Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.mft
File:                     DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.mft (raw, json)
Hash identifier:          z3nrQ4moTOvBKC/nKGY0P775VVya6E/OjVqL4cU1r0Y=
Subject key identifier:   96:0A:4D:77:BD:09:D0:38:12:FA:A5:B3:B5:94:CD:ED:C5:69:EB:28
Authority key identifier: DE:F1:60:E9:BE:8D:83:F8:53:25:C2:FE:1F:DD:C0:72:DA:40:0B:BF
Certificate issuer:       /CN=DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF
Certificate serial:       30978F3382E5696B55089E8E0B3F23C1BB1D68D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.mft
Manifest number:          7A
Signing time:             Fri 07 Apr 2023 03:10:25 +0000
Manifest this update:     Fri 07 Apr 2023 03:05:25 +0000
Manifest next update:     Sat 08 Apr 2023 05:00:25 +0000
Files and hashes:         1: 3137372e35352e3234302e302f32302d3234203d3e20323632353332.roa (hash: DfpQnziUaa7/TRknK7/i3xy1z1nMTEXcijkD7ZvaCnY=)
                          2: 323830343a6563383a31393a3a2f34382d3438203d3e20323731313939.roa (hash: fDC2yGh9G6yFxwpjpwalTzXaBQ/OD7/hKTHSFjK3Z3Y=)
                          3: 3132382e3230312e3132302e302f32322d3234203d3e20323632353332.roa (hash: K6uPIEWYPD/aHiKHzXhU22OJEP3js54kMS/hfOzMwjA=)
                          4: DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.crl (hash: ujrphqeamxynWjsxf0z0oB9/EG3SA0KH32abwAMkp8o=)
                          5: 323830343a6563383a3a2f33322d3536203d3e20323632353332.roa (hash: nRDggBm413aL3A7+Sa0YptZvqkUGRN4Ge10ubYOy7LE=)
                          6: 3138362e3234392e3137362e302f32302d3234203d3e20323632353332.roa (hash: j9XCMtC7q5cCuM9Dz6rBsvT18LCoxgr+NIdVVGGrTvk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:97:8f:33:82:e5:69:6b:55:08:9e:8e:0b:3f:23:c1:bb:1d:68:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF
        Validity
            Not Before: Apr  7 03:05:25 2023 GMT
            Not After : Apr  8 05:00:25 2023 GMT
        Subject: CN=960A4D77BD09D03812FAA5B3B594CDEDC569EB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:83:73:ab:04:4d:db:00:06:e7:72:fd:7c:
                    19:48:d1:b1:a4:b4:82:69:1c:ef:d2:bf:2a:1c:17:
                    fa:a4:31:b2:42:84:fd:7d:7c:74:ea:94:78:6d:1c:
                    0f:8e:4a:2f:94:d7:42:b3:7f:96:88:59:d8:13:0f:
                    8a:75:6b:a0:2d:f5:42:59:5c:08:04:9c:8a:b6:ae:
                    a1:1f:94:c9:1f:18:5b:e6:b1:6a:dd:14:67:d3:94:
                    75:73:67:6d:5a:aa:53:fe:50:e5:6c:e4:3d:39:6a:
                    b9:be:eb:a3:1e:c1:36:a0:bf:bb:6c:35:c2:42:71:
                    57:3d:e7:93:2b:75:94:1f:45:b1:32:7b:de:e6:a7:
                    b8:b8:b2:b2:cf:00:e5:08:89:d2:94:68:9f:6c:2a:
                    d0:14:17:c6:bf:28:36:b9:78:90:67:22:51:be:ba:
                    67:0d:6e:6e:f9:d0:ae:74:00:af:19:8b:b3:ce:bb:
                    c9:0f:95:fb:ed:de:59:f7:85:74:b7:f3:0f:a1:20:
                    c8:7e:f6:ce:8e:d7:5f:ae:45:bf:17:ed:69:da:3e:
                    d4:18:46:cd:e6:e1:27:fb:eb:89:10:ce:2d:bb:78:
                    40:7c:5b:18:b3:61:8f:ab:51:3a:4e:b6:e0:20:20:
                    0f:78:83:55:75:79:f8:82:09:57:3a:14:0a:16:26:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0A:4D:77:BD:09:D0:38:12:FA:A5:B3:B5:94:CD:ED:C5:69:EB:28
            X509v3 Authority Key Identifier:
                keyid:DE:F1:60:E9:BE:8D:83:F8:53:25:C2:FE:1F:DD:C0:72:DA:40:0B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/DEF160E9BE8D83F85325C2FE1FDDC072DA400BBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:37:c0:69:67:6c:f4:c7:df:d2:52:ba:90:4b:52:62:2a:
         a4:ea:3d:d4:a9:f9:e6:38:c8:8c:f8:d8:eb:5a:4c:88:c7:f6:
         c4:5a:6b:23:1e:b9:59:cb:64:a9:58:e3:22:f6:e7:b1:06:fc:
         75:1c:66:b7:ad:88:a5:af:d2:bd:18:22:45:3c:96:79:2f:04:
         b7:55:a6:fa:93:09:78:b7:9a:75:06:5c:d1:8c:98:44:85:df:
         df:6f:b3:23:76:8c:a4:cd:59:7f:0e:d8:78:ca:be:57:bc:00:
         00:41:c6:87:24:19:14:70:d7:88:fa:36:6c:73:cd:3f:75:c9:
         82:42:6b:a9:d9:31:6d:05:0a:23:94:cc:62:b3:f9:c1:aa:08:
         04:f3:72:72:db:61:e4:b2:4f:4a:75:44:82:24:29:08:2e:e9:
         64:2b:7b:f2:e3:dc:27:63:5f:33:f3:62:20:cd:b3:6c:19:64:
         30:d3:51:47:90:8b:3f:40:97:42:d3:0b:d7:18:50:95:5e:8f:
         3d:37:60:98:e8:b6:dd:b0:db:60:39:02:27:96:38:60:cd:2d:
         8e:90:6d:7d:27:cc:f6:c5:d0:f6:1d:32:74:2e:64:ec:b1:fe:
         5f:56:b0:9f:14:4f:ec:6f:70:21:dc:17:ae:bd:ce:3a:5e:28:
         8c:66:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:05 2025 by rpki-client