Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/1/7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.mft
File:                     7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.mft (raw, json)
Hash identifier:          yAZp235eZ1nSbeiVHhuYpvKwYp81MYqxgPF4mBUsTbY=
Subject key identifier:   D2:56:3E:9D:DF:9D:FA:37:90:E9:FF:17:0C:A6:06:52:1E:DA:F7:E7
Authority key identifier: 7C:4E:3F:5F:BD:2E:B4:29:24:4B:1F:34:4E:9E:FA:C3:D9:7D:56:B1
Certificate issuer:       /CN=7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1
Certificate serial:       5FEF9ACE1119CB14DE58F116C866DEB86BFC9DE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/1/7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.mft
Manifest number:          0171
Signing time:             Sun 05 Jan 2025 23:53:20 +0000
Manifest this update:     Sun 05 Jan 2025 23:48:20 +0000
Manifest next update:     Tue 07 Jan 2025 02:32:20 +0000
Files and hashes:         1: 7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.crl (hash: kvpG67q0gDL/3TJjklmmhbL/+t9EpQt4q91NJeeReMk=)
                          2: 323830343a343865303a3a2f33322d3438203d3e20323637313530.roa (hash: AX8xvia4MKBaPgpfkn4sfAWXMQHQbPL30PD6g75FaCg=)
                          3: 34352e3233302e35362e302f32322d3234203d3e20323637313530.roa (hash: aHuTxbfhi7hKW9GrWiY5tUj70Txuc4yICTU5Gw/lmT4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ef:9a:ce:11:19:cb:14:de:58:f1:16:c8:66:de:b8:6b:fc:9d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1
        Validity
            Not Before: Jan  5 23:48:20 2025 GMT
            Not After : Jan  7 02:32:20 2025 GMT
        Subject: CN=D2563E9DDF9DFA3790E9FF170CA606521EDAF7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:45:15:23:60:f8:39:4e:5a:6f:24:59:1c:
                    8b:86:bb:9f:91:37:e8:c3:2c:cc:f6:0c:fe:cd:c3:
                    6a:69:44:b2:ce:e9:23:c8:f7:88:b1:ee:a3:87:4e:
                    a3:74:7c:f7:fa:a8:ba:fb:7b:a1:ad:2d:0c:d1:6d:
                    24:f4:23:5a:b6:2c:8f:aa:94:3a:c2:ee:98:35:5e:
                    de:6d:af:89:26:fa:46:44:c3:5c:0a:e4:7e:15:85:
                    c5:0d:e7:29:d3:63:50:46:c8:b5:c2:62:b0:bb:22:
                    8d:c2:ef:15:9f:bb:ff:d8:52:96:14:53:76:39:80:
                    75:cf:9d:21:28:4e:7c:87:c6:a5:48:63:3b:2a:4a:
                    6e:61:8e:a4:ed:2a:fc:c5:99:34:57:57:7d:37:70:
                    e7:0f:88:e4:5b:77:3d:8d:bf:e2:d1:6c:24:e5:b2:
                    1a:c3:2d:e7:ff:27:29:37:c3:15:f0:1a:5e:b1:0f:
                    e6:a9:41:7d:1f:41:04:26:85:4b:f9:4a:a6:40:30:
                    e6:22:44:ad:b1:46:a4:ae:77:23:02:14:e7:90:e7:
                    53:aa:01:a3:e3:e4:69:12:a9:fd:e7:48:50:1a:5e:
                    62:7d:f3:b4:21:db:ee:1f:10:ee:34:74:73:05:02:
                    7a:f1:00:0e:76:b3:46:ad:43:9d:41:ba:e1:4c:e1:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:56:3E:9D:DF:9D:FA:37:90:E9:FF:17:0C:A6:06:52:1E:DA:F7:E7
            X509v3 Authority Key Identifier:
                keyid:7C:4E:3F:5F:BD:2E:B4:29:24:4B:1F:34:4E:9E:FA:C3:D9:7D:56:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/1/7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/1/7C4E3F5FBD2EB429244B1F344E9EFAC3D97D56B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5a:1d:74:6d:8f:f8:97:c7:70:02:73:cc:dd:73:be:bb:f2:
         0d:46:ff:45:a7:4d:5e:a5:97:41:ae:32:4a:07:ae:5d:ae:25:
         73:01:e3:93:7a:e9:11:e7:e4:3e:76:73:5f:87:6b:40:a0:6c:
         01:3b:f9:ba:39:ae:5d:9f:dd:3b:a4:1b:dc:ee:fd:49:e0:ce:
         d1:34:a7:e6:06:9b:18:ae:07:4f:97:14:49:ac:98:68:be:e6:
         30:c1:65:72:cd:d8:5f:e9:2a:3a:c0:e0:e6:4b:eb:1e:10:45:
         16:b5:80:a9:ec:c3:ec:0b:42:69:cc:8a:d9:df:4f:3f:1b:a5:
         8a:3d:94:81:8f:e7:4d:c5:2d:1e:06:31:2f:5a:e7:67:e5:3a:
         73:4d:f4:33:ad:0a:24:30:b4:85:60:6f:1d:d7:93:95:76:12:
         3a:f1:63:24:3d:a2:6c:a4:62:13:66:35:76:c6:81:47:b3:75:
         b4:61:cd:1c:36:99:7f:cb:91:09:6b:93:1c:4a:8d:9d:38:aa:
         d2:0f:29:7f:bb:66:43:00:2a:e8:6e:ef:c8:be:95:54:07:9c:
         81:31:53:b5:76:58:fd:31:2f:4a:cc:44:27:30:81:f3:3c:1c:
         7c:ab:f7:22:2d:bb:34:89:91:05:6f:cc:be:1e:48:e8:9c:90:
         c8:88:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:27 2025 by rpki-client