Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.mft
File:                     E9C93793467B2B71AEA85BE267FDA6B699220CB0.mft (raw, json)
Hash identifier:          zTUzzrHDCRJKShdX8l4ev2HTWq1w/EmBJc3pVn3nX5A=
Subject key identifier:   C9:B7:25:2D:94:54:4B:3B:5C:A6:35:F1:BE:9B:CA:A7:A4:B0:57:6F
Authority key identifier: E9:C9:37:93:46:7B:2B:71:AE:A8:5B:E2:67:FD:A6:B6:99:22:0C:B0
Certificate issuer:       /CN=E9C93793467B2B71AEA85BE267FDA6B699220CB0
Certificate serial:       2F669C70EFB9BD69C6E28BA143EDE0FA8BCC1C65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.mft
Manifest number:          018D
Signing time:             Mon 27 Jan 2025 13:01:58 +0000
Manifest this update:     Mon 27 Jan 2025 12:56:58 +0000
Manifest next update:     Tue 28 Jan 2025 13:48:58 +0000
Files and hashes:         1: 3137372e39332e3135322e302f32312d3332203d3e20323633313533.roa (hash: cC1kg9GPuLyR6XG7k//65WT6+8sXuhaQB8BXUsPlZ2g=)
                          2: 323830343a313738383a3a2f33322d313238203d3e20323633313533.roa (hash: 5Gdz5TFatWgMCdUPh00b+Q9iJl7Nlex2D1e50IPlM2s=)
                          3: E9C93793467B2B71AEA85BE267FDA6B699220CB0.crl (hash: BzZBQ/hAfo/cl8oXpjzVYqkJ4Q+rEOH+jlTUAietsLI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:66:9c:70:ef:b9:bd:69:c6:e2:8b:a1:43:ed:e0:fa:8b:cc:1c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9C93793467B2B71AEA85BE267FDA6B699220CB0
        Validity
            Not Before: Jan 27 12:56:58 2025 GMT
            Not After : Jan 28 13:48:58 2025 GMT
        Subject: CN=C9B7252D94544B3B5CA635F1BE9BCAA7A4B0576F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:6a:78:2d:d1:33:ed:0a:d4:d4:7e:64:ca:
                    22:df:9c:10:25:8a:8a:9d:d1:c4:17:3b:1a:e6:69:
                    13:1e:02:f7:68:65:c7:f3:79:3d:9b:b9:25:7d:d3:
                    b9:c6:f4:06:6d:7e:75:09:1e:6a:05:7f:5b:82:d3:
                    f7:66:4c:6e:da:f2:37:22:66:2e:8d:8c:06:7e:36:
                    e5:f0:45:cd:67:07:61:73:b8:90:a0:0e:35:8f:5e:
                    06:a5:31:1b:70:69:49:de:60:2e:1d:dd:33:34:07:
                    da:e6:f5:80:69:4a:49:57:24:0d:89:5e:59:3d:49:
                    a8:7e:18:4a:fe:89:cf:c2:ed:c5:38:36:5c:0a:a3:
                    35:71:66:1d:28:e1:7f:1d:75:d9:33:2e:f4:47:a3:
                    b3:6f:3d:e4:01:31:d8:ce:18:be:8e:e8:2d:68:8a:
                    99:cd:b0:23:61:4a:64:52:9d:02:c8:48:5e:75:3e:
                    a0:6e:db:0d:50:38:a9:0e:1f:3b:21:f0:3b:58:bb:
                    ce:c8:89:af:1d:aa:da:2a:88:78:7c:96:ca:28:9f:
                    bb:42:c8:5a:48:ab:76:5c:23:aa:3d:5b:9b:d0:79:
                    48:22:e9:0a:d2:72:ee:53:c0:f7:43:ef:f4:71:b1:
                    51:80:4c:6d:4e:87:43:08:b3:a7:39:07:51:07:04:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B7:25:2D:94:54:4B:3B:5C:A6:35:F1:BE:9B:CA:A7:A4:B0:57:6F
            X509v3 Authority Key Identifier:
                keyid:E9:C9:37:93:46:7B:2B:71:AE:A8:5B:E2:67:FD:A6:B6:99:22:0C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/1/E9C93793467B2B71AEA85BE267FDA6B699220CB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:30:e9:22:f6:e3:e3:b9:e1:7f:4a:55:1e:be:3d:2b:2b:39:
         92:1e:42:ac:63:d2:66:ea:b5:22:65:f5:8e:73:a1:39:ee:e9:
         ee:92:64:2e:5c:3c:4c:9e:59:c6:14:f0:40:e1:03:88:a0:32:
         8e:65:cc:cb:56:8a:d2:2b:5e:80:85:7e:08:0e:86:76:62:35:
         f5:e7:8e:5a:a9:c3:9f:ce:50:1a:e1:e7:30:87:56:34:cc:98:
         2b:e5:35:1a:09:f6:d9:1e:4a:cb:b8:8d:b9:c5:34:fe:42:c1:
         c2:b3:65:b4:11:c6:ac:d2:e5:7f:2c:c1:e8:e9:56:7a:8a:ec:
         4e:ce:72:80:41:0a:94:d1:27:5f:ab:ca:d9:b8:40:f3:a9:0f:
         29:85:c9:de:2f:a3:8f:0e:3e:6b:7f:39:c3:bd:37:d0:86:e6:
         55:ba:71:bb:90:bf:90:c3:e7:bc:b7:54:33:66:aa:0a:91:7c:
         c5:d3:69:b5:90:c1:33:2f:b4:02:37:c0:44:e5:43:d3:58:e2:
         c2:e4:5a:a5:42:af:9b:61:82:dd:6a:77:d4:2c:42:3d:b8:f2:
         7b:ec:71:33:d0:e6:f1:28:f4:13:42:b2:71:cc:14:f7:70:16:
         e9:74:67:bc:c1:e1:87:82:e2:fb:b0:87:1c:b5:ed:ba:f0:13:
         8f:05:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:03:58 2025 by rpki-client