Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.mft
File:                     2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.mft (raw, json)
Hash identifier:          IUD5yyZJxj23qpcwkrBJHITP2222+CN1p511ibfoQl0=
Subject key identifier:   67:05:88:D7:D7:43:9A:2A:C0:02:D7:BC:AA:25:C0:C8:8A:0C:EA:5A
Authority key identifier: 2E:F6:1D:C6:A6:FE:4B:76:65:57:47:7B:AD:2B:30:70:BB:91:83:A2
Certificate issuer:       /CN=2EF61DC6A6FE4B766557477BAD2B3070BB9183A2
Certificate serial:       37243327D49912B9DFDF3272B6A27F5CB5E2DAB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.mft
Manifest number:          46
Signing time:             Wed 23 Aug 2023 16:26:59 +0000
Manifest this update:     Wed 23 Aug 2023 16:21:59 +0000
Manifest next update:     Thu 24 Aug 2023 18:58:59 +0000
Files and hashes:         1: 34352e3139312e32322e302f32342d3234203d3e20323639363634.roa (hash: 3JFRjJwQMWnBrWlMyA7heDoW6TESULZ8V5WNayYv1As=)
                          2: 2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.crl (hash: VhvIKYpGGHHlv8EYq/WrgjM2bFqLLRLQUF0Zi6dTgts=)
                          3: 323830343a363830303a3a2f33322d3332203d3e20323639363634.roa (hash: 0R9X1Ro8rcV++BfUdRo+6OGxvUvPVLGatBZV88TRpB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:24:33:27:d4:99:12:b9:df:df:32:72:b6:a2:7f:5c:b5:e2:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF61DC6A6FE4B766557477BAD2B3070BB9183A2
        Validity
            Not Before: Aug 23 16:21:59 2023 GMT
            Not After : Aug 24 18:58:59 2023 GMT
        Subject: CN=670588D7D7439A2AC002D7BCAA25C0C88A0CEA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ca:83:45:2c:fb:35:0b:87:a9:44:9a:13:43:
                    b0:0b:c9:8d:ba:cb:48:73:35:45:fe:40:73:3d:15:
                    fc:a4:9d:b1:5f:19:f2:0f:68:79:ba:10:aa:77:65:
                    1c:37:6c:14:51:c4:1f:8f:bc:20:50:f9:a5:f5:9a:
                    da:31:8b:b5:44:7f:dc:ff:91:c3:70:16:25:ee:d4:
                    42:9a:17:65:41:63:18:d0:50:18:4a:3b:22:d3:61:
                    81:6a:b5:61:6e:30:c3:b0:3d:0a:9c:ad:f9:ba:aa:
                    35:53:6c:ee:99:79:70:2d:64:dd:dd:f4:29:a5:5d:
                    a0:06:87:cf:c8:ff:f2:ab:a0:75:d3:5c:6b:b8:e7:
                    80:4f:c1:aa:40:e0:c6:18:b8:d6:8b:d9:b8:27:89:
                    70:6a:82:cc:50:2f:5e:f7:12:ff:c0:76:96:5b:a6:
                    e2:a6:92:f2:33:24:96:18:c0:a0:fc:bd:35:8b:e1:
                    22:8b:32:92:ad:73:98:75:49:79:a2:36:22:d7:bf:
                    bd:7f:9d:9f:f2:07:b5:88:9d:e2:22:a2:e7:ba:c3:
                    da:ad:df:71:0b:98:e0:4d:78:28:ad:fd:1e:d7:e3:
                    83:db:cd:db:57:fd:c7:dc:d1:b5:f7:5a:72:46:5a:
                    20:42:34:ec:2a:26:d5:49:a7:91:a9:6a:fe:13:78:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:05:88:D7:D7:43:9A:2A:C0:02:D7:BC:AA:25:C0:C8:8A:0C:EA:5A
            X509v3 Authority Key Identifier:
                keyid:2E:F6:1D:C6:A6:FE:4B:76:65:57:47:7B:AD:2B:30:70:BB:91:83:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/2EF61DC6A6FE4B766557477BAD2B3070BB9183A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:16:af:6c:78:ff:d8:44:e6:99:b4:a6:44:41:1a:ae:14:b4:
         06:77:7d:47:6e:70:26:0c:c8:dd:7d:47:32:52:a8:86:e5:12:
         de:72:2b:02:55:0b:f7:35:ed:da:80:4f:98:23:d7:0c:1b:b7:
         04:03:9f:1c:29:39:09:2a:09:fd:d9:b9:13:5e:88:65:88:22:
         71:bd:ab:cf:62:e6:8e:f9:00:a6:a5:2c:3a:2b:47:27:8e:4b:
         ab:49:16:e8:88:1e:25:6c:5a:55:a9:0b:1f:77:40:00:ea:be:
         28:c4:8a:f9:a4:79:3b:c0:2a:b2:89:d2:bd:ed:bf:dc:09:14:
         50:3f:f9:64:5b:e4:2b:7e:d9:0c:c9:a1:91:6a:a9:d8:68:f9:
         d3:9b:a4:20:15:b8:b2:4f:ac:7f:da:c4:77:18:0e:78:72:f5:
         6b:ea:4c:eb:a4:5c:62:63:8e:5c:09:03:2a:02:c9:98:aa:10:
         21:35:fa:f0:bf:31:a3:28:f2:7a:69:88:ce:dc:af:f6:d2:73:
         5a:b6:83:18:53:19:21:04:f4:68:38:40:1c:b1:7a:6a:dd:26:
         3d:87:5f:aa:12:23:ac:23:1d:d9:08:04:9f:f2:8f:9d:34:78:
         bc:c4:b9:a9:12:c3:72:42:67:11:8b:08:c1:2b:45:f0:b9:a7:
         1f:3a:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:17 2025 by rpki-client