Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft
File:                     60E9E1814AC20560AE7B9A36F212037445A23C52.mft (raw, json)
Hash identifier:          ze8d7MZUzYvru/sPSAwXTZCEEbl7qvdMY+UPhTGy3EE=
Subject key identifier:   CB:B8:DF:44:86:23:19:FB:5E:FE:5D:19:84:B8:B8:B5:AD:BD:54:5D
Authority key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52
Certificate issuer:       /CN=60E9E1814AC20560AE7B9A36F212037445A23C52
Certificate serial:       10F085571305C4AFC4EC9EDE493EB8F5C0399B8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft
Manifest number:          53
Signing time:             Mon 17 Feb 2025 09:00:04 +0000
Manifest this update:     Mon 17 Feb 2025 08:55:04 +0000
Manifest next update:     Tue 18 Feb 2025 11:35:04 +0000
Files and hashes:         1: 3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa (hash: zenQan1c0HymGfdGMKm8zMh3KFHSX/5y3l4etpdtNvQ=)
                          2: 60E9E1814AC20560AE7B9A36F212037445A23C52.crl (hash: gVYtYjYGD9D31S+nU2GPiIheBOL9OxR1XYI3Uk9i/IM=)
                          3: 3136382e39302e35362e302f32322d3332203d3e20323635323738.roa (hash: PQIqoT+StSMO2wUYfHgUhCq1IiGJJWgkv6JT4LN3Qqc=)
                          4: 323830343a326436303a3a2f33322d313238203d3e20323635323738.roa (hash: wVDpLquXhLYmOQva4up0lIJzNdpjxE6kRBQ6x/Clj9g=)
                          5: 3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa (hash: sJml9tW4GbM6Ehc1Y8/P0KgcLa+/lQ2YsiRGz745dno=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f0:85:57:13:05:c4:af:c4:ec:9e:de:49:3e:b8:f5:c0:39:9b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E9E1814AC20560AE7B9A36F212037445A23C52
        Validity
            Not Before: Feb 17 08:55:04 2025 GMT
            Not After : Feb 18 11:35:04 2025 GMT
        Subject: CN=CBB8DF44862319FB5EFE5D1984B8B8B5ADBD545D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:90:f5:e2:c4:b2:9b:b8:b5:b6:04:c1:0d:
                    04:19:9e:57:f2:1b:6d:ce:c0:4a:f5:8e:05:5c:7a:
                    18:70:b5:6b:d6:00:85:3a:25:94:73:e8:b2:0a:a4:
                    b0:e4:95:fc:57:02:b5:4f:17:dd:71:9a:94:0f:a0:
                    d2:5a:99:ff:74:f7:8b:f4:cd:f7:1c:2c:a6:ed:94:
                    6c:a3:0a:25:a4:be:3d:90:1a:2f:bd:53:94:a4:a8:
                    45:0c:42:4b:e4:89:e0:d4:35:80:8b:f0:fd:1e:48:
                    c1:3b:96:f0:9e:62:98:54:76:74:7b:3e:68:f4:e1:
                    61:2e:c9:7d:a7:74:99:41:3a:13:d0:04:b8:e9:9d:
                    d0:0b:f0:a0:ee:e4:b4:f9:b9:c4:d5:77:38:f8:0f:
                    96:d6:4f:12:12:a9:7d:2d:79:88:a6:f4:bd:aa:4d:
                    5b:52:7a:f0:02:fe:d4:75:23:c5:6e:c7:8c:54:8c:
                    4b:9e:14:f3:7c:d4:02:69:c3:cb:73:a7:ed:75:b6:
                    83:1b:a2:0a:6a:43:30:63:68:4c:b2:7d:36:f3:24:
                    75:41:84:e0:59:bb:0f:b8:89:2b:da:28:70:84:9d:
                    40:73:1b:f5:f1:ab:38:a1:96:49:40:74:ac:4e:04:
                    c5:5d:4a:35:06:ed:f0:1b:ed:e2:a4:0f:87:fd:ed:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:DF:44:86:23:19:FB:5E:FE:5D:19:84:B8:B8:B5:AD:BD:54:5D
            X509v3 Authority Key Identifier:
                keyid:60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4e:42:e2:21:4a:0d:69:ca:67:c7:32:dc:f2:3a:00:58:77:
         35:c1:18:89:83:27:b2:bf:ed:c3:ba:3b:c5:03:7a:89:17:e9:
         2a:6e:e7:4e:29:5f:00:bb:c5:aa:9e:16:f6:77:0a:cc:b8:b5:
         d9:37:1e:b6:25:11:4d:5e:f1:0c:8e:fe:da:98:9e:40:dc:00:
         cc:d5:c4:b2:93:c7:a7:a3:4c:ef:1c:21:b2:29:90:e3:33:06:
         20:be:c4:da:2c:46:32:a1:96:ad:8c:0b:b5:be:ee:f5:30:a8:
         c1:af:dd:79:c2:e7:63:f3:f4:2d:5b:34:1f:3a:17:42:f3:d3:
         59:59:cc:72:8d:34:0f:9a:94:a3:24:26:de:49:88:09:7a:fb:
         b1:83:da:0a:7d:91:1b:4c:fe:3a:02:42:ba:e0:31:00:0d:26:
         12:c3:69:80:36:cb:dc:43:e3:38:3b:0e:df:db:f0:c1:dc:68:
         0a:f6:6b:1a:33:81:68:35:70:1c:92:06:6f:f8:1f:8b:09:f2:
         63:5b:a3:37:d6:6e:40:fd:bd:3a:e9:23:a1:45:81:56:43:34:
         9b:07:66:d9:7b:fc:78:7e:14:f2:2c:c6:b9:86:5f:d2:56:7c:
         fe:7c:68:d7:6d:c5:2f:59:0a:86:ff:df:6e:82:49:a5:7f:fe:
         e8:4f:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----