Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/CB745AB4F91116BCB5A32D53003A38244EF9AC13.mft
File:                     CB745AB4F91116BCB5A32D53003A38244EF9AC13.mft (raw, json)
Hash identifier:          /+H/I5Ez2HiTefW7DpLWjDlgUwJWpIF5/6oZq5f2BXo=
Subject key identifier:   21:96:8E:8B:A8:3A:53:C2:A3:E7:DD:D0:FB:A9:44:3E:7A:E9:F8:AD
Authority key identifier: CB:74:5A:B4:F9:11:16:BC:B5:A3:2D:53:00:3A:38:24:4E:F9:AC:13
Certificate issuer:       /CN=CB745AB4F91116BCB5A32D53003A38244EF9AC13
Certificate serial:       5697D55C96644138DA8E74C3F82B7FF938BCE39A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB745AB4F91116BCB5A32D53003A38244EF9AC13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/CB745AB4F91116BCB5A32D53003A38244EF9AC13.mft
Manifest number:          95
Signing time:             Mon 21 Oct 2024 16:27:00 +0000
Manifest this update:     Mon 21 Oct 2024 16:22:00 +0000
Manifest next update:     Tue 22 Oct 2024 17:44:00 +0000
Files and hashes:         1: CB745AB4F91116BCB5A32D53003A38244EF9AC13.crl (hash: Or1ECdrQC9lQwgClIiSZ5jBNSQwmF8Qk6G2H4EmnJMs=)
                          2: 323830343a333461633a3a2f33322d3333203d3e20323635343732.roa (hash: Z2rlvFfdUItdotPKdeWGeUY4F23gAMFOm/GcOmVXOB4=)
                          3: 3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa (hash: +oZKKMooVhMM0TktZEzlAbvdh6ox9nCABxEeWLmkczI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:97:d5:5c:96:64:41:38:da:8e:74:c3:f8:2b:7f:f9:38:bc:e3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB745AB4F91116BCB5A32D53003A38244EF9AC13
        Validity
            Not Before: Oct 21 16:22:00 2024 GMT
            Not After : Oct 22 17:44:00 2024 GMT
        Subject: CN=21968E8BA83A53C2A3E7DDD0FBA9443E7AE9F8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:6d:ea:1b:40:14:78:06:8f:d0:6d:62:b3:
                    c6:41:1f:a7:1f:95:38:4d:8c:75:91:af:dd:ae:47:
                    14:79:60:78:92:df:02:57:0b:61:6e:0a:8c:f5:ac:
                    e5:30:4c:c6:0a:73:94:e1:5b:5f:64:45:21:24:f5:
                    c6:3d:5f:57:1a:3b:43:fc:07:14:18:ad:ae:cd:c4:
                    4c:9d:e4:45:96:0f:a2:5e:dc:03:db:50:95:0e:ab:
                    45:d1:e9:af:d5:a1:64:33:b5:1e:10:83:6c:9b:91:
                    01:ab:4a:ac:f2:1e:69:28:ea:fa:86:d3:45:db:69:
                    65:c8:6b:1a:8f:b9:d2:ea:5e:b7:b2:e2:5e:75:ad:
                    4c:95:f8:08:75:62:a5:f8:f1:ec:04:f3:a3:aa:a1:
                    a2:45:6c:11:6e:dd:d4:47:f7:ce:27:8c:b6:23:9b:
                    f2:10:b9:24:c0:25:04:bd:f9:02:d2:90:2c:0a:6e:
                    60:ab:91:33:d6:fe:48:fd:69:2e:8a:c8:bf:ef:e0:
                    f9:a6:89:16:0c:82:e8:2d:de:fa:fe:94:f2:2a:d2:
                    e8:84:8c:7c:c4:42:98:d1:3e:e5:b3:a9:58:4c:ea:
                    bf:a2:5d:b4:6d:48:84:ae:a6:64:0f:f3:b7:2a:e7:
                    2e:c1:5a:fc:ef:bd:cf:3b:bb:15:e1:07:d2:a7:80:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:96:8E:8B:A8:3A:53:C2:A3:E7:DD:D0:FB:A9:44:3E:7A:E9:F8:AD
            X509v3 Authority Key Identifier:
                keyid:CB:74:5A:B4:F9:11:16:BC:B5:A3:2D:53:00:3A:38:24:4E:F9:AC:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/CB745AB4F91116BCB5A32D53003A38244EF9AC13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB745AB4F91116BCB5A32D53003A38244EF9AC13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/CB745AB4F91116BCB5A32D53003A38244EF9AC13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ef:88:27:4a:4d:66:3b:13:1e:b1:07:61:9e:a4:f6:1e:f6:
         cf:26:7c:dd:b6:c3:d0:09:b0:4b:7c:15:8d:f3:66:70:48:c6:
         46:9f:30:ba:f5:2c:d3:a2:3b:56:5b:87:38:de:81:cf:4d:08:
         1f:38:cb:ab:4b:9e:4d:56:e3:28:b5:a6:52:20:61:b7:d0:a9:
         5a:70:9f:ab:cc:bd:68:07:7b:91:af:fc:d0:ed:9c:63:9c:86:
         2f:8d:4f:1b:79:be:05:d1:70:9b:8e:c0:47:bb:b8:9d:6e:df:
         b0:3b:b9:cb:58:9e:a5:0c:f4:8a:f0:ed:5e:93:f0:12:66:09:
         51:91:dd:3a:0a:b2:df:cd:4b:92:0b:a5:d4:7a:57:ce:94:4e:
         2a:55:25:7c:c9:b5:aa:49:fc:11:d2:7f:4d:65:26:86:01:d7:
         23:03:24:ee:72:93:d4:fc:b5:40:4c:5d:05:da:8b:5f:2f:8f:
         cc:92:c8:9b:58:80:e1:56:b6:12:d9:9d:d8:86:b0:05:50:64:
         07:5e:a0:f7:26:bb:bc:2e:7d:18:a9:ab:89:da:eb:11:39:e7:
         33:77:8d:8d:bf:02:55:eb:20:d1:ef:70:a7:1e:76:e1:2d:28:
         28:52:38:cc:9f:ad:d8:2c:33:f3:e7:fb:4e:0e:b3:c4:04:0e:
         c5:20:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:26:06 2025 by rpki-client