Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.mft
File:                     609592934A0E33AC57311C220A76D5408AC0153F.mft (raw, json)
Hash identifier:          Wdu460sPLtxZfb0Ec18KHTYYu567QzHHaMHWSyqIzeQ=
Subject key identifier:   65:8B:5F:2F:25:FF:BB:77:0A:B3:07:11:BC:5D:C6:6E:E2:DA:7A:0E
Authority key identifier: 60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
Certificate issuer:       /CN=609592934A0E33AC57311C220A76D5408AC0153F
Certificate serial:       7EDDBF30E86D724D5C3BA233955765372ECCB96B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.mft
Manifest number:          42
Signing time:             Thu 27 Feb 2025 08:56:39 +0000
Manifest this update:     Thu 27 Feb 2025 08:51:39 +0000
Manifest next update:     Fri 28 Feb 2025 10:59:39 +0000
Files and hashes:         1: 323830343a383535383a633030303a3a2f33342d3334203d3e20323732353733.roa (hash: fqmIEYsTFj+zhcoLd8iDbvyqthk1kITdTuTATccADxg=)
                          2: 323830343a383535383a383030303a3a2f33342d3334203d3e20323732353733.roa (hash: T8V+vJpeTctIuI1u9eCw4vfUojrL2dpemubQZxNyCQI=)
                          3: 609592934A0E33AC57311C220A76D5408AC0153F.crl (hash: U01JxzrukumcUjvK6R0Vjc2pfgXOx/v8MlKbFipDHzY=)
                          4: 323830343a383535383a3a2f33322d3332203d3e20323732353733.roa (hash: QmEsqPGpzVd9AudopZg/8fUIFNkSx+iggO1HA2LLqZk=)
                          5: 323830343a383535383a3a2f33342d3334203d3e20323732353733.roa (hash: Tje5GNqdL5x+U3L1yED66sAkczMut7T5BhNCQoF+cMc=)
                          6: 323830343a383535383a343030303a3a2f33342d3334203d3e20323732353733.roa (hash: StnzfBDuKmRiQVG/MWUJVpI7e/2BgTmRLbZqZko42Go=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dd:bf:30:e8:6d:72:4d:5c:3b:a2:33:95:57:65:37:2e:cc:b9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=609592934A0E33AC57311C220A76D5408AC0153F
        Validity
            Not Before: Feb 27 08:51:39 2025 GMT
            Not After : Feb 28 10:59:39 2025 GMT
        Subject: CN=658B5F2F25FFBB770AB30711BC5DC66EE2DA7A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:cd:1e:12:86:ef:ae:c2:49:21:02:3d:11:
                    ab:d7:bf:9e:19:c4:50:ab:b2:61:fb:c7:a9:16:a9:
                    ea:52:2f:81:e8:5b:21:2c:08:5a:fa:fb:87:95:53:
                    a4:73:35:62:e3:ee:ef:56:61:64:20:7c:4c:89:e7:
                    ad:7a:e5:9d:1f:91:f5:b8:4a:c7:37:dc:54:79:fd:
                    cf:83:73:09:3b:86:e0:57:6d:05:84:07:af:5c:6b:
                    6d:75:ed:f4:88:e9:8c:7a:1c:13:5e:e2:54:93:01:
                    60:c2:64:69:ac:4d:38:58:7a:26:da:bb:27:a8:9a:
                    14:35:53:03:36:e7:7a:2f:45:b8:17:47:f5:93:78:
                    5c:34:41:9a:45:85:63:da:9f:f9:ca:ee:58:ff:04:
                    ce:4c:fe:e0:15:31:81:b2:9d:e7:7a:97:c3:b0:bd:
                    cb:8b:27:94:58:47:3b:e0:a0:63:3b:de:01:d6:72:
                    06:0f:23:9c:0f:0a:51:35:6c:5f:1c:0a:55:7e:63:
                    10:90:d7:be:81:10:a2:6f:2b:57:57:e1:a6:86:a6:
                    a5:44:aa:c3:a8:9e:bf:fe:a4:2e:25:1a:03:fa:d4:
                    b0:2f:5b:44:d4:b5:a1:5f:67:f2:6c:44:3b:87:07:
                    aa:e0:16:72:e4:dc:1b:e3:8f:bf:fe:ae:1d:3c:07:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8B:5F:2F:25:FF:BB:77:0A:B3:07:11:BC:5D:C6:6E:E2:DA:7A:0E
            X509v3 Authority Key Identifier:
                keyid:60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:5e:dd:e0:d4:ae:00:b3:0a:2d:3d:d8:36:30:62:3e:8c:
         3d:2b:80:7f:31:88:50:6b:52:20:ce:a6:56:41:c9:20:63:a8:
         4c:ae:80:bc:61:d0:c6:8b:4a:4b:83:8d:07:c8:a8:a6:04:52:
         49:2d:eb:34:c7:5d:44:5d:29:78:b5:15:11:b0:e4:6e:e4:cd:
         a0:e3:72:20:20:31:46:5d:7e:bd:04:c1:63:3d:85:c8:5f:61:
         6b:66:57:7d:34:e8:fd:23:c2:c7:39:4b:93:41:06:a8:29:43:
         c2:95:a2:e4:35:66:c9:0b:30:04:6a:d3:91:a1:90:08:6a:27:
         1f:61:66:f7:7f:18:5e:d3:8a:93:1f:71:e2:62:57:4b:42:5d:
         29:1e:c8:15:90:6e:a9:b5:40:79:66:c1:e9:66:93:be:e5:96:
         34:39:d8:5b:25:f7:b5:68:fc:75:d2:ac:6d:62:80:6a:43:e9:
         29:b5:74:0f:7a:9a:a8:8e:6d:4a:08:ca:8d:6e:22:5a:7b:8c:
         b7:db:17:b8:ad:1d:62:35:99:c9:c9:81:4d:20:3a:88:51:59:
         6f:c2:c1:f1:69:31:b6:82:30:3e:44:f2:17:b0:7e:ba:1b:1d:
         6a:f8:c8:7f:35:6e:ed:f6:40:a6:ac:ed:db:c4:9d:64:bf:06:
         07:4a:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:58:53 2025 by rpki-client