Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.mft
File:                     C5A26047546067241D33D84B5B25FBA9D232E5B8.mft (raw, json)
Hash identifier:          bV+awh+nCyFfthRtFEiOf5STZtwCrk0VcuQu7Gwlklo=
Subject key identifier:   22:65:71:61:B7:6D:D4:89:B1:15:67:60:B4:6F:C4:AC:9A:50:E7:9A
Authority key identifier: C5:A2:60:47:54:60:67:24:1D:33:D8:4B:5B:25:FB:A9:D2:32:E5:B8
Certificate issuer:       /CN=C5A26047546067241D33D84B5B25FBA9D232E5B8
Certificate serial:       39CB05FA3B91BBE7B6B3B60EF8EB0C8C19EBE8F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5A26047546067241D33D84B5B25FBA9D232E5B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.mft
Manifest number:          1F
Signing time:             Sat 29 Mar 2025 01:39:24 +0000
Manifest this update:     Sat 29 Mar 2025 01:34:24 +0000
Manifest next update:     Sun 30 Mar 2025 05:37:24 +0000
Files and hashes:         1: 34352e3233302e36382e302f32322d3234203d3e20323637313538.roa (hash: nuIeJ+8eMefzF8z6hE1/Rr9NzcShx7+xzcaYCk+EcFs=)
                          2: C5A26047546067241D33D84B5B25FBA9D232E5B8.crl (hash: 7BYFBCRHBxymuQqjQugxrnvd8bvQHI4HUMYEzzzzJqE=)
                          3: 323830343a343930303a3a2f33322d3336203d3e20323637313538.roa (hash: mkXbBavvXuIoxB8wAmwN1Km/q8T+j8ZzwJ8g4OxYKrg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cb:05:fa:3b:91:bb:e7:b6:b3:b6:0e:f8:eb:0c:8c:19:eb:e8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5A26047546067241D33D84B5B25FBA9D232E5B8
        Validity
            Not Before: Mar 29 01:34:24 2025 GMT
            Not After : Mar 30 05:37:24 2025 GMT
        Subject: CN=22657161B76DD489B1156760B46FC4AC9A50E79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:de:d4:6f:2f:86:2e:66:28:00:8d:24:74:
                    83:88:65:3b:85:aa:0b:0d:be:ab:98:f2:b8:b3:28:
                    ae:e3:50:26:ce:16:42:5d:93:f1:d9:11:b9:b4:45:
                    36:16:bf:0f:68:50:e3:ce:4d:f2:68:1b:f2:a4:0a:
                    bd:cb:13:0a:d7:95:84:89:f6:fe:ff:a6:a3:96:e4:
                    11:db:fc:01:95:5f:d1:07:6f:48:b3:be:4f:1d:16:
                    16:20:d0:c0:96:b5:16:48:c0:b2:1a:35:99:fa:1d:
                    5a:61:2a:2f:29:6f:f8:8f:30:7d:94:37:c9:f6:53:
                    38:f6:ad:50:b0:82:85:fe:6f:57:6c:38:e0:9f:32:
                    e9:d7:0e:37:e7:03:d5:d5:6c:a8:1a:86:b0:17:8e:
                    2d:3b:1c:f6:ba:fd:d7:53:5b:13:1f:14:c7:8d:cc:
                    6f:ec:74:23:04:ed:28:76:d2:d6:c9:d8:ae:cb:54:
                    cb:5b:73:42:15:1a:90:e1:7d:fc:9c:bf:e1:38:af:
                    1a:0a:1c:97:ef:c7:0b:5b:60:0c:cc:69:f3:7b:c2:
                    2b:e8:6a:84:52:f4:32:22:31:2e:f5:98:f9:a2:eb:
                    9d:54:ec:05:40:69:89:e8:04:4a:d5:0b:7f:cd:84:
                    98:ef:fd:13:45:60:61:5d:54:d9:1b:34:77:82:3d:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:71:61:B7:6D:D4:89:B1:15:67:60:B4:6F:C4:AC:9A:50:E7:9A
            X509v3 Authority Key Identifier:
                keyid:C5:A2:60:47:54:60:67:24:1D:33:D8:4B:5B:25:FB:A9:D2:32:E5:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5A26047546067241D33D84B5B25FBA9D232E5B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:cd:7f:4d:53:07:72:30:74:4e:7e:b1:01:2b:9f:8a:d3:
         fc:8a:43:d1:80:9b:e7:40:48:b3:f5:7d:42:06:af:31:1e:c6:
         9c:ba:28:ba:4d:d6:f7:0e:de:21:53:ac:16:84:30:c1:87:ba:
         07:a7:9e:cd:5e:4f:47:3e:8d:f3:66:98:b8:af:f7:07:00:e9:
         38:7a:bc:ed:5d:e3:64:79:ce:e4:73:bc:fc:7a:17:fc:4c:b5:
         3e:c4:25:7d:f0:95:65:2c:79:fb:85:62:f8:18:e7:e8:0e:2e:
         55:39:b2:e2:fc:01:b2:42:10:33:2f:2d:3d:d2:af:0f:3d:f5:
         aa:c3:71:19:c3:57:8c:0e:6e:e9:bf:b9:da:7c:0c:5a:c6:82:
         61:98:da:60:34:98:44:be:35:eb:33:c8:f8:74:f9:3a:8b:c6:
         93:54:26:bd:4e:08:9d:f5:5c:51:2f:bd:0a:ad:06:91:3e:bf:
         de:a6:63:ac:5d:3b:e4:e4:f9:92:1d:3b:b5:91:a5:9a:e0:8b:
         2d:c9:23:86:75:3e:a0:5d:f9:4d:18:73:12:bf:e2:10:2c:58:
         32:78:ac:e6:c7:4d:01:9b:73:0a:68:7c:06:90:e1:a5:23:3c:
         fb:1d:ff:88:3b:55:9c:56:e4:1b:97:29:26:fc:c2:a1:ff:fa:
         dd:4d:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:33:46 2025 by rpki-client