Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.mft
File:                     C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.mft (raw, json)
Hash identifier:          8woELijW/3v3lXKxXmEtfc+iK7AlqFuOIVqhMVFayfY=
Subject key identifier:   39:D5:95:22:A2:42:92:0E:62:21:D2:38:DA:28:5D:09:12:3A:19:FF
Authority key identifier: C4:E7:7C:2B:08:81:AE:69:F9:FB:90:2D:49:2C:0A:C9:00:5A:2C:68
Certificate issuer:       /CN=C4E77C2B0881AE69F9FB902D492C0AC9005A2C68
Certificate serial:       1A5DD00A1B556B576C310C4B2F7DB647B9F1E7E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.mft
Manifest number:          2C
Signing time:             Thu 16 Jan 2025 08:44:45 +0000
Manifest this update:     Thu 16 Jan 2025 08:39:45 +0000
Manifest next update:     Fri 17 Jan 2025 09:10:45 +0000
Files and hashes:         1: 323830343a363437383a3a2f33322d3336203d3e203533313233.roa (hash: ABaUGpXBlzOJQfqaY07UwaLL5Dn8cQs3bYv5uPM+bW0=)
                          2: 3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa (hash: g+ZujgrRmUnZj3A96DUImy8MqwuP9PJnan6uZNLyLhM=)
                          3: C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.crl (hash: aEq3GPXmipl+Gn8julHqPJOlq/ifLr6W8Z/jeEhYJlk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5d:d0:0a:1b:55:6b:57:6c:31:0c:4b:2f:7d:b6:47:b9:f1:e7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E77C2B0881AE69F9FB902D492C0AC9005A2C68
        Validity
            Not Before: Jan 16 08:39:45 2025 GMT
            Not After : Jan 17 09:10:45 2025 GMT
        Subject: CN=39D59522A242920E6221D238DA285D09123A19FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:02:d2:7c:bb:74:13:66:24:1b:80:e4:54:
                    af:27:f0:2c:da:46:ac:22:11:88:4c:fe:08:c9:98:
                    95:bd:78:a6:0a:d3:51:df:00:ac:ef:06:f8:f8:45:
                    87:60:45:fe:d3:59:8b:d0:68:d3:bc:76:3b:de:68:
                    73:ad:f6:fc:e8:7d:f2:d7:a0:e4:3a:c8:54:fe:8a:
                    38:b9:8d:23:fc:ad:5c:b9:47:23:28:31:ae:81:61:
                    0c:cf:cf:9b:b5:46:74:f7:5e:10:c2:b5:77:66:0b:
                    9b:b1:d7:0a:54:92:83:78:d1:94:25:b1:6b:d8:71:
                    db:9a:03:03:c6:2a:b7:f3:a1:ca:4e:96:bd:9d:33:
                    a5:45:dd:96:8a:34:de:fc:ad:c2:52:40:12:60:a0:
                    ec:d2:b0:62:33:0c:05:16:4c:40:49:ff:d9:76:67:
                    65:f4:e6:94:90:0d:b3:d5:38:25:24:5f:eb:4a:6f:
                    f4:d8:67:3e:72:9f:34:ba:b5:1c:a2:95:1a:2f:85:
                    6f:c8:ba:27:44:ca:35:f1:e0:6b:92:36:63:c7:08:
                    71:d5:08:c3:13:47:48:37:78:db:d3:69:fd:e3:2f:
                    0a:ad:77:0d:0c:63:71:3b:f2:6c:38:48:af:d4:ae:
                    da:93:91:bb:35:e3:5a:3d:72:58:3a:e0:2f:86:78:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D5:95:22:A2:42:92:0E:62:21:D2:38:DA:28:5D:09:12:3A:19:FF
            X509v3 Authority Key Identifier:
                keyid:C4:E7:7C:2B:08:81:AE:69:F9:FB:90:2D:49:2C:0A:C9:00:5A:2C:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:18:ef:77:be:42:85:e5:50:7f:e7:4c:19:f5:e1:dc:9b:
         c0:0b:72:f2:45:3d:db:ae:71:25:23:69:a5:f6:48:f2:4c:d8:
         3e:38:d6:6d:85:8b:5d:1d:67:0f:36:10:77:57:2b:81:b0:82:
         b5:c9:e6:93:98:09:57:93:d6:f2:91:6f:0b:a9:72:a4:70:c7:
         85:e7:9e:2d:fc:cf:53:27:0b:31:e0:d8:9b:5d:b0:2b:f0:96:
         38:7e:ba:64:8c:32:6f:a0:f0:aa:e4:09:b4:60:eb:22:4d:07:
         4c:43:42:22:4a:19:64:63:9d:14:05:d7:6c:b7:c1:59:91:5f:
         4d:ce:3b:13:42:c6:5f:c9:cf:d4:36:b8:27:af:3a:f2:95:c6:
         17:ba:36:a0:23:30:aa:f1:47:60:80:eb:ab:3e:ea:95:2c:bb:
         26:60:76:4a:fd:59:25:35:a9:ad:5c:19:b8:14:33:1d:8b:3b:
         a8:ef:19:a9:a9:e8:aa:17:06:b0:cc:af:5c:b8:fc:8c:d4:b2:
         9c:3d:ac:39:4b:69:7f:ed:0e:81:42:d5:79:18:bc:e3:3c:ca:
         52:d4:e9:96:56:97:ba:4c:77:6f:5d:e3:5f:e6:c7:e6:60:bd:
         88:8c:37:77:8b:0e:8b:2d:8f:f0:2a:e4:34:98:32:c0:cb:18:
         46:ef:f0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:24:03 2025 by rpki-client