Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File:                     CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier:          wVeGlne8/AeVsjebbDsGd98Lqx/YfTb0Vxkv3OPX5Ek=
Subject key identifier:   53:E7:40:D8:58:31:F7:86:1C:47:D7:C0:05:04:8D:75:E7:0E:1A:E7
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       4BC62A5532788F741818FB3472E166954B6550A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number:          01DE
Signing time:             Sat 29 Mar 2025 05:16:32 +0000
Manifest this update:     Sat 29 Mar 2025 05:11:32 +0000
Manifest next update:     Sun 30 Mar 2025 07:39:32 +0000
Files and hashes:         1: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: 19W4HGO61emmaqbTrXsOgIRluYB89gL6p1kD6O3g8as=)
                          2: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=)
                          3: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=)
                          4: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=)
                          5: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c6:2a:55:32:78:8f:74:18:18:fb:34:72:e1:66:95:4b:65:50:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Mar 29 05:11:32 2025 GMT
            Not After : Mar 30 07:39:32 2025 GMT
        Subject: CN=53E740D85831F7861C47D7C005048D75E70E1AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:78:cb:97:db:b1:f3:f0:f6:f6:ee:b9:f0:
                    52:74:73:2c:d4:e9:f8:8a:02:b9:b1:19:9d:cd:17:
                    50:7d:89:a4:2a:d4:82:07:c3:ab:55:30:a9:1e:8d:
                    70:9b:be:b4:6f:e4:79:ec:d3:8a:bb:e0:86:93:54:
                    33:66:61:d7:22:43:3a:74:99:99:f1:df:85:93:e4:
                    e1:e9:8b:0e:40:31:fb:24:b6:a3:15:25:0c:59:e7:
                    4f:43:2b:bc:54:40:1e:6e:82:0b:dd:81:86:45:48:
                    17:fa:ae:54:c8:46:25:b1:84:c7:97:05:b3:1a:b0:
                    bb:6c:32:67:62:a3:9e:96:1b:9b:a6:57:a1:15:b7:
                    2e:76:07:60:2c:f7:34:b5:98:77:11:6e:94:46:13:
                    81:a8:d0:10:be:b6:fe:1e:2b:ac:3d:89:21:f6:ae:
                    59:bc:a3:5a:ab:30:93:b5:93:c8:b6:1a:11:3a:94:
                    85:ea:ac:69:9c:65:e0:b6:92:18:c9:3d:92:b1:f1:
                    ee:48:39:d8:33:9c:90:34:af:88:35:38:ed:23:0e:
                    72:85:7d:3f:bb:fc:ae:d7:4d:fc:fb:99:61:d0:b1:
                    5e:03:12:68:ae:e9:c8:16:4f:23:59:5f:83:0f:c8:
                    87:80:2c:36:e1:ef:38:63:2a:3f:ef:b3:ff:9b:e0:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E7:40:D8:58:31:F7:86:1C:47:D7:C0:05:04:8D:75:E7:0E:1A:E7
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:72:bd:b5:57:50:1e:08:a8:3c:83:02:16:a8:f5:3a:7a:
         15:cf:bc:ee:8e:6e:6d:42:89:60:36:3c:e4:52:ee:42:fc:9a:
         e8:d2:9a:5e:6e:14:94:27:c2:29:36:c7:e8:c0:bc:a1:14:6a:
         b9:f4:48:d4:11:3c:5b:87:3d:f4:51:f3:87:9f:11:ad:74:2a:
         cd:29:72:73:46:44:ce:0b:29:19:77:33:4f:3e:c8:be:85:cb:
         c9:88:a6:ab:d0:1a:26:c3:a4:4b:a8:87:51:ba:05:8c:3f:9a:
         e3:10:3d:34:e4:4a:72:d7:7e:c5:6a:28:6b:a8:99:d3:c4:4d:
         10:de:6e:16:b0:ca:4b:d6:86:b0:38:31:42:6a:bf:a7:5d:c2:
         5f:e5:cb:75:89:36:24:75:e6:ff:72:b0:91:b0:f6:04:39:00:
         4d:0e:e7:8d:fc:aa:2c:b0:eb:f2:25:b8:f2:9a:21:e5:c4:12:
         a1:74:f2:97:70:76:59:5c:a1:c8:4a:60:75:40:e9:33:c8:bf:
         2e:e6:ed:5a:e8:cd:63:f9:cc:41:10:64:ff:10:77:c9:01:17:
         78:e3:25:48:4c:50:5e:71:d7:38:d6:98:b0:d7:aa:4e:0e:09:
         2c:d1:f9:69:fa:06:ff:2a:10:2d:fa:8c:63:0b:12:38:6f:4c:
         a6:1a:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:08:52 2025 by rpki-client