Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.mft
File:                     C01DF174C12528273BF338B916174C8FBDA2AEB3.mft (raw, json)
Hash identifier:          cKqepd36ErrRpTFV4T+j4qtyfgvYl1GFbU0hrV8RTFk=
Subject key identifier:   83:99:8A:8B:8E:C8:BB:48:8A:5F:54:21:54:91:26:29:EE:8C:C4:92
Authority key identifier: C0:1D:F1:74:C1:25:28:27:3B:F3:38:B9:16:17:4C:8F:BD:A2:AE:B3
Certificate issuer:       /CN=C01DF174C12528273BF338B916174C8FBDA2AEB3
Certificate serial:       4DDB35EBBC781E0D45CCE70B549B9272C41F9578
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.mft
Manifest number:          0141
Signing time:             Sun 01 Dec 2024 19:23:40 +0000
Manifest this update:     Sun 01 Dec 2024 19:18:40 +0000
Manifest next update:     Mon 02 Dec 2024 20:40:40 +0000
Files and hashes:         1: C01DF174C12528273BF338B916174C8FBDA2AEB3.crl (hash: f0t3HbTY/Pho21Zr0qDt1T1/HSGD8LYvfI/w/RFjUUM=)
                          2: 323830343a373766303a3a2f33322d3438203d3e20323731323039.roa (hash: 3H3lnOYwttjRWan9DV1unUnnT2azIIydxeNsQOR/eso=)
                          3: 3137372e3232332e3134302e302f32322d3234203d3e20323731323039.roa (hash: L0Bm7HUtEstmxeyv4ejlL99CjgVaHjWBCZS5m2upPv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:db:35:eb:bc:78:1e:0d:45:cc:e7:0b:54:9b:92:72:c4:1f:95:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01DF174C12528273BF338B916174C8FBDA2AEB3
        Validity
            Not Before: Dec  1 19:18:40 2024 GMT
            Not After : Dec  2 20:40:40 2024 GMT
        Subject: CN=83998A8B8EC8BB488A5F542154912629EE8CC492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:1b:9e:5b:f9:a0:0d:e4:78:24:e2:ea:6b:
                    f3:7c:ea:ac:9a:46:5c:e8:8d:5f:b3:20:84:ea:3d:
                    ca:70:48:d2:b6:fe:75:f5:0b:1f:c2:a4:e6:47:3c:
                    a4:9f:38:0e:6a:72:59:e8:c7:5f:30:21:03:47:ce:
                    65:89:12:9c:22:d1:da:bf:72:49:00:4b:f6:94:d3:
                    c0:70:5b:5d:46:cf:0b:18:28:ff:16:66:6f:47:03:
                    00:e2:26:f1:89:c7:27:4f:57:b7:c4:0e:c7:28:36:
                    76:25:ba:f9:b0:a0:3f:1d:81:99:9e:b6:42:8e:7d:
                    35:52:bb:48:53:29:ed:b4:8d:00:b1:82:b4:b5:c4:
                    2d:fb:1a:88:05:07:f8:75:59:ab:34:97:36:78:a0:
                    6d:25:01:44:1b:60:a5:2a:1c:39:d5:04:6f:51:e7:
                    66:8a:aa:39:9f:50:be:f7:d0:42:c6:7e:db:9c:5b:
                    7e:c1:39:e2:7b:83:40:19:04:81:6c:1e:5d:18:07:
                    d9:98:d4:74:dd:18:44:6b:c4:a7:c1:7a:b8:94:fe:
                    c2:f4:c3:9c:d7:5e:e7:b9:1c:57:ad:97:1f:4b:ec:
                    a6:2d:ba:f9:d5:b6:90:52:6d:a7:21:10:52:92:ba:
                    a6:e7:36:21:5d:75:59:84:13:21:7a:00:c3:84:4a:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:8A:8B:8E:C8:BB:48:8A:5F:54:21:54:91:26:29:EE:8C:C4:92
            X509v3 Authority Key Identifier:
                keyid:C0:1D:F1:74:C1:25:28:27:3B:F3:38:B9:16:17:4C:8F:BD:A2:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/1/C01DF174C12528273BF338B916174C8FBDA2AEB3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:ca:cd:3b:cb:27:c5:3a:d2:83:0f:be:71:f2:dc:49:3c:
         9c:bd:33:f8:dd:75:1c:b7:00:f5:bc:08:42:b1:4f:74:df:ec:
         9b:a3:87:73:d1:de:28:34:3c:42:2d:30:6d:57:4d:85:fa:f2:
         55:74:6a:48:9e:83:bb:4c:8d:3d:1a:1c:c2:1d:ef:9c:d0:57:
         3e:c3:c6:42:a8:5e:82:8a:16:3a:da:6b:be:a9:d7:cf:c8:1d:
         f1:e3:ea:fa:23:0d:a7:04:ec:05:63:1b:09:73:b3:5e:85:06:
         33:29:ef:58:df:37:ef:b3:af:be:03:c0:06:1e:96:e9:fe:c6:
         ae:53:dd:ee:47:bb:6f:1a:8d:c6:e0:f9:bb:77:cf:b7:14:93:
         19:ad:e7:d3:2e:d0:e4:cf:78:d5:25:39:85:c8:af:77:95:50:
         2e:af:8e:6d:ab:5e:87:6d:ab:f3:69:f1:48:a3:4f:e6:de:5c:
         e2:93:5b:30:f9:a6:8d:c7:09:27:8c:96:50:93:4a:b4:4c:4d:
         ab:26:af:16:5b:05:0a:6a:27:a4:62:eb:11:63:1d:6b:13:91:
         c0:66:2f:51:22:36:c3:bf:e4:0f:58:b5:20:08:8d:c3:13:93:
         d0:69:8a:71:e1:cc:fe:83:e0:17:c2:eb:f0:b7:74:5a:a8:bd:
         da:83:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:28 2025 by rpki-client