Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
File:                     558D17416B73E6E20D5942E510F11254EB2056A1.mft (raw, json)
Hash identifier:          38D9y0hD+wbLo3zbaq2rhG2DAfzpD5Bhgpg2MIZLKnY=
Subject key identifier:   7E:50:12:DA:CD:3A:2C:D8:6A:9C:DD:D7:3C:E1:7C:51:96:E1:AB:0A
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       6AB6D1CCDFE1219AC33BB9CC70C901B96D29F18A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
Manifest number:          01E3
Signing time:             Sat 29 Mar 2025 02:10:00 +0000
Manifest this update:     Sat 29 Mar 2025 02:05:00 +0000
Manifest next update:     Sun 30 Mar 2025 02:45:00 +0000
Files and hashes:         1: 3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa (hash: p6ov0m7OpkWop07qezRslpLZ/WaoJRMTyv8pJ/DORis=)
                          2: 558D17416B73E6E20D5942E510F11254EB2056A1.crl (hash: vSNRbJ+QffJZwJDO1I9rCDvWhtVFmdJ5wO7bwv9mzh4=)
                          3: 3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa (hash: ATN2Jk3t48Vn1pcN2Jf4cy11sesg/AkkrBgiaauS9dU=)
                          4: 323830343a376262303a3a2f33322d3332203d3e20323731343438.roa (hash: nAs7qjTtsCsdg40lzNWqMhQLh0amGkIXXqUh0Hb4bbo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b6:d1:cc:df:e1:21:9a:c3:3b:b9:cc:70:c9:01:b9:6d:29:f1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Mar 29 02:05:00 2025 GMT
            Not After : Mar 30 02:45:00 2025 GMT
        Subject: CN=7E5012DACD3A2CD86A9CDDD73CE17C5196E1AB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:f1:19:65:4a:0e:fc:ab:5b:6c:17:82:d8:
                    0d:ee:70:b7:95:b6:ae:fe:d3:87:78:90:f1:e7:3d:
                    a4:43:b1:96:98:ce:fe:62:61:26:85:bc:5c:bf:ad:
                    48:df:11:51:e2:6d:88:0f:5c:e7:b9:d7:35:69:63:
                    02:45:d2:68:22:b8:fc:62:f6:4e:ca:8b:35:85:66:
                    7c:3b:3c:99:3e:12:a6:ba:2d:6e:b7:8b:d5:79:02:
                    39:80:db:ec:f1:dc:26:66:aa:6c:f9:2a:f8:2c:74:
                    04:81:55:33:b6:8a:9e:94:fc:12:fb:8c:b4:b8:a4:
                    b7:2d:97:9d:cc:15:b3:07:f8:0e:b8:cb:60:25:f2:
                    30:9b:ce:af:27:6f:31:85:29:d4:4f:4e:8a:b0:df:
                    6c:a7:41:5f:0c:77:e3:20:08:a6:22:41:74:46:5c:
                    fe:b2:fa:a7:3b:ca:d1:bc:83:91:44:7a:b0:be:4a:
                    39:92:e5:74:f8:f2:e5:fe:6f:a5:42:63:0d:48:15:
                    02:cc:66:c1:7a:0b:ad:6f:a6:b0:40:ee:43:ab:e6:
                    95:1c:72:05:26:46:02:69:63:9a:d1:be:53:71:19:
                    83:49:9e:97:15:8e:c4:3f:c1:b9:f4:76:77:04:ce:
                    d4:1a:e1:cd:be:03:9e:c8:46:4a:3a:7c:f4:ae:94:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:12:DA:CD:3A:2C:D8:6A:9C:DD:D7:3C:E1:7C:51:96:E1:AB:0A
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c7:40:4a:1b:75:31:ba:d6:64:de:d8:5e:b6:6f:a4:f4:9e:
         cb:eb:80:1c:34:84:f7:1d:cd:cc:27:20:c5:6d:a2:5e:ee:b5:
         c9:77:02:1d:de:1b:be:17:57:a2:7f:17:6b:59:64:5e:11:f4:
         2f:c1:a5:5b:b1:95:e8:8e:01:a1:41:96:df:8a:06:67:29:ec:
         16:ff:f7:39:e5:c6:36:fc:9d:36:31:cf:33:fa:81:b8:7a:0e:
         c6:44:d3:54:6b:26:c5:46:e5:3b:2c:ab:48:cd:63:a4:05:94:
         d0:01:df:80:8d:57:5c:55:e2:a7:02:ab:58:88:68:33:17:75:
         51:43:b8:bb:79:06:b7:1e:a3:1a:4e:eb:60:32:df:3f:c5:d0:
         d3:e3:2d:3a:96:85:92:75:4d:cd:59:74:40:19:45:05:30:49:
         cc:5a:00:24:b8:7b:6f:86:7a:6c:e1:f4:8d:60:b2:a9:34:3b:
         ed:f3:bc:85:38:19:94:9b:4f:cf:a9:85:51:dd:20:cb:3e:e1:
         87:0b:5e:16:18:77:6d:b9:81:a1:25:f2:42:79:4a:a4:ac:b4:
         39:79:dc:ec:12:9e:bd:52:60:e6:76:80:1e:2e:dd:08:5f:97:
         93:c6:0f:31:f2:7c:5b:e8:87:12:db:4f:c7:dc:01:2e:b1:ca:
         f7:63:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----