Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/1/25B47DD1F01A32D2B76E29261C234E2A314BC078.mft
File:                     25B47DD1F01A32D2B76E29261C234E2A314BC078.mft (raw, json)
Hash identifier:          XTurq2JkXUanGU7AmU1cdwHCccpYMKScZJTYghVuhGs=
Subject key identifier:   8F:3F:03:95:34:58:04:99:A6:D9:56:96:11:90:E8:8C:B1:90:CE:91
Authority key identifier: 25:B4:7D:D1:F0:1A:32:D2:B7:6E:29:26:1C:23:4E:2A:31:4B:C0:78
Certificate issuer:       /CN=25B47DD1F01A32D2B76E29261C234E2A314BC078
Certificate serial:       67EF55793771019A287C3B344E811B6BD54A7F7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B47DD1F01A32D2B76E29261C234E2A314BC078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/1/25B47DD1F01A32D2B76E29261C234E2A314BC078.mft
Manifest number:          BB
Signing time:             Mon 05 Aug 2024 18:40:00 +0000
Manifest this update:     Mon 05 Aug 2024 18:35:00 +0000
Manifest next update:     Tue 06 Aug 2024 18:40:00 +0000
Files and hashes:         1: 25B47DD1F01A32D2B76E29261C234E2A314BC078.crl (hash: U7fJIFft+HQFhBqiVWi+CYDvvV9SOm+gLLAyBJAQ4GY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ef:55:79:37:71:01:9a:28:7c:3b:34:4e:81:1b:6b:d5:4a:7f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B47DD1F01A32D2B76E29261C234E2A314BC078
        Validity
            Not Before: Aug  5 18:35:00 2024 GMT
            Not After : Aug 12 18:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:85:f6:a1:d9:37:c2:8f:90:c7:af:ba:5c:
                    17:96:70:57:44:a6:d7:8b:0d:96:eb:da:bb:d3:de:
                    fd:5f:fd:0d:17:b0:5d:6d:52:97:a4:c8:06:e9:4d:
                    f5:e8:e8:13:b3:2a:81:f2:ce:15:11:84:71:b9:11:
                    bf:5a:35:f8:b5:5a:17:30:26:ed:8b:7d:57:3e:95:
                    9b:7d:89:a5:33:dc:c7:de:f2:ed:7f:9e:13:a0:e1:
                    7c:91:46:24:81:37:13:0b:33:3a:f8:99:7d:0e:52:
                    12:a1:28:34:89:85:62:80:00:3e:87:4a:8d:a7:22:
                    5b:88:54:fb:39:aa:91:f4:3c:9b:99:15:fd:74:18:
                    c5:66:a2:a6:3f:eb:fc:a1:0c:a0:c9:bc:2e:8e:be:
                    50:5e:7d:07:c1:8f:ef:4e:3a:4c:28:b1:e4:2a:e6:
                    66:c1:a1:cb:93:c0:ea:46:1b:61:37:d3:4b:0e:52:
                    66:ee:1e:03:b0:de:dd:98:60:38:94:91:0b:df:0b:
                    86:86:6b:df:43:d5:70:90:bf:3a:92:82:2a:52:b5:
                    cb:0b:be:8b:15:f2:12:54:1f:9c:5c:76:85:a0:a3:
                    9a:10:a6:63:a6:09:86:1f:b3:49:e5:b6:c9:ec:62:
                    db:46:99:25:af:57:6d:72:19:2f:f9:d0:4c:ae:53:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3F:03:95:34:58:04:99:A6:D9:56:96:11:90:E8:8C:B1:90:CE:91
            X509v3 Authority Key Identifier:
                keyid:25:B4:7D:D1:F0:1A:32:D2:B7:6E:29:26:1C:23:4E:2A:31:4B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/1/25B47DD1F01A32D2B76E29261C234E2A314BC078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B47DD1F01A32D2B76E29261C234E2A314BC078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/1/25B47DD1F01A32D2B76E29261C234E2A314BC078.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0c:02:2f:7f:d4:1f:71:60:cc:60:1a:bf:2e:c5:86:e0:0b:
         7c:c9:95:99:45:2d:ac:b4:66:32:08:63:7d:df:30:84:e9:e1:
         ea:46:c1:2b:d8:97:a5:89:62:ca:1d:b2:1c:94:fa:4c:4b:9c:
         79:25:6e:b0:ef:c7:e6:22:b4:65:37:76:b1:ef:8a:ca:d2:ed:
         ad:c1:fc:2c:4d:61:b3:19:65:6b:fd:f8:41:fa:eb:1f:b2:80:
         7b:6a:51:a1:8e:72:c8:be:61:85:36:78:47:c4:ff:4d:c7:c2:
         da:36:db:7b:b0:ed:4f:86:b2:8f:f6:1c:4f:87:f5:19:77:92:
         10:3e:89:fd:43:03:6a:de:b5:c4:79:a9:7d:bc:c7:78:eb:e1:
         9e:29:b4:82:be:12:57:75:e2:77:a9:8c:23:cb:ff:52:6a:fc:
         c1:f0:a2:00:c7:a1:6c:38:66:1b:6b:3f:64:16:17:16:4a:74:
         c7:48:a6:28:96:a2:0c:2c:bd:1f:f2:54:52:e7:bb:ba:5a:1c:
         0c:ac:48:2c:cf:78:b6:27:21:26:cf:67:8f:8a:a6:4a:e9:06:
         06:0b:a6:cf:89:b3:b2:a3:1d:42:4f:31:e7:2d:ef:73:9e:a3:
         f3:e4:2d:d5:f3:52:87:22:46:4e:ea:eb:10:8a:93:b0:61:a9:
         48:cc:48:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 6 20:53:02 2024 by rpki-client on console-fra.rpki-client.org