Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.mft
File:                     407FE8F64D6C43891C2392984607FD3486512D91.mft (raw, json)
Hash identifier:          eFYe8Ljg82rwDUeSdotpgJms8FdFoB+FfWRGCIXZAwE=
Subject key identifier:   FF:4D:C7:CC:55:A2:6C:E7:52:68:B3:37:1E:20:67:01:68:0B:73:D8
Authority key identifier: 40:7F:E8:F6:4D:6C:43:89:1C:23:92:98:46:07:FD:34:86:51:2D:91
Certificate issuer:       /CN=407FE8F64D6C43891C2392984607FD3486512D91
Certificate serial:       18A5D483320797BD2D18CB88731F88FFA5D1C525
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/407FE8F64D6C43891C2392984607FD3486512D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.mft
Manifest number:          67
Signing time:             Mon 28 Apr 2025 21:28:52 +0000
Manifest this update:     Mon 28 Apr 2025 21:23:52 +0000
Manifest next update:     Tue 29 Apr 2025 21:33:52 +0000
Files and hashes:         1: 323830343a363663633a3a2f33322d3438203d3e20323639353833.roa (hash: hCk2mW7x8M8XOpYPPvJccBruAtwJmVklEmJbPXpmEUQ=)
                          2: 407FE8F64D6C43891C2392984607FD3486512D91.crl (hash: NnppEI52hI8F1+nqy7gWMvAJxCqAhAFg1By7kQUG4Ic=)
                          3: 34352e3138392e3132342e302f32322d3234203d3e20323639353833.roa (hash: sftakH9ZnsIVRPsWYUWf8BOQG10fuqn/HObsx88HgmM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a5:d4:83:32:07:97:bd:2d:18:cb:88:73:1f:88:ff:a5:d1:c5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407FE8F64D6C43891C2392984607FD3486512D91
        Validity
            Not Before: Apr 28 21:23:52 2025 GMT
            Not After : Apr 29 21:33:52 2025 GMT
        Subject: CN=FF4DC7CC55A26CE75268B3371E206701680B73D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:46:f1:4f:59:55:bf:bf:4a:1c:59:f3:b1:
                    ec:4c:41:38:8e:2e:ef:e3:36:ff:54:2e:9a:ac:5e:
                    ff:d8:ff:13:34:b3:e3:59:b8:c2:8f:bd:84:2d:92:
                    46:6f:e3:b3:6d:f5:33:dd:08:5f:81:57:53:60:53:
                    f2:46:e0:3d:e8:a6:8a:d3:16:51:c1:1a:7e:40:aa:
                    99:82:41:3d:bb:47:71:bf:e9:69:3a:1c:1a:b5:05:
                    c2:b4:aa:3d:c8:ac:50:ae:0a:e0:6a:d3:b1:d2:cb:
                    5f:8f:a3:d2:d8:dd:8c:c4:62:e2:e1:8b:81:52:cf:
                    d2:a8:c8:64:1b:d6:34:82:b4:e0:8b:2c:c9:73:09:
                    6b:c7:db:0e:20:68:e5:da:0f:41:cc:59:68:15:95:
                    28:12:03:47:a9:91:61:84:c1:d4:66:42:d1:7e:8a:
                    4d:90:5c:6d:f9:01:57:c1:6a:11:3d:8f:1e:c0:7b:
                    2f:d4:30:ec:46:79:7f:60:96:96:57:29:d0:80:a5:
                    d9:e5:59:ff:8f:b7:ed:e1:77:78:47:0e:9e:62:6b:
                    48:3c:87:e3:92:14:c2:5f:ee:fd:60:d5:4e:47:49:
                    00:99:ae:43:6b:70:bb:15:30:b1:56:3d:12:f7:bf:
                    64:23:79:74:ae:35:d1:f8:cc:5d:db:0e:a6:e2:53:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4D:C7:CC:55:A2:6C:E7:52:68:B3:37:1E:20:67:01:68:0B:73:D8
            X509v3 Authority Key Identifier:
