:22:57:4d:21:44:9d:d4:10:32:59:
         77:5a:a0:7f:91:96:21:42:46:35:ed:96:17:90:6a:95:21:59:
         83:07:2b:ea:ee:cf:3a:07:80:c8:8d:ee:4c:0c:c9:98:28:1f:
         f7:d8:72:1e:03:ed:bd:a5:66:9e:9c:19:e2:aa:f5:0e:db:ac:
         b3:c6:1e:18:1d:b4:cf:ad:21:48:a1:ec:80:16:18:14:65:b3:
         56:84:d9:84:3a:84:ba:31:c4:45:61:72:b3:b9:ca:ba:9d:68:
         58:d1:65:32:0c:e3:72:7e:62:57:14:79:61:82:6e:3e:6e:43:
         71:de:67:3f:b0:b8:44:59:77:56:2c:08:e9:72:03:5c:36:af:
         49:36:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:18:18 2025 by rpki-client