Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.mft
File:                     31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.mft (raw, json)
Hash identifier:          KNiqsw2G+QX9/8EJ4gUlsLeG0SvvHlV73cVt0uVCDw0=
Subject key identifier:   87:71:5B:7B:DC:B6:C3:DD:25:ED:6C:4D:43:B7:83:E3:0A:E8:E3:B8
Authority key identifier: 31:AE:22:4B:E4:FE:C1:73:B6:B0:0C:CE:04:2A:25:BE:F7:7F:D4:4C
Certificate issuer:       /CN=31AE224BE4FEC173B6B00CCE042A25BEF77FD44C
Certificate serial:       118521A2CFBD1C6A80D6D0B3C6F1A7A58FAB716B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.mft
Manifest number:          05
Signing time:             Thu 28 Nov 2024 14:45:48 +0000
Manifest this update:     Thu 28 Nov 2024 14:40:48 +0000
Manifest next update:     Fri 29 Nov 2024 15:51:48 +0000
Files and hashes:         1: 3136342e3136332e33362e302f32322d3332203d3e20323634333937.roa (hash: GN81hsVlsB6eFUjRCodzRRi7+nNDk20g3Q8b6VeiV2E=)
                          2: 3137302e3233392e39362e302f32322d3332203d3e20323634333937.roa (hash: ix7sHMoId0ljGt1NM2dSkKu3IFLKD8K4TMU/4dLP5Ag=)
                          3: 31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.crl (hash: rbiDVRvAw+z1D3CbDxvyJof0UNt483d1w2LgHAdYIiE=)
                          4: 323830343a316464343a3a2f33322d313238203d3e20323634333937.roa (hash: TRCpLhTjw/Hq1l8P4LgZwbyLBLSumpM/5DoEF9ZoVB8=)
                          5: 3133312e3136312e39322e302f32322d3332203d3e20323634333937.roa (hash: 4uH6d2yX+3SReTmKB//oSJmOeZJl+QPReWZuKe+ALgw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:85:21:a2:cf:bd:1c:6a:80:d6:d0:b3:c6:f1:a7:a5:8f:ab:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AE224BE4FEC173B6B00CCE042A25BEF77FD44C
        Validity
            Not Before: Nov 28 14:40:48 2024 GMT
            Not After : Nov 29 15:51:48 2024 GMT
        Subject: CN=87715B7BDCB6C3DD25ED6C4D43B783E30AE8E3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:bf:12:d7:b1:3d:09:4d:f8:e8:62:69:fe:
                    f3:1b:cb:b5:6d:40:e7:4f:e8:ff:38:19:49:07:b0:
                    31:52:e4:6e:df:e0:1d:74:4c:4f:cc:1c:23:24:0a:
                    20:a8:c1:ae:02:db:00:4f:f2:1a:3d:8f:59:cd:72:
                    a3:77:2d:c4:53:d0:e7:7c:8d:8c:aa:8a:ff:5e:9a:
                    ba:ad:bf:9d:c2:95:b4:60:2f:60:62:0b:c6:82:58:
                    2c:38:7f:6b:83:fd:4d:e9:b2:a2:57:0e:a6:5d:8c:
                    57:9b:17:27:51:e5:c3:30:dc:e7:f3:d8:76:2e:b2:
                    76:e2:d5:fe:2e:cc:39:a8:63:a2:27:8c:e1:6f:65:
                    db:ff:85:4f:f2:45:37:3c:7f:74:ed:50:1e:ec:b8:
                    4f:d3:83:60:1f:86:d4:a3:6f:4c:94:2a:7b:03:bd:
                    36:40:63:d7:fc:f6:b8:4b:3b:23:62:2a:e8:5c:03:
                    7b:b5:c4:f7:75:66:50:03:ec:5c:c3:85:22:93:0c:
                    3f:79:e0:8a:92:25:62:f0:86:3d:9d:e1:ce:56:8d:
                    df:4e:83:f1:5d:46:90:4e:ef:c6:a2:3e:7c:7a:13:
                    0d:af:3f:c0:7c:95:82:b6:70:81:71:2a:24:4a:cf:
                    19:00:e6:b8:e6:b0:9e:1e:e3:a2:9c:66:72:6d:94:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:71:5B:7B:DC:B6:C3:DD:25:ED:6C:4D:43:B7:83:E3:0A:E8:E3:B8
            X509v3 Authority Key Identifier:
                keyid:31:AE:22:4B:E4:FE:C1:73:B6:B0:0C:CE:04:2A:25:BE:F7:7F:D4:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/31AE224BE4FEC173B6B00CCE042A25BEF77FD44C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:28:c4:1d:5a:ec:81:f4:2c:f9:9c:30:d1:73:6a:1c:f3:
         f4:f1:41:f0:5d:90:ef:a9:42:58:e4:33:b1:11:b5:89:6c:01:
         99:95:39:2b:a1:05:4d:ce:2f:42:4e:7a:9f:5f:aa:46:04:ba:
         52:db:e0:a5:1b:ea:21:16:e0:b5:b7:3e:46:57:8f:74:ea:87:
         67:3c:ff:75:f0:58:e9:63:15:d6:86:42:9e:59:be:05:e4:ca:
         9a:0f:5c:76:d8:0e:34:ea:57:8f:5f:38:ce:dc:76:5d:8c:df:
         b8:ca:6e:99:5f:ed:af:c4:0c:60:31:39:42:2f:7b:a8:28:41:
         80:d5:a3:80:11:ea:ae:40:92:1f:ec:5d:73:eb:e1:3d:6e:6e:
         ef:d8:f9:20:4e:ba:20:95:4c:74:88:5b:ff:95:6a:26:0f:43:
         9c:e4:d8:f6:0a:83:2a:57:46:c6:0e:da:bb:7c:21:41:52:86:
         99:67:39:89:7d:77:62:23:69:a3:ba:b4:60:e5:d0:01:a1:7c:
         fb:f2:4b:82:d9:9d:42:a4:2c:85:58:ac:b7:e2:12:e8:4e:f0:
         9f:1a:5b:7c:5f:8e:aa:fe:3a:01:75:12:04:b0:d6:ce:f3:16:
         5e:c7:7f:53:1f:22:4f:c3:cd:47:73:c4:49:b4:3f:1e:e7:f2:
         72:21:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:59:51 2025 by rpki-client