Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.mft
File:                     E639161CD5EFFE22EB2260353F5BC3F13358E8C3.mft (raw, json)
Hash identifier:          3cNAJmAWgLo3nhO6cN9fGaPhkJ+DnIhfoU2G5re0uI8=
Subject key identifier:   B4:4D:43:28:56:EE:9D:31:18:DA:C5:7A:FC:AD:9B:CA:FC:F7:90:88
Authority key identifier: E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3
Certificate issuer:       /CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
Certificate serial:       4684A46982261F419E1F2919864C6F1E064179D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.mft
Manifest number:          47
Signing time:             Mon 20 Jan 2025 21:09:31 +0000
Manifest this update:     Mon 20 Jan 2025 21:04:31 +0000
Manifest next update:     Tue 21 Jan 2025 22:04:31 +0000
Files and hashes:         1: E639161CD5EFFE22EB2260353F5BC3F13358E8C3.crl (hash: pYbqoDTucf9ckk7AehYSFWSTpftFEXj88kVimyQHxU4=)
                          2: 3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa (hash: gRDU6K1jrBfauXHfgbuHzuu60KzxIi1reL0n2PfzwiU=)
                          3: 323830343a373262343a3a2f33322d3336203d3e20323730383730.roa (hash: elbKRjIMwopP68OlX87hRuqMD8iXgMIDuIF2jtYf9eE=)
                          4: 3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa (hash: qBWzMW2JLNuA+rLl109SN8QIItrkaj1RHZ21RQdsusQ=)
                          5: 3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa (hash: KRLdbapQDwCRgKOY4ext/uyB3oWtd5VvO47wijMY7G4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:84:a4:69:82:26:1f:41:9e:1f:29:19:86:4c:6f:1e:06:41:79:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
        Validity
            Not Before: Jan 20 21:04:31 2025 GMT
            Not After : Jan 21 22:04:31 2025 GMT
        Subject: CN=B44D432856EE9D3118DAC57AFCAD9BCAFCF79088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:b9:07:19:5a:d2:c5:3b:f6:32:13:44:71:
                    03:a8:f0:12:d7:9c:ac:8b:b9:e1:3d:42:73:04:b9:
                    e1:84:14:a1:5b:09:ca:fb:6b:43:a4:25:5d:c4:e0:
                    43:ca:98:b4:62:32:46:a2:ce:7b:31:b1:3d:43:a7:
                    85:c8:f9:17:02:7e:6d:21:74:c2:8e:e3:5c:dc:0d:
                    f9:d3:24:1a:3e:b0:99:11:dd:0e:59:00:99:d6:86:
                    5d:f2:86:3b:a1:0e:ea:23:e3:c0:11:a1:b4:6f:b6:
                    08:be:0a:9a:a0:07:0f:8f:45:cf:4c:61:51:d3:e2:
                    38:53:f8:95:bd:bb:67:44:49:42:44:3a:89:b7:6e:
                    db:32:76:f1:33:c5:3c:c5:24:26:89:5e:0c:3e:59:
                    96:08:d5:f0:d4:85:fd:71:6a:79:21:05:a0:65:2c:
                    28:56:60:62:cb:18:80:ef:9f:ca:89:62:3c:b8:43:
                    db:4b:d2:00:c7:4f:38:7e:3a:bd:40:7e:05:11:89:
                    06:06:dd:80:40:a6:f5:fd:87:39:46:67:85:b0:c9:
                    f3:50:f0:04:b4:c5:2e:32:99:0e:fc:5e:9a:54:b8:
                    6c:a8:64:dd:13:6d:7c:e4:ad:00:14:87:fa:39:9b:
                    92:57:10:b7:cb:7b:58:98:80:b8:b6:b2:10:cd:72:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:43:28:56:EE:9D:31:18:DA:C5:7A:FC:AD:9B:CA:FC:F7:90:88
            X509v3 Authority Key Identifier:
                keyid:E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7a:98:11:7a:36:9f:89:c3:37:01:86:a2:92:39:31:d0:d0:
         fa:4c:f4:a2:f1:17:26:0b:1d:ba:75:0d:33:1f:d2:ea:f8:c0:
         75:f5:55:46:da:3d:75:e6:b5:68:ed:6b:df:f5:77:cf:bd:d7:
         67:b9:b2:89:10:b3:c4:14:c1:4f:50:c9:2b:80:fd:f7:ac:65:
         56:f6:56:9a:c6:d5:00:4e:07:0d:00:89:e3:6e:46:1d:a8:85:
         70:dc:07:43:3a:17:7e:63:32:97:db:b1:5d:dc:4b:81:e9:47:
         3a:1c:aa:5d:a0:40:34:04:83:d0:c2:78:e3:0d:41:2c:d6:81:
         54:1e:94:ef:93:3b:c2:4b:b7:24:cb:3a:d1:73:e2:8d:41:20:
         14:2a:58:5b:cd:eb:53:b1:b6:ad:c6:e2:ca:3d:97:76:28:f2:
         be:81:32:a0:03:16:fd:66:fb:47:04:67:92:51:f2:8c:6f:f2:
         c3:93:40:86:8c:8e:88:dc:7e:57:d4:9e:1c:fa:c0:43:b9:0c:
         0a:08:1f:67:00:2e:fa:e4:83:48:72:38:4a:1a:e4:ae:e5:7d:
         f5:16:aa:6c:bc:9d:91:07:1b:37:42:68:07:92:89:08:7f:53:
         7f:d0:4f:af:4e:ba:2e:4c:fe:ae:f7:d8:61:30:b1:da:97:5a:
         36:6d:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:37 2025 by rpki-client