Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.mft
File:                     11EA743ABF823F6CB73971D59B2C266295C87C6B.mft (raw, json)
Hash identifier:          1W4mOBBOSZbE67JFcz+iIHj6eAOY4sueToIkS6oTWC8=
Subject key identifier:   8D:10:01:CB:CF:86:82:3F:98:31:91:5B:7E:4E:CF:17:3B:77:66:13
Authority key identifier: 11:EA:74:3A:BF:82:3F:6C:B7:39:71:D5:9B:2C:26:62:95:C8:7C:6B
Certificate issuer:       /CN=11EA743ABF823F6CB73971D59B2C266295C87C6B
Certificate serial:       66DD1BE67319BB6BAE188B3EA4F691C9E5835BB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.mft
Manifest number:          0192
Signing time:             Thu 30 Jan 2025 06:52:42 +0000
Manifest this update:     Thu 30 Jan 2025 06:47:42 +0000
Manifest next update:     Fri 31 Jan 2025 08:00:42 +0000
Files and hashes:         1: 34352e3136342e3133322e302f32322d3234203d3e20323638363137.roa (hash: dnZF10WMcAamikt8KNcpns6KHT33YQ75S/YVbTtIlYQ=)
                          2: 11EA743ABF823F6CB73971D59B2C266295C87C6B.crl (hash: /8sLNxahM8N68z9+/B6w8ck2nuRmndf0kabrwl+kTzA=)
                          3: 323830343a353366303a3a2f33322d3438203d3e20323638363137.roa (hash: qgqXU+lAuHZVWROKe35FpwJ1n/7vFykKh+cktn10Hec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:dd:1b:e6:73:19:bb:6b:ae:18:8b:3e:a4:f6:91:c9:e5:83:5b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EA743ABF823F6CB73971D59B2C266295C87C6B
        Validity
            Not Before: Jan 30 06:47:42 2025 GMT
            Not After : Jan 31 08:00:42 2025 GMT
        Subject: CN=8D1001CBCF86823F9831915B7E4ECF173B776613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:41:a0:77:bb:4b:d0:10:2d:a9:57:2c:2b:
                    f7:e9:5a:70:7b:0c:cf:f9:e7:6f:c1:cc:8f:20:0a:
                    0d:b4:7d:51:2d:12:14:8d:48:92:eb:a0:03:bc:7d:
                    da:23:07:f1:92:b2:f7:df:f1:25:c3:99:8f:36:86:
                    be:0c:9e:2b:c3:59:83:22:79:8b:fd:26:76:18:40:
                    6d:be:12:bc:2d:84:1c:9e:fa:ce:40:81:87:71:b4:
                    75:c8:aa:c2:31:83:cc:bb:c6:86:cf:83:54:31:5d:
                    8e:a5:c3:af:80:aa:dd:0e:59:67:6c:82:91:c4:6b:
                    bb:cd:1f:c2:6f:27:9a:cc:fe:5f:b1:84:23:8d:dd:
                    ad:2f:fb:40:f2:39:e7:51:96:d2:e7:ca:8a:37:74:
                    be:99:0e:7c:95:44:e7:9e:af:1d:64:62:6e:b0:a4:
                    c7:5f:22:5b:2d:dc:2e:c2:86:b2:e9:d5:0a:9e:2e:
                    09:f5:6c:e5:4e:27:25:2e:95:83:cf:5f:4f:83:69:
                    58:89:3f:6d:41:63:c2:cc:77:a5:bc:91:63:a5:1d:
                    49:9f:ca:25:7a:49:be:0f:9f:64:af:f6:42:ff:7e:
                    b1:08:cf:3a:3e:fa:c7:9b:08:de:d6:b8:59:08:b1:
                    89:44:99:f4:8c:e0:63:d3:e6:b2:77:98:d3:c2:42:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:10:01:CB:CF:86:82:3F:98:31:91:5B:7E:4E:CF:17:3B:77:66:13
            X509v3 Authority Key Identifier:
                keyid:11:EA:74:3A:BF:82:3F:6C:B7:39:71:D5:9B:2C:26:62:95:C8:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/1/11EA743ABF823F6CB73971D59B2C266295C87C6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d0:7c:7c:25:22:18:d7:c7:dc:38:3f:44:4f:6d:b3:0c:63:
         90:b4:1f:60:e1:d3:dc:21:f9:eb:29:96:91:a9:03:11:fd:0c:
         65:61:d7:ea:b6:27:6f:cf:37:83:ad:aa:d7:5e:26:43:8b:94:
         e6:90:8c:2b:fe:c5:a7:f8:07:49:80:d0:82:a4:28:ad:7c:87:
         64:89:f8:4b:de:12:49:06:81:93:bd:fe:32:8a:c6:ae:ee:f7:
         8c:56:f1:c3:f8:22:79:7a:4a:b6:63:f0:05:c8:2e:3e:81:2e:
         93:9a:59:89:48:2c:6d:56:d5:a6:68:fc:96:57:ff:ed:11:05:
         2a:51:16:40:10:d7:76:4f:6b:9d:d8:ef:f8:a2:6c:1e:d1:8a:
         c1:14:71:9f:71:0e:53:48:88:80:d2:ce:81:6b:0b:6e:f0:2e:
         5d:38:6c:fd:81:53:0d:4a:90:8c:37:a4:b8:de:ff:24:50:ee:
         2b:9a:b6:92:42:ca:da:dc:76:4e:12:5a:10:dc:b9:8f:88:ae:
         d5:90:05:c6:a1:17:95:fb:38:fe:f4:3c:d5:d5:b2:24:48:e0:
         c4:67:20:e5:8a:18:bf:20:b8:c5:de:03:19:c9:f1:6e:fa:ff:
         8f:6b:94:af:be:b1:bb:d7:05:54:7d:b1:57:16:2d:d3:ea:25:
         49:cd:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:46:51 2025 by rpki-client