Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
File:                     5A2848029237EDE072BF0D27156F239E1FEBEF52.mft (raw, json)
Hash identifier:          O+g6GqffBB75uaSKxp4C8a9ni7ywYCo6agwYYqi/0HY=
Subject key identifier:   5D:FF:AA:B1:54:9C:84:27:2B:90:9F:3D:1C:FA:66:F6:E0:42:25:C7
Authority key identifier: 5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
Certificate issuer:       /CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
Certificate serial:       1EC26F63C131F72896E15DAA1C9D84445F2D68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
Manifest number:          74
Signing time:             Tue 11 Feb 2025 09:28:33 +0000
Manifest this update:     Tue 11 Feb 2025 09:23:33 +0000
Manifest next update:     Wed 12 Feb 2025 13:17:33 +0000
Files and hashes:         1: 5A2848029237EDE072BF0D27156F239E1FEBEF52.crl (hash: 9sw4k1jBM7TaEJtVjEu9jCnfmy7RPUSoWHQ93dd9ht8=)
                          2: 3230312e3134302e3235322e302f32322d3232203d3e203631363331.roa (hash: zD8g3wK9G/oAy/GjhCI5R5THBuHLH1Cs2of27RdzZ+s=)
                          3: 3230312e3134302e3235322e302f32322d3332203d3e203631383331.roa (hash: sCW/oZQ3AF72moVGFCpltL/gP5afzxfBSujsMF4Bfsg=)
                          4: 3230312e3134302e3235322e302f32342d3234203d3e203631363331.roa (hash: v9IU5C2/uvVkzTRfUUwa0lRWWyRUTww8bmVHFWqXf54=)
                          5: 323830343a316130303a3a2f33322d313238203d3e203631383331.roa (hash: fIZyV+iHbeK/HWyX5PX8cbd8b6G0xvala462bayfqH8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c2:6f:63:c1:31:f7:28:96:e1:5d:aa:1c:9d:84:44:5f:2d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
        Validity
            Not Before: Feb 11 09:23:33 2025 GMT
            Not After : Feb 12 13:17:33 2025 GMT
        Subject: CN=5DFFAAB1549C84272B909F3D1CFA66F6E04225C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:e5:bd:69:32:3c:61:1f:41:c3:aa:35:f6:
                    01:03:4c:87:06:8d:e8:b1:01:36:b6:b6:e8:1d:fd:
                    4a:3b:cd:9c:3e:3f:f5:50:78:96:a2:6f:ac:f3:ad:
                    43:7f:ea:38:fb:8e:ad:5c:16:a3:55:bd:d5:89:14:
                    a8:46:86:30:b4:24:ad:d8:ec:ba:c7:bc:ba:39:9b:
                    23:0d:38:70:9e:52:ae:5d:16:a5:22:5d:b1:7a:36:
                    25:1f:e5:1c:40:58:d5:27:bb:37:db:a3:23:f8:a1:
                    b1:a3:1f:7b:8d:d0:2d:8f:66:7a:71:8d:2f:04:4b:
                    4a:11:27:b4:90:ec:fe:c0:4f:e0:06:b4:b3:ac:23:
                    f4:13:a0:06:4a:55:1a:fa:89:81:af:c2:a7:31:a2:
                    05:ec:26:82:71:38:bc:89:38:19:ff:e2:d0:c7:37:
                    f7:f0:70:e2:84:ad:b9:ef:79:8a:20:63:32:c9:6c:
                    77:b6:3f:9b:74:53:bd:06:10:b4:91:63:e1:10:02:
                    c0:35:19:92:3f:da:41:03:41:a8:21:fc:93:4d:cf:
                    e5:1a:82:68:4d:bd:0c:7b:86:36:b6:d6:75:13:91:
                    c3:43:4a:bc:b3:c5:00:9b:12:b0:f4:0a:6f:4a:2d:
                    d6:e2:61:c8:f6:f0:f2:15:41:c4:e0:d0:5c:0e:cd:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FF:AA:B1:54:9C:84:27:2B:90:9F:3D:1C:FA:66:F6:E0:42:25:C7
            X509v3 Authority Key Identifier:
                keyid:5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b7:26:2f:14:bb:8f:53:e4:b9:f2:46:2b:57:36:6e:88:a3:
         84:71:03:46:74:8f:8e:c7:ca:5c:c6:df:8a:93:33:fe:60:88:
         73:93:ae:79:55:b5:93:8a:89:8d:b8:a0:1b:e1:60:87:04:83:
         2b:60:5d:75:40:5e:12:28:15:74:53:2a:e8:b5:4a:9a:1d:31:
         59:3c:35:3c:c3:b8:62:c0:26:de:b9:70:e9:79:e7:aa:38:9f:
         90:59:a2:b3:ac:9a:05:aa:4b:5f:c6:37:71:75:f6:80:94:7c:
         5a:4e:ed:d7:7c:6b:dc:87:82:9d:45:d8:60:27:e8:31:80:ab:
         ae:a7:30:7c:fb:de:0f:10:88:8d:43:e4:22:3a:27:8c:bc:5e:
         7f:cb:b8:f4:ea:56:26:61:ab:ef:70:44:8d:89:df:a0:63:e2:
         49:37:37:dd:99:4a:d7:d9:dd:fb:5a:e6:d0:bc:18:08:25:c7:
         2d:67:80:63:9f:94:00:6d:78:1e:ad:9b:91:07:c0:c8:5f:4b:
         96:6b:7c:a7:e0:47:97:19:24:b9:98:6e:ae:66:be:18:4a:3a:
         6f:bb:70:d9:78:90:fc:77:42:07:41:2a:83:73:d9:e3:9b:98:
         40:51:5d:38:4f:09:9e:ed:ef:90:63:57:53:e9:bc:9a:d8:9c:
         ee:19:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----