Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft
File:                     A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft (raw, json)
Hash identifier:          BsHUZjiUXUve6b72KMVsYy85/RKug7+MbBylDEPh5P4=
Subject key identifier:   7F:5D:A9:27:9A:47:F8:EA:B8:0F:2B:4D:C7:39:5B:E9:64:5A:EA:D9
Authority key identifier: A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F
Certificate issuer:       /CN=A5D7C61DBB9645C282D594045FD27D9E265B6A5F
Certificate serial:       28C9FE2CB1E342859D189764A75580BB22AE3EC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft
Manifest number:          23
Signing time:             Sun 09 Feb 2025 18:02:12 +0000
Manifest this update:     Sun 09 Feb 2025 17:57:12 +0000
Manifest next update:     Mon 10 Feb 2025 18:46:12 +0000
Files and hashes:         1: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: q3ycRynzJnT3HY8sjI8CsEdtDdcL7HGnLY1kn02NNTg=)
                          2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: uXWPOiQNSmtMcn7q5XeKg+PYtDPJSsTsQ1H9tWRPUas=)
                          3: A5D7C61DBB9645C282D594045FD27D9E265B6A5F.crl (hash: HWG0x5GzBJlaEAJ5qztgqIRw5SnZ4RyEn9mFrgT0JvI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c9:fe:2c:b1:e3:42:85:9d:18:97:64:a7:55:80:bb:22:ae:3e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D7C61DBB9645C282D594045FD27D9E265B6A5F
        Validity
            Not Before: Feb  9 17:57:12 2025 GMT
            Not After : Feb 10 18:46:12 2025 GMT
        Subject: CN=7F5DA9279A47F8EAB80F2B4DC7395BE9645AEAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:3d:33:28:c7:7d:c3:88:df:cc:e8:ba:39:
                    26:59:f2:c7:a3:4c:00:34:01:4c:7a:df:7e:48:13:
                    97:bf:fb:28:81:48:17:07:f0:09:b7:78:9b:bf:e5:
                    55:37:5a:1e:28:90:19:d0:85:c1:32:fe:11:d5:fb:
                    31:d8:08:e8:b7:82:e7:6d:03:a9:33:e9:80:7b:d0:
                    86:08:13:e5:fd:24:ba:44:c1:1c:11:d2:11:f8:7d:
                    2d:e9:e3:18:38:c8:73:7d:b5:d1:34:33:91:ed:b3:
                    7e:40:1e:63:d7:04:78:53:24:78:d7:00:29:45:03:
                    b1:91:6a:6b:c5:c6:33:8a:f1:c9:37:05:7f:cc:92:
                    05:b5:c3:1c:e8:27:2f:af:be:d0:92:a7:2c:ca:69:
                    57:15:29:7b:30:0b:6c:71:bc:be:9b:6d:55:aa:0a:
                    86:3f:fb:dd:68:be:2f:c9:45:49:21:6e:82:3e:30:
                    90:f2:32:7d:8c:a4:1a:ce:cc:4f:91:96:b4:e0:e7:
                    53:8e:9d:77:64:5e:7e:d3:38:43:1d:18:22:bf:83:
                    52:9a:82:ef:61:52:23:a2:89:82:2b:7b:bb:52:22:
                    c3:ea:ae:60:b1:85:56:45:ed:8a:05:72:b4:3d:ea:
                    2f:1b:8a:71:ff:06:aa:d8:e6:ca:c1:de:03:6d:df:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:A9:27:9A:47:F8:EA:B8:0F:2B:4D:C7:39:5B:E9:64:5A:EA:D9
            X509v3 Authority Key Identifier:
                keyid:A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:cc:a3:46:e0:ef:b1:3a:10:cd:e5:d5:ed:3f:0b:be:67:
         81:c6:93:9e:ef:7f:64:76:8f:aa:8b:32:65:d5:e3:0f:ed:23:
         67:3a:4c:88:3d:d6:29:83:b0:2e:1f:99:8f:f0:73:0b:50:ab:
         78:46:10:07:8a:49:53:15:18:11:42:22:42:f0:2c:8a:87:ed:
         0b:84:58:64:a9:98:66:ed:f3:14:5c:5a:05:c4:e9:80:a5:7f:
         f1:f1:f0:21:8d:b5:32:88:be:66:2c:80:fc:3e:55:93:19:c2:
         fe:23:60:ee:fd:2b:1a:26:d5:67:fe:ce:34:10:81:84:3c:1f:
         5a:d0:14:b5:8d:75:58:f8:a2:35:d1:82:59:1a:2e:e6:1a:d8:
         99:01:24:3e:ab:14:46:c5:29:39:9b:bf:95:49:49:6f:37:d6:
         23:1b:e5:a4:84:f2:d5:23:34:97:a3:e7:46:87:af:68:c5:64:
         89:86:7d:80:79:35:91:10:7a:66:f1:b4:c1:6a:68:3f:c0:34:
         c3:2e:ba:ce:cd:68:5b:a5:eb:b7:55:fd:8f:5e:c3:e4:71:41:
         72:ba:50:e5:87:57:3e:a4:73:6f:7b:2c:35:09:0a:86:cd:86:
         cf:78:7d:3e:55:0a:64:44:a5:d9:17:1a:ce:b9:d1:f7:91:1d:
         a9:13:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:32 2025 by rpki-client