                keyid:40:7F:E8:F6:4D:6C:43:89:1C:23:92:98:46:07:FD:34:86:51:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/407FE8F64D6C43891C2392984607FD3486512D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzzYFYVWz1P1u8BY27AVB31byypKTiUqkmj5ibnYp7Tn/0/407FE8F64D6C43891C2392984607FD3486512D91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:63:29:cb:be:8b:c5:9b:49:ea:36:f0:74:40:8c:79:e6:
         0c:d4:a9:11:02:d1:96:02:00:f3:ea:4b:a1:6b:13:64:7f:88:
         30:f0:e4:4f:54:8d:f0:9d:b6:f2:99:fa:56:dd:96:03:37:28:
         c7:0d:33:cb:f3:ac:7c:d8:ee:2c:44:3d:89:90:8f:27:85:91:
         6c:0f:a4:29:12:55:00:b3:be:59:84:26:b5:ea:97:dc:85:59:
         85:43:fb:de:b7:39:51:3f:f2:c8:42:03:be:88:63:4c:ac:b6:
         f2:f7:89:cc:c1:da:35:e7:a0:90:38:8c:f4:d9:f0:c5:aa:48:
         e4:c0:fb:83:ad:7c:00:ab:7c:9a:ce:f6:5a:af:14:ee:fe:91:
         8c:c6:87:48:2b:ff:e2:b1:b2:04:9b:c5:af:07:8b:52:57:52:
         f1:66:50:31:f3:a9:04:32:f2:8d:44:ec:5e:01:87:e5:49:eb:
         fe:a0:f5:ce:0c:3e:0b:9c:de:86:42:d3:d8:60:af:77:af:2d:
         b9:fe:12:6e:4c:bb:62:03:fd:07:93:02:72:90:1d:fe:bd:53:
         6c:26:e8:f6:7c:91:cd:42:0d:b2:8b:b7:8b:c5:6d:8e:34:ca:
         10:60:43:94:4d:c7:69:6a:3b:17:da:a0:73:09:3c:3d:57:51:
         02:ff:5f:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGKXUgzIHl70tGMuIcx+I/6XRxSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3RkU4RjY0RDZDNDM4OTFDMjM5Mjk4NDYwN0ZEMzQ4
NjUxMkQ5MTAeFw0yNTA0MjgyMTIzNTJaFw0yNTA0MjkyMTMzNTJaMDMxMTAvBgNV
BAMTKEZGNERDN0NDNTVBMjZDRTc1MjY4QjMzNzFFMjA2NzAxNjgwQjczRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0kbxT1lVv79KHFnzsexMQTiO
Lu/jNv9ULpqsXv/Y/xM0s+NZuMKPvYQtkkZv47Nt9TPdCF+BV1NgU/JG4D3oporT
FlHBGn5AqpmCQT27R3G/6Wk6HBq1BcK0qj3IrFCuCuBq07HSy1+Po9LY3YzEYuLh
i4FSz9KoyGQb1jSCtOCLLMlzCWvH2w4gaOXaD0HMWWgVlSgSA0epkWGEwdRmQtF+
ik2QXG35AVfBahE9jx7Aey/UMOxGeX9glpZXKdCApdnlWf+Pt+3hd3hHDp5ia0g8
h+OSFMJf7v1g1U5HSQCZrkNrcLsVMLFWPRL3v2QjeXSuNdH4zF3bDqbiU2bxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/03HzFWibOdSaLM3HiBnAWgLc9gwHwYDVR0j
BBgwFoAUQH/o9k1sQ4kcI5KYRgf9NIZRLZEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnp6WUZZVld6MVAxdThCWTI3QVZCMzFieXlwS1RpVXFrbWo1aWJuWXA3
VG4vMC80MDdGRThGNjRENkM0Mzg5MUMyMzkyOTg0NjA3RkQzNDg2NTEyRDkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwN0ZFOEY2NEQ2QzQzODkx
QzIzOTI5ODQ2MDdGRDM0ODY1MTJEOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rnp6WUZZVld6MVAxdThCWTI3QVZCMzFieXlwS1RpVXFrbWo1aWJuWXA3VG4vMC80
MDdGRThGNjRENkM0Mzg5MUMyMzkyOTg0NjA3RkQzNDg2NTEyRDkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF/JjKcu+i8WbSeo28HRAjHnmDNSpEQLRlgIA8+pLoWsTZH+IMPDkT1SN8J22
8pn6Vt2WAzcoxw0zy/OsfNjuLEQ9iZCPJ4WRbA+kKRJVALO+WYQmteqX3IVZhUP7
3rc5UT/yyEIDvohjTKy28veJzMHaNeegkDiM9NnwxapI5MD7g618AKt8ms72Wq8U
7v6RjMaHSCv/4rGyBJvFrweLUldS8WZQMfOpBDLyjUTsXgGH5Unr/qD1zgw+C5ze
hkLT2GCvd68tuf4Sbky7YgP9B5MCcpAd/r1TbCbo9nyRzUINsou3i8VtjjTKEGBD
lE3HaWo7F9qgcwk8PVdRAv9fWA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 03:00:20 2025 by rpki-client