Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/DF20AE706DD1469AE20D51958584C9CBB11476C4.mft
File:                     DF20AE706DD1469AE20D51958584C9CBB11476C4.mft (raw, json)
Hash identifier:          xhxzj2MNSzba4Ns3Itw6kMqRzMAd6FkRAP54PdGJing=
Subject key identifier:   02:D8:DB:E0:B9:48:FD:BF:0C:D4:0C:78:4C:4A:51:00:44:E1:9F:01
Authority key identifier: DF:20:AE:70:6D:D1:46:9A:E2:0D:51:95:85:84:C9:CB:B1:14:76:C4
Certificate issuer:       /CN=DF20AE706DD1469AE20D51958584C9CBB11476C4
Certificate serial:       3721A02223144592C6E432635F4C346E726DB974
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF20AE706DD1469AE20D51958584C9CBB11476C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/DF20AE706DD1469AE20D51958584C9CBB11476C4.mft
Manifest number:          0131
Signing time:             Mon 09 Dec 2024 14:51:56 +0000
Manifest this update:     Mon 09 Dec 2024 14:46:56 +0000
Manifest next update:     Tue 10 Dec 2024 15:50:56 +0000
Files and hashes:         1: 3137372e36362e38302e302f32312d3332203d3e20323632343930.roa (hash: /jEq1QAmMdYHWl3bEo7jla8quEGobNq6HajWvNIaWf4=)
                          2: DF20AE706DD1469AE20D51958584C9CBB11476C4.crl (hash: 4Qntns4g+9Wv8FXdSBiiJpBWWlj9CkpXeEMzF+CNexM=)
                          3: 323830343a3531343a3a2f33322d3438203d3e20323632343930.roa (hash: JOZ9pjYARBRWpxTFwy2BkaRzm8LaNNIrW4vA1LTTbx4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:21:a0:22:23:14:45:92:c6:e4:32:63:5f:4c:34:6e:72:6d:b9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF20AE706DD1469AE20D51958584C9CBB11476C4
        Validity
            Not Before: Dec  9 14:46:56 2024 GMT
            Not After : Dec 10 15:50:56 2024 GMT
        Subject: CN=02D8DBE0B948FDBF0CD40C784C4A510044E19F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:8d:61:99:0b:4a:c8:6b:bb:73:30:4c:9f:
                    b7:e8:82:be:a8:b5:87:87:ba:01:15:b2:31:39:34:
                    0c:9e:bb:92:16:6f:29:86:fd:30:6d:b8:29:30:5e:
                    db:ab:42:33:06:e5:7c:ac:32:7e:97:9e:da:6c:12:
                    12:f4:28:97:76:3b:5e:69:86:dc:db:3f:4b:96:18:
                    4a:b0:9e:0d:50:ba:25:81:c9:2a:10:6e:76:6e:39:
                    b5:84:4e:a6:fb:16:7e:e7:53:67:92:62:ca:d9:6c:
                    8b:85:7f:2e:9f:ef:81:65:b5:78:e9:9f:06:3f:df:
                    2d:26:12:5d:de:3b:c0:d3:10:f1:7b:74:bf:19:0c:
                    e9:77:b7:d1:dd:4f:cf:c3:34:ed:62:0b:11:6c:96:
                    dd:27:8f:60:25:c7:bf:86:3a:27:38:41:18:cb:b3:
                    2b:ce:2c:90:ae:b2:09:eb:00:12:a3:b3:30:76:aa:
                    29:26:e7:07:ba:ce:4a:21:a0:2d:e7:33:87:b5:38:
                    10:2d:57:c3:a4:bc:ae:a9:eb:7c:6a:88:0c:50:d8:
                    1a:ec:cd:a9:22:43:47:e0:8b:51:a6:d1:4d:00:fa:
                    67:f3:7f:db:9f:57:e0:9e:15:64:16:6d:40:3b:c7:
                    3a:3e:19:92:00:bc:e6:c0:b7:ad:61:a3:ec:b8:3c:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:DB:E0:B9:48:FD:BF:0C:D4:0C:78:4C:4A:51:00:44:E1:9F:01
            X509v3 Authority Key Identifier:
                keyid:DF:20:AE:70:6D:D1:46:9A:E2:0D:51:95:85:84:C9:CB:B1:14:76:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/DF20AE706DD1469AE20D51958584C9CBB11476C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF20AE706DD1469AE20D51958584C9CBB11476C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/DF20AE706DD1469AE20D51958584C9CBB11476C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:96:78:5a:c1:32:ce:d7:09:47:08:a6:72:9f:4a:3e:52:a1:
         65:2d:d3:34:18:34:2a:67:4a:f4:5e:24:ad:eb:40:06:c0:11:
         e5:8e:2c:16:2e:d4:5c:7c:34:f3:25:a8:e3:9b:b8:4a:67:4e:
         96:d9:4b:f5:30:6f:32:77:2a:89:90:af:a6:60:62:12:e5:3a:
         f1:5a:10:05:8b:33:e9:d5:e3:6e:55:6a:0d:7c:87:4b:58:04:
         03:8e:a2:0d:7e:75:fa:7c:b8:88:56:54:13:01:03:f3:50:26:
         4a:19:34:8c:1c:f2:91:67:eb:34:0a:46:4d:44:b2:48:6f:dc:
         6a:d0:b6:aa:27:b0:ae:fa:52:84:af:58:f6:3a:4b:0c:0b:78:
         97:6c:7c:1f:c5:bf:5f:a0:74:a9:a1:b5:ff:b8:e6:7d:8d:3d:
         9b:dc:86:e5:11:aa:e8:1c:68:b0:4d:fb:65:f6:46:2d:c6:45:
         aa:dd:d8:d4:df:86:5a:79:65:4a:b5:fe:26:85:86:02:be:09:
         ae:a9:2f:ec:40:9f:15:32:f0:08:9d:ad:cf:36:a0:a9:3a:6e:
         54:cc:94:7d:d7:c7:da:07:cc:e8:5e:d1:29:92:70:a8:79:ca:
         07:8a:84:fa:c9:33:f0:72:3e:7f:03:91:90:19:00:92:82:0e:
         43:7e:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:20:39 2025 by rpki-client