Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.mft
File:                     CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.mft (raw, json)
Hash identifier:          HRRR4V3NR4se0w5nC8kgCKmMa/6+g4hcbJggVMJ6fU4=
Subject key identifier:   F3:D7:F6:53:A1:01:16:26:EF:06:2E:C6:00:68:28:7A:B2:F0:D4:24
Authority key identifier: CA:57:0E:4B:B6:EB:F4:DF:86:11:C2:B0:3E:92:48:2A:91:52:FA:4B
Certificate issuer:       /CN=CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B
Certificate serial:       4EC20632DCFCC5FFB3E1BAE38B8F882660CF521B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.mft
Manifest number:          25
Signing time:             Wed 22 Jan 2025 11:55:51 +0000
Manifest this update:     Wed 22 Jan 2025 11:50:51 +0000
Manifest next update:     Thu 23 Jan 2025 15:15:51 +0000
Files and hashes:         1: 3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa (hash: 6Jyl4ynADhw7jfZyAhysofqE8ALMldiDgU2EDRjzzqY=)
                          2: CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.crl (hash: DnBqesJkPTr+loQLpc5w7oYhuOqCfJl9hj5BjZTyTFE=)
                          3: 3138372e312e3131322e302f32302d3234203d3e203533313633.roa (hash: ohO5FRkY5fx8E8k/eKLrjKrUir8n/tZPZPQoGTz7Ubg=)
                          4: 323830343a313033303a3a2f33322d3332203d3e203533313633.roa (hash: dxRnKOpKWS3iEjhAqGuONB9GqE7jGC0Jrz5zJciS9BY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c2:06:32:dc:fc:c5:ff:b3:e1:ba:e3:8b:8f:88:26:60:cf:52:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B
        Validity
            Not Before: Jan 22 11:50:51 2025 GMT
            Not After : Jan 23 15:15:51 2025 GMT
        Subject: CN=F3D7F653A1011626EF062EC60068287AB2F0D424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:19:fc:ec:a8:ed:69:6f:0d:5f:f3:7d:a9:86:
                    5e:58:56:78:8f:94:0a:01:3a:4d:d7:d8:0b:62:2e:
                    bf:7b:45:56:85:08:65:ff:a1:7d:2d:28:b6:1e:7a:
                    b4:2d:58:5c:c9:a3:9b:f3:ff:d6:9c:73:d9:a4:bb:
                    dc:50:39:81:36:e7:8f:c1:b2:c3:6f:a4:82:aa:b2:
                    6d:9b:c8:a2:23:fc:3c:a7:22:7f:e3:48:8c:0a:1f:
                    59:25:1b:1d:ce:5d:3c:8b:7b:fd:04:87:8f:69:6a:
                    48:df:c2:e2:1b:01:8d:72:38:3f:35:09:16:3a:ea:
                    f5:dc:99:25:20:af:ee:ff:8a:e9:1f:9f:58:16:91:
                    78:8d:15:13:04:da:61:16:57:90:93:9e:a5:28:55:
                    1e:f6:ab:12:2c:ff:06:09:dc:69:0d:25:96:80:14:
                    d7:5a:83:0a:fb:30:f7:78:03:a0:9a:e1:1a:75:1d:
                    fb:38:1b:41:6c:e7:e1:e4:29:42:e2:19:48:76:50:
                    1a:a4:f3:9f:14:01:97:57:32:ba:aa:28:70:3a:d0:
                    cb:11:7d:2b:41:0e:c7:3b:41:6a:4d:a8:35:bf:5a:
                    46:3f:bb:55:ec:68:56:be:dd:bd:46:d4:26:57:6e:
                    6b:ce:32:8f:c4:9f:b5:d5:2c:b6:3a:e5:33:4a:d8:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:F6:53:A1:01:16:26:EF:06:2E:C6:00:68:28:7A:B2:F0:D4:24
            X509v3 Authority Key Identifier:
                keyid:CA:57:0E:4B:B6:EB:F4:DF:86:11:C2:B0:3E:92:48:2A:91:52:FA:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/CA570E4BB6EBF4DF8611C2B03E92482A9152FA4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:79:b0:b2:70:6c:82:b7:5d:66:61:1f:be:22:80:5f:a0:
         ef:e7:66:fc:63:3b:9f:3e:79:52:fc:c3:33:34:5e:a7:3b:5a:
         da:d6:6f:9f:c0:3d:34:47:07:ff:ec:9f:48:b5:ea:3b:a6:3f:
         bf:62:8d:61:0a:9f:85:7a:76:3d:4e:dd:22:ed:55:88:07:90:
         43:23:1d:6a:31:cc:bd:3e:65:0b:3d:bd:9f:10:8c:5c:25:49:
         e7:51:04:84:a5:d0:25:fd:11:ad:ce:8f:2a:19:fc:70:16:a3:
         ca:a4:12:e6:59:88:bb:98:78:12:8c:17:95:91:7a:61:42:7c:
         79:13:61:52:78:9b:73:54:b9:62:eb:1c:d3:fb:e6:91:71:9c:
         d4:57:71:94:05:a6:4c:8f:7f:67:be:89:79:dd:69:3f:06:9a:
         1e:85:1a:24:64:92:4e:42:02:5f:9d:d4:99:26:42:63:8e:99:
         73:3f:0b:9a:dc:84:ee:a2:04:62:fe:89:0c:9d:1b:b9:19:f4:
         4c:cc:e4:95:a2:5c:ac:c9:1c:7d:09:c4:db:5a:27:3e:9d:7b:
         ec:76:0a:68:07:52:f9:7f:c8:47:0f:d5:66:7a:75:0e:b4:2e:
         42:c7:e8:00:ce:8a:40:f8:eb:05:37:c9:54:9a:41:0f:84:52:
         a8:c1:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----