Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.mft
File:                     57A337DD2EB6482B8C89FCE3901BF412190C1DFE.mft (raw, json)
Hash identifier:          uGLTuWBZeMlMmOC2nMLr0qX0InLBG0vXDbATEsuWjOg=
Subject key identifier:   39:B9:61:41:B2:01:BC:6A:6D:F1:6E:A3:65:D6:EA:0F:89:F4:80:F2
Authority key identifier: 57:A3:37:DD:2E:B6:48:2B:8C:89:FC:E3:90:1B:F4:12:19:0C:1D:FE
Certificate issuer:       /CN=57A337DD2EB6482B8C89FCE3901BF412190C1DFE
Certificate serial:       09D894BCF92F6E11DF66E11E9AF5A2AC315089F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.mft
Manifest number:          24
Signing time:             Tue 30 Jan 2024 23:46:42 +0000
Manifest this update:     Tue 30 Jan 2024 23:41:42 +0000
Manifest next update:     Wed 31 Jan 2024 23:53:42 +0000
Files and hashes:         1: 57A337DD2EB6482B8C89FCE3901BF412190C1DFE.crl (hash: nq4NFGjRP6QRZQyqPRAzflWhAsfpUNMNIGmnABTl27Y=)
                          2: 323830343a376236343a3a2f33322d313238203d3e20323731343239.roa (hash: Sl+j+a0tqm9wTonAutHYmtsP1n5LM3l0/Q6iJm5Ocjk=)
                          3: 3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa (hash: lmJSvVSBglvQs6MNsAbhNjWGIOuhDkXO/rk08wdUhZY=)
                          4: 3136342e3136332e342e302f32342d3332203d3e20323731343239.roa (hash: 1uiFRq7WIx4fenNQXPXDwNB8brptFsEkqKPRLTOdIe0=)
                          5: 34352e3138312e37362e302f32342d3332203d3e20323731343239.roa (hash: Aq6W3YrNGVqn7msSaVr6ku41WkgBHpAAorKeqWZMke8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d8:94:bc:f9:2f:6e:11:df:66:e1:1e:9a:f5:a2:ac:31:50:89:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A337DD2EB6482B8C89FCE3901BF412190C1DFE
        Validity
            Not Before: Jan 30 23:41:42 2024 GMT
            Not After : Jan 31 23:53:42 2024 GMT
        Subject: CN=39B96141B201BC6A6DF16EA365D6EA0F89F480F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:bf:e8:30:6d:9a:9b:5f:53:84:88:85:00:
                    0c:82:ac:f6:8d:10:c2:8b:17:14:89:1d:19:a8:a8:
                    ca:e8:32:0b:25:9d:3c:6e:94:c1:c2:a3:df:8b:f0:
                    85:02:c1:89:0e:94:51:00:2f:17:92:02:6e:88:0b:
                    b9:a6:e0:11:e4:8d:fe:9e:37:e2:f9:38:30:46:b9:
                    87:94:af:64:4d:a1:50:84:4b:25:7b:7b:ae:18:93:
                    37:92:ff:f7:ed:09:89:28:5f:47:e2:ca:de:6f:32:
                    02:5d:8b:36:16:49:2a:04:43:57:af:e1:bd:0f:b1:
                    eb:fa:5f:cc:ce:22:b4:4a:74:b1:bb:86:e6:81:db:
                    cb:ed:32:60:ee:98:83:5d:2e:35:aa:6a:84:8f:b9:
                    57:64:c5:2a:b0:32:71:b1:ab:60:f9:25:e4:bb:ec:
                    e4:14:9e:0f:8d:db:c7:ea:49:1d:3b:2d:6d:14:94:
                    b3:52:2f:c7:55:a2:29:fd:69:39:94:1f:df:bf:ca:
                    12:00:8d:14:45:22:b1:f7:2d:14:c2:fe:ef:aa:ae:
                    de:aa:dd:69:3a:fe:3b:e1:07:c2:76:fd:5c:45:c0:
                    cc:e6:4e:0f:95:7c:0d:d9:a1:aa:a6:47:87:93:5f:
                    80:87:74:95:a3:20:6e:3a:f0:a6:cc:c5:54:18:ca:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B9:61:41:B2:01:BC:6A:6D:F1:6E:A3:65:D6:EA:0F:89:F4:80:F2
            X509v3 Authority Key Identifier:
                keyid:57:A3:37:DD:2E:B6:48:2B:8C:89:FC:E3:90:1B:F4:12:19:0C:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/57A337DD2EB6482B8C89FCE3901BF412190C1DFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:40:69:45:0c:f4:de:de:59:51:34:1b:38:b0:ef:25:60:
         59:cb:8d:17:6c:ed:a0:93:c4:cd:f4:ad:ac:cb:0c:fb:80:18:
         09:55:71:9d:e0:da:ed:9a:94:9b:07:d0:fc:a3:e8:33:2a:1c:
         cb:ca:47:5f:f6:ff:00:41:96:28:3a:d8:2d:a2:15:4a:cc:60:
         67:40:57:08:4d:7d:24:be:d5:dd:19:76:28:99:0d:c0:fe:e0:
         7d:98:a3:41:35:32:7c:d4:71:08:51:e4:4a:30:fa:65:76:3e:
         ac:73:a7:16:b5:5e:96:c3:4d:3c:a7:4e:f3:be:b5:a9:9e:40:
         89:e7:c6:41:4e:e1:f0:72:f6:02:c8:36:b1:70:fe:16:52:f9:
         5e:15:8c:c7:5b:d5:58:a3:32:1f:d0:fe:5b:38:c2:07:ed:b3:
         8b:18:0e:b0:28:6c:28:b4:3b:37:14:68:06:12:d8:7d:63:e8:
         8a:76:9a:72:b1:67:eb:e6:52:54:46:c6:d9:67:1a:da:70:79:
         30:3e:ed:87:ee:f5:e2:d1:cd:17:5c:b6:c0:70:8f:cf:a8:fb:
         1f:25:e3:04:b5:17:79:30:e6:19:e5:d7:b8:88:bf:b9:db:2e:
         e4:f8:7f:2a:58:07:ff:15:47:cb:54:41:e7:d3:6a:4c:ea:37:
         1b:4d:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:37:45 2025 by rpki-client