Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft
File:                     CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json)
Hash identifier:          8hynjHJMR3eyDuIkLE6zQbLOAbBf2y2p4nTXerFQWJg=
Subject key identifier:   33:2B:90:3F:CE:F4:04:F0:88:DC:D4:B7:F1:5D:C7:AE:95:4F:D3:F9
Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7
Certificate issuer:       /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7
Certificate serial:       40D4C1B0170CFFA8D38237F8E12DE89AD544C6E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft
Manifest number:          01DC
Signing time:             Fri 28 Mar 2025 20:09:53 +0000
Manifest this update:     Fri 28 Mar 2025 20:04:53 +0000
Manifest next update:     Sat 29 Mar 2025 22:25:53 +0000
Files and hashes:         1: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: 7+ikZuIydx5Qx0l7bp80liV81LC38fUdVu58w5j67QM=)
                          2: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: hqUbgxj/RNJQi5nqrnPwBzhh7SYK/ax4xDI+T6kQN58=)
                          3: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: HXHsYhUdByPYxba36KCh/OEG0vVpZrXEtjG/lzDILwA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d4:c1:b0:17:0c:ff:a8:d3:82:37:f8:e1:2d:e8:9a:d5:44:c6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7
        Validity
            Not Before: Mar 28 20:04:53 2025 GMT
            Not After : Mar 29 22:25:53 2025 GMT
        Subject: CN=332B903FCEF404F088DCD4B7F15DC7AE954FD3F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:c5:35:cb:51:51:a6:a9:b5:4e:3e:f8:48:
                    43:73:94:1f:f3:9d:34:1d:33:ee:b7:40:e4:01:ee:
                    2e:5d:a0:63:6d:3c:0b:a5:8a:ad:04:93:42:9a:8c:
                    b8:66:02:b0:e8:2a:34:03:15:5c:c5:77:3d:73:dd:
                    d8:45:29:3b:2e:f8:5d:ee:bd:d1:0a:fa:8a:47:e5:
                    a7:77:87:36:6f:41:01:8e:44:7c:2d:48:fa:33:8d:
                    79:62:39:ed:7e:ab:9a:08:0e:5f:1e:5c:59:23:c5:
                    32:bb:8b:28:3b:12:8c:0e:98:c3:d6:b6:f3:0b:a2:
                    d5:2b:f2:44:37:a7:c0:ec:81:f0:2b:8b:f1:b6:85:
                    4c:80:9b:59:c4:6e:37:ed:14:ea:4d:7a:50:7e:f0:
                    a7:a6:1e:3b:db:5d:b3:56:cd:27:70:6a:b9:7c:11:
                    0f:4a:96:2b:1e:95:94:d7:86:c9:ed:59:ad:c5:d8:
                    45:3b:bb:17:00:cb:ca:a9:6a:90:df:36:bb:43:73:
                    6e:b6:c9:bc:01:5c:da:48:68:01:14:42:59:8d:37:
                    b7:11:c1:64:1e:8d:ac:13:92:47:0d:ab:ad:cd:88:
                    06:94:b3:cd:27:b9:bf:33:08:35:16:d3:0c:ba:b0:
                    6e:11:23:98:30:9a:8e:81:a9:ff:18:af:28:15:02:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:90:3F:CE:F4:04:F0:88:DC:D4:B7:F1:5D:C7:AE:95:4F:D3:F9
            X509v3 Authority Key Identifier:
                keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:07:8e:f8:32:1d:1a:f3:a2:46:d4:b2:95:f1:f5:6c:27:c2:
         fd:26:ac:d9:7e:61:92:3f:d7:d8:91:8a:c5:5a:24:fd:2a:b8:
         82:38:c0:d5:83:27:00:33:7a:53:75:9f:64:a0:6e:7d:3c:77:
         c5:32:34:4f:4d:5d:51:ef:0c:4e:f2:b6:d4:0c:6a:5e:49:e6:
         3e:0a:5d:06:2d:12:21:0c:f6:ea:19:ea:c8:f8:c7:29:9b:db:
         a3:91:92:2c:9e:96:49:af:2e:11:31:68:8b:a7:fd:f8:59:f2:
         63:aa:8c:f5:c7:57:ef:85:4c:7d:62:91:42:a3:c9:3c:c7:81:
         27:26:9f:f6:93:84:6f:03:c9:12:f9:ef:02:53:d6:38:a2:08:
         2d:c8:bb:a4:ce:95:73:57:36:e3:60:c3:b8:1d:c5:8e:44:f8:
         83:ec:a7:a4:60:4c:3c:7f:41:70:0e:84:f0:13:e3:40:31:5b:
         ed:02:c0:3a:b1:08:c0:b0:69:39:ed:f3:e2:55:38:e1:2a:18:
         ad:3a:3b:3c:2b:1c:28:68:cf:2e:59:bb:38:58:a0:3c:2a:b3:
         5f:d6:c7:ce:c9:cf:a4:63:6d:56:c3:72:d3:a9:9f:1b:93:43:
         d0:a0:96:75:e6:e1:d3:f5:67:a0:39:b2:d0:da:93:e7:53:21:
         e6:d7:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:18 2025 by rpki-client