Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.mft
File:                     F62F4F249754DDD7706E8918C1AF5039A9405FB7.mft (raw, json)
Hash identifier:          KG4x++m7CKLvfauLEBCJLZE/HR+IRmDbrhwAnOC37fQ=
Subject key identifier:   37:84:8D:57:B7:70:6E:64:15:4B:D7:48:CE:34:59:59:5B:DB:2A:BE
Authority key identifier: F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7
Certificate issuer:       /CN=F62F4F249754DDD7706E8918C1AF5039A9405FB7
Certificate serial:       17AC6BC4EAA696A9F3CC91D1CC7DC688C5BBF906
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.mft
Manifest number:          1F
Signing time:             Fri 17 Jan 2025 23:44:39 +0000
Manifest this update:     Fri 17 Jan 2025 23:39:39 +0000
Manifest next update:     Sun 19 Jan 2025 01:20:39 +0000
Files and hashes:         1: 323830343a363839343a3a2f33322d3332203d3e20323639373032.roa (hash: qi6evgnpbtghT8+h9USeklibp9TvxQ/z0xfvHNmrdeY=)
                          2: 34352e3139302e37322e302f32322d3234203d3e20323639373032.roa (hash: kSEliUHkTwyzOlM/eEOC7drfeCuSMzdW8pPiZ1wVE+0=)
                          3: F62F4F249754DDD7706E8918C1AF5039A9405FB7.crl (hash: ey8AGN8subb13AAncHcdmnv0s8aXzFP78DyoLXDm+ds=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ac:6b:c4:ea:a6:96:a9:f3:cc:91:d1:cc:7d:c6:88:c5:bb:f9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62F4F249754DDD7706E8918C1AF5039A9405FB7
        Validity
            Not Before: Jan 17 23:39:39 2025 GMT
            Not After : Jan 19 01:20:39 2025 GMT
        Subject: CN=37848D57B7706E64154BD748CE3459595BDB2ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:fb:c8:42:24:46:24:e4:67:ce:d2:ee:96:
                    2e:49:e9:fc:b2:c7:4b:26:93:06:ae:02:72:5e:2b:
                    48:f8:b4:02:31:90:a8:09:50:af:fe:b8:71:82:b8:
                    9b:7e:81:7a:bb:9b:3f:13:26:35:a1:57:4d:e1:fc:
                    05:94:2c:46:53:0b:70:ec:9a:0f:5e:45:9e:c1:06:
                    c0:6a:e5:1e:43:12:3a:ab:cd:a3:1b:91:a9:c0:e8:
                    56:da:7e:4d:58:d8:db:ae:4e:62:29:5e:bb:b9:99:
                    cb:29:df:75:9f:b1:fd:e6:02:6b:70:de:07:97:77:
                    15:83:1a:0c:32:b7:52:42:fe:58:8d:70:33:7b:32:
                    38:36:4b:59:0d:07:ee:d0:2c:91:40:f2:c2:19:5b:
                    61:d1:e1:40:31:15:fb:44:3e:b4:5f:f6:79:46:fa:
                    e9:c6:62:22:61:0d:86:c6:38:51:26:f7:0d:31:7c:
                    ec:6b:0d:3b:d8:26:e6:e5:2a:48:12:27:b7:a1:8e:
                    c7:5c:19:98:98:e4:53:81:ca:73:6b:11:92:60:7f:
                    48:78:10:e8:5d:86:60:c8:68:02:41:41:d3:e5:b8:
                    40:7e:e2:c2:50:b3:0d:f8:91:1a:d0:e7:7a:ea:7d:
                    30:8b:d8:b2:b3:dc:66:aa:ff:2b:3e:b6:d0:0b:b4:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:84:8D:57:B7:70:6E:64:15:4B:D7:48:CE:34:59:59:5B:DB:2A:BE
            X509v3 Authority Key Identifier:
                keyid:F6:2F:4F:24:97:54:DD:D7:70:6E:89:18:C1:AF:50:39:A9:40:5F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62F4F249754DDD7706E8918C1AF5039A9405FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkUJzL2AETagZkNFsea3xVFvHNEnWbhxjF9LGtDncWxC/0/F62F4F249754DDD7706E8918C1AF5039A9405FB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:97:55:ba:b4:00:c3:5c:0a:79:af:a6:2f:ea:39:97:2e:12:
         ee:1b:0a:b7:c8:19:1d:e9:d2:73:19:cf:8e:d7:51:02:64:01:
         75:d5:c2:a3:d4:e5:a8:fb:25:a7:60:71:c2:b7:f8:ee:35:70:
         d2:a1:b3:86:5d:0a:cf:f4:fb:36:56:3d:01:fa:6a:05:13:a5:
         a9:c1:10:79:21:7f:fb:e0:c8:a0:53:d3:7d:bc:86:ae:b1:99:
         b9:34:96:45:b0:2a:9e:7a:ae:06:21:df:04:84:75:a2:f5:5c:
         5b:21:22:6b:b2:b0:9b:b0:b8:66:bd:3f:9b:5d:a9:2b:2e:e3:
         35:d5:db:17:a4:13:8b:3d:e6:22:8b:af:59:e9:92:fd:28:e5:
         8f:ae:38:8f:71:bc:66:36:22:7d:81:4e:96:16:5e:35:81:b4:
         e7:71:2d:49:0a:09:64:77:fe:3b:91:a0:95:78:61:13:e8:8c:
         58:af:69:76:e0:f2:61:9e:c1:eb:78:7f:ae:a0:fe:6e:41:6e:
         2f:33:b6:ba:8e:ba:2a:64:94:5d:a0:4b:08:96:25:ca:a6:44:
         9c:75:14:72:af:f2:38:9f:d3:96:fd:62:c7:75:c9:7a:4a:75:
         ab:f4:11:42:ce:83:f9:1f:0b:a3:6d:34:7f:85:0f:d1:6b:86:
         5f:e7:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:18:58 2025 by rpki-client