Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.mft
File:                     57D70E752697E99F4A1DD1DBCD525C92A57E6D29.mft (raw, json)
Hash identifier:          LT7GEfcCwiTKUlsHkGILNO6MSHfM1LhWCl2NEUCkzRk=
Subject key identifier:   B7:EE:2B:35:0C:CA:84:D9:C6:1B:EB:24:45:A4:AF:64:7A:E2:3D:51
Authority key identifier: 57:D7:0E:75:26:97:E9:9F:4A:1D:D1:DB:CD:52:5C:92:A5:7E:6D:29
Certificate issuer:       /CN=57D70E752697E99F4A1DD1DBCD525C92A57E6D29
Certificate serial:       12EE59E8D8A878CD086F370712F1AA5C9D8A2161
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.mft
Manifest number:          015D
Signing time:             Thu 19 Dec 2024 13:36:41 +0000
Manifest this update:     Thu 19 Dec 2024 13:31:41 +0000
Manifest next update:     Fri 20 Dec 2024 13:58:41 +0000
Files and hashes:         1: 3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (hash: k5BQba6TdIL1rkik3ajnFO6cRecWA26DG9rNIpU+y30=)
                          2: 57D70E752697E99F4A1DD1DBCD525C92A57E6D29.crl (hash: g7FdnDxQro3D6aTvbxbLRT3NHnlm24GMX+0AzBrS/9M=)
                          3: 323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (hash: 4QWY1aLvJu/ws0Bnig8vnO0ZgzcTXylARyQ9UmciUFE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ee:59:e8:d8:a8:78:cd:08:6f:37:07:12:f1:aa:5c:9d:8a:21:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D70E752697E99F4A1DD1DBCD525C92A57E6D29
        Validity
            Not Before: Dec 19 13:31:41 2024 GMT
            Not After : Dec 20 13:58:41 2024 GMT
        Subject: CN=B7EE2B350CCA84D9C61BEB2445A4AF647AE23D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:1d:75:9b:f4:60:fd:74:a0:cf:9a:b3:08:
                    70:67:2b:47:81:47:34:34:56:f6:b6:20:7c:cc:30:
                    ee:79:d7:a2:2e:46:82:20:c0:f5:71:cb:78:0e:d7:
                    ff:2b:20:74:a4:48:a9:e9:71:69:84:1e:cb:f5:92:
                    de:b8:5a:af:b1:00:c1:ba:5f:cd:e3:a7:bb:49:83:
                    04:06:6c:f4:44:4f:c8:8c:d0:68:38:b9:1f:7f:45:
                    f2:44:bf:3d:32:86:46:5b:9e:d4:02:67:bd:69:9c:
                    d9:d1:ae:0c:16:11:42:cf:1b:c2:4c:9b:45:a7:24:
                    f7:06:97:f0:b1:a8:aa:82:c7:e7:76:f2:5b:85:9d:
                    b0:42:ed:9e:8e:f3:64:99:5f:7f:a4:84:e8:23:37:
                    35:84:d6:47:da:68:26:f6:dc:26:42:0c:be:04:86:
                    3a:97:bb:6e:69:ad:54:a4:49:01:e0:ac:e5:45:07:
                    99:d7:02:90:44:e5:67:df:8d:e7:20:28:f5:3f:a3:
                    d3:3d:91:a9:45:94:b3:bf:ca:09:97:46:6a:1e:78:
                    06:88:66:89:e9:5f:e6:03:a4:00:0b:cc:49:bd:4f:
                    a9:9a:ba:58:73:ae:4c:85:b6:85:03:fc:77:48:a5:
                    ed:88:05:fd:11:81:0e:6f:58:a0:e3:82:f6:eb:48:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EE:2B:35:0C:CA:84:D9:C6:1B:EB:24:45:A4:AF:64:7A:E2:3D:51
            X509v3 Authority Key Identifier:
                keyid:57:D7:0E:75:26:97:E9:9F:4A:1D:D1:DB:CD:52:5C:92:A5:7E:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:b4:92:33:8c:b9:3e:d8:76:be:c1:9f:bf:7c:2a:7d:57:
         2b:ea:f3:8c:58:a4:96:e3:de:ee:7b:79:03:4a:eb:30:20:7a:
         5a:3a:4c:cc:c2:ea:b9:c6:62:10:6a:92:b8:b2:8d:b1:44:3d:
         19:e6:ef:de:be:c9:34:db:b8:48:fe:34:20:03:7d:c4:fe:fa:
         a8:22:64:15:90:98:6b:c7:e0:ec:62:0e:bc:76:e1:d9:9d:d8:
         68:6e:4a:d0:b3:ee:82:98:52:b1:dd:95:ce:4c:2f:1e:16:55:
         0b:cc:a5:87:ae:20:b0:ef:a8:4f:d6:cd:be:08:99:f1:bb:d4:
         2a:ab:10:af:fe:d9:66:2a:cb:59:74:76:fe:3d:f2:4e:1e:8e:
         38:65:70:9b:96:3f:8e:45:1c:59:ab:76:c1:03:7e:95:22:bb:
         cd:b6:75:88:ee:4d:0f:9a:bf:63:84:b6:74:c3:ba:c7:37:da:
         f1:61:6c:75:a6:f3:f2:c8:5e:80:8b:e1:2d:97:c1:07:1e:8f:
         ce:77:6f:58:da:55:94:5c:9b:ec:0b:74:42:bf:64:fc:04:79:
         38:07:39:a2:24:ef:00:fe:c8:8a:5f:27:d7:74:af:ea:d3:14:
         a6:f2:31:b8:2d:5c:c7:99:e8:79:d4:b3:c6:fd:8d:cf:c2:58:
         90:eb:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----