Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/8DDDFFBA111E169E87E8F373AA209F86667B371F.mft
File:                     8DDDFFBA111E169E87E8F373AA209F86667B371F.mft (raw, json)
Hash identifier:          BoZ25CDKlM8KZmm7JPyCV53Sc8zBQphuYk5wUux/A20=
Subject key identifier:   67:7F:71:69:88:73:05:41:72:8B:3B:8A:76:1E:86:9E:EA:1D:3A:9A
Authority key identifier: 8D:DD:FF:BA:11:1E:16:9E:87:E8:F3:73:AA:20:9F:86:66:7B:37:1F
Certificate issuer:       /CN=8DDDFFBA111E169E87E8F373AA209F86667B371F
Certificate serial:       6B899935FAA5B9CD254F18F3BC199A45C4263893
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DDDFFBA111E169E87E8F373AA209F86667B371F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/8DDDFFBA111E169E87E8F373AA209F86667B371F.mft
Manifest number:          BB
Signing time:             Fri 05 Jan 2024 00:04:48 +0000
Manifest this update:     Thu 04 Jan 2024 23:59:48 +0000
Manifest next update:     Sat 06 Jan 2024 02:54:48 +0000
Files and hashes:         1: 3137372e35322e32342e302f32312d3234203d3e20323632323832.roa (hash: FcgTL3SVL+R0SbzPpMIeHezbjbTy7d7TCpUbxEsGvZc=)
                          2: 323830343a6136633a3a2f33322d3430203d3e20323632323832.roa (hash: GvEiRBfFVE/SPD4G9RtL3lhXYDCNfILVR08iEVybmG4=)
                          3: 8DDDFFBA111E169E87E8F373AA209F86667B371F.crl (hash: PyROUPYWW4WDc6wQKPlDmmSVkJ2lydUY9m/AUUiG99k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:89:99:35:fa:a5:b9:cd:25:4f:18:f3:bc:19:9a:45:c4:26:38:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DDDFFBA111E169E87E8F373AA209F86667B371F
        Validity
            Not Before: Jan  4 23:59:48 2024 GMT
            Not After : Jan  6 02:54:48 2024 GMT
        Subject: CN=677F716988730541728B3B8A761E869EEA1D3A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:88:03:78:2b:f2:00:7d:07:b1:83:20:b3:
                    e2:8f:ff:7f:7a:79:6f:3d:dd:f1:5a:56:fc:96:69:
                    ce:0b:95:e3:d8:99:26:16:c4:54:94:66:a0:85:3d:
                    6d:5f:d4:4d:85:df:fb:cb:5c:d1:04:43:de:b7:e4:
                    dd:cb:81:f2:be:1e:cd:d2:48:4b:68:0d:7b:a1:c3:
                    5c:c4:ee:7b:55:ac:b8:dc:d4:85:aa:0b:60:68:9d:
                    15:a9:fb:f3:23:2c:6f:7d:14:c7:07:49:32:e6:de:
                    bb:d5:08:5e:5e:e3:9a:9e:40:b8:85:cd:09:18:7b:
                    77:56:76:e8:c4:e5:63:09:ad:5f:2d:52:28:0e:65:
                    01:af:8d:c4:88:2f:f5:5d:ee:9e:e1:ea:9c:30:c2:
                    27:85:9a:41:31:45:f5:dd:31:38:62:ee:9e:f2:d2:
                    89:ad:5a:1a:60:f6:9c:ec:8a:bc:63:43:19:9f:44:
                    dc:2f:5f:6b:14:52:75:f9:34:e0:da:f4:f8:c0:2f:
                    d8:30:f8:0c:a2:23:72:c5:b6:b3:2a:0e:5e:0e:84:
                    b7:d5:a9:ec:5f:b0:ec:00:77:06:45:bd:99:29:03:
                    d8:4c:30:96:ca:ae:94:58:e8:29:98:ba:36:30:69:
                    58:b0:c3:0f:19:55:0f:32:b5:92:bd:54:4e:d4:d4:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:71:69:88:73:05:41:72:8B:3B:8A:76:1E:86:9E:EA:1D:3A:9A
            X509v3 Authority Key Identifier:
                keyid:8D:DD:FF:BA:11:1E:16:9E:87:E8:F3:73:AA:20:9F:86:66:7B:37:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/8DDDFFBA111E169E87E8F373AA209F86667B371F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DDDFFBA111E169E87E8F373AA209F86667B371F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aqUC3tEEJV85ukKShYraRBkCjmjq46MXFSdyFKVwmzP/0/8DDDFFBA111E169E87E8F373AA209F86667B371F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:53:72:b0:c0:9e:ae:35:94:23:1d:8b:7e:20:1a:f4:d2:0b:
         e4:cd:00:d9:b3:02:da:70:e7:c5:a6:08:35:0d:a1:42:4e:79:
         b1:39:b8:07:37:ed:23:28:0a:89:35:06:f1:07:18:7a:d4:ba:
         1a:84:c2:36:89:4b:b7:11:15:c3:fe:32:3b:ad:de:7e:a9:e6:
         1b:5b:2e:77:2a:ef:3f:20:c3:49:ed:fb:9e:28:ca:96:a0:99:
         cf:0c:2f:4f:70:ab:a7:d5:a9:df:54:cf:d5:af:10:44:23:d0:
         20:59:f2:08:a2:5c:2f:73:fe:a6:cb:75:c8:3f:63:71:37:55:
         8e:90:51:32:9d:cb:98:2a:b0:2a:4a:34:d2:e1:5b:ae:9e:04:
         18:f5:2f:a6:aa:2e:7c:56:92:64:cd:ea:82:58:e6:81:62:e1:
         f3:da:91:3a:ea:0f:4b:e3:75:fd:84:61:cc:cc:f7:cb:7f:a2:
         37:d6:47:12:4e:8c:91:33:69:84:65:bb:32:88:4c:a4:f2:78:
         59:31:2f:e5:e1:1b:e8:95:f7:fc:4d:4e:b4:04:03:fb:20:5d:
         b9:5d:70:dc:7b:24:a3:40:c1:bb:2e:49:df:81:28:ca:75:b3:
         30:53:63:94:92:21:92:07:97:bd:f5:3d:5b:7c:14:d8:88:dd:
         f4:69:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:49:43 2025 by rpki-client