Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
File:                     D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft (raw, json)
Hash identifier:          m1xZK7wWxUvC3sHRnkJoXjhESz9ZSLgshGGG7fIJNgU=
Subject key identifier:   49:FF:92:7C:25:54:50:6D:44:D0:5D:D4:EA:91:3B:69:09:64:BC:AF
Authority key identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C
Certificate issuer:       /CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
Certificate serial:       7DAAA285D5E2A6EA460A94069F147A2B4D3F4E76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
Manifest number:          09
Signing time:             Mon 17 Feb 2025 04:08:04 +0000
Manifest this update:     Mon 17 Feb 2025 04:03:04 +0000
Manifest next update:     Tue 18 Feb 2025 06:29:04 +0000
Files and hashes:         1: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: b8STJpsLAVK+105/LwrPEU8i8O/LzpwBiUKVISQEfII=)
                          2: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: njp8sTJR1VMYOBf9BsAYhMAidvhlELiUvgy/Q/9XRog=)
                          3: D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl (hash: p6gMn375Pnq4BoUHXONN13MlyilXXC0nG878g2cEbmU=)
                          4: 34352e3138322e33322e302f32332d3233203d3e20323639323635.roa (hash: n86hgITupBHGxIN7N7c9CMiz6JlIIIiwvcQmW7FnkIQ=)
                          5: 34352e3138322e33342e302f32332d3233203d3e20323639323635.roa (hash: OpuO2VnO/YlWjK6Ny4U6ctD0aLA3t1BSzz6E/AqpO+I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:a2:85:d5:e2:a6:ea:46:0a:94:06:9f:14:7a:2b:4d:3f:4e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
        Validity
            Not Before: Feb 17 04:03:04 2025 GMT
            Not After : Feb 18 06:29:04 2025 GMT
        Subject: CN=49FF927C2554506D44D05DD4EA913B690964BCAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:15:20:46:e9:9c:c0:df:18:be:cd:ef:b1:
                    3c:76:71:33:56:78:94:7c:09:cb:9d:58:b4:92:0f:
                    30:0a:31:52:54:24:68:81:93:26:fc:34:4b:b3:bc:
                    4e:ea:5c:5f:95:95:42:1e:b0:d0:c5:a3:11:b3:99:
                    53:2f:9f:8e:52:e2:bc:a7:d2:d0:bb:50:41:84:83:
                    a8:dc:db:80:c0:8b:27:7f:e0:b8:a2:e2:86:fe:45:
                    72:dc:4c:bb:f6:af:b0:89:fd:f7:08:74:e3:7b:fa:
                    73:33:5d:28:c1:90:2c:cf:3e:93:0a:7c:f2:ab:58:
                    ec:c6:0c:6d:ed:25:00:9d:91:ce:e3:b9:b2:9b:9d:
                    bb:d4:37:5e:dd:ce:62:27:63:0c:cb:68:a8:e0:a8:
                    5e:71:e3:bc:e7:bf:ea:f0:69:9a:60:41:b6:9a:00:
                    ac:36:88:64:c9:6a:af:aa:80:0f:02:ab:16:d1:b6:
                    49:d0:6d:57:40:a3:14:1e:e6:be:82:db:21:3f:88:
                    c7:67:0f:c0:ae:d7:0f:1d:dd:d1:b8:c3:28:0a:c8:
                    68:2c:9a:63:5e:15:62:79:4b:d8:54:c9:5b:58:b5:
                    08:1e:09:d6:69:29:c6:f6:ec:4e:83:73:8c:c0:e6:
                    7b:af:aa:ac:7f:0c:42:f2:6a:e0:d5:2c:0a:8b:84:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FF:92:7C:25:54:50:6D:44:D0:5D:D4:EA:91:3B:69:09:64:BC:AF
            X509v3 Authority Key Identifier:
                keyid:D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:22:35:db:20:70:c9:08:23:40:ca:fb:da:b9:cc:f4:43:01:
         7c:67:99:49:b0:fe:0c:8d:33:d9:36:89:e3:69:3f:19:1c:a9:
         bb:ef:38:bb:c3:38:c4:d8:e9:a8:4d:a2:9e:2c:10:14:ef:b1:
         6b:3d:52:e6:d9:9f:c8:15:3e:06:7f:6f:0b:bf:ae:20:33:85:
         32:94:87:38:bf:68:90:5c:0f:3f:ca:33:b9:4c:eb:c6:25:f1:
         32:31:e6:b3:1e:ae:ea:a5:f5:1c:5b:44:6f:2c:35:9c:6d:86:
         16:ba:47:55:bb:93:67:13:64:64:4c:53:45:f2:4e:37:65:c3:
         07:c9:37:a1:0c:49:c8:07:97:61:5f:28:49:f3:56:c0:66:02:
         b7:6b:db:5b:ce:8a:bf:83:5d:ac:d3:13:62:7c:69:2c:0b:cc:
         67:25:13:b4:d6:54:31:b3:fe:bc:67:1c:65:c4:3c:89:b6:83:
         b5:09:0c:a9:cd:ac:54:b2:f1:6f:7c:79:9a:0e:ba:fe:c9:bf:
         52:fd:e2:20:1c:5f:ad:69:4b:c0:c2:d6:21:8c:8e:cb:04:ec:
         b5:9d:2f:46:84:5e:3a:0d:fd:cd:fe:83:3c:d9:b1:fc:b6:22:
         29:70:b9:1c:79:dd:38:2b:84:1f:89:f6:9b:35:b6:6c:7b:00:
         95:dc:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----