Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.mft
File:                     151447ACA4E09209C53F7216E3E910244FF0C5A5.mft (raw, json)
Hash identifier:          jiGgbBmfKxX+RH4fcAZANkmTgFdpaF+nISibavW6/E0=
Subject key identifier:   72:F3:E4:27:CB:09:C9:6C:87:10:AA:5C:7D:FB:B1:1E:0A:B8:F7:4D
Authority key identifier: 15:14:47:AC:A4:E0:92:09:C5:3F:72:16:E3:E9:10:24:4F:F0:C5:A5
Certificate issuer:       /CN=151447ACA4E09209C53F7216E3E910244FF0C5A5
Certificate serial:       76725F298484967D19E34870F6103605C24827DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/151447ACA4E09209C53F7216E3E910244FF0C5A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.mft
Manifest number:          60
Signing time:             Mon 20 Jan 2025 09:30:25 +0000
Manifest this update:     Mon 20 Jan 2025 09:25:25 +0000
Manifest next update:     Tue 21 Jan 2025 11:52:25 +0000
Files and hashes:         1: 323830343a356466383a3a2f33322d313238203d3e20323639303034.roa (hash: hz9pExm3r4sKvLAPBfM3h6dMFNf5WnV2LfYak6476bI=)
                          2: 151447ACA4E09209C53F7216E3E910244FF0C5A5.crl (hash: skfWPezXN+hU0m8O2/LDHow1b1znb3jwJHxL31H+1ks=)
                          3: 34352e3137382e32382e302f32322d3332203d3e20323639303034.roa (hash: SDCLdtVrV4SEZMvNFOhEheB0St80R4zoIZtQLdKlxWw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:72:5f:29:84:84:96:7d:19:e3:48:70:f6:10:36:05:c2:48:27:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151447ACA4E09209C53F7216E3E910244FF0C5A5
        Validity
            Not Before: Jan 20 09:25:25 2025 GMT
            Not After : Jan 21 11:52:25 2025 GMT
        Subject: CN=72F3E427CB09C96C8710AA5C7DFBB11E0AB8F74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:ac:ba:22:32:9d:95:de:93:01:9b:5b:94:
                    59:df:ae:0d:41:c7:bf:50:d3:7a:05:bc:d6:a3:e9:
                    d6:c8:53:57:ad:d7:04:1b:21:37:9f:63:e3:c9:b9:
                    3f:ba:fe:02:b7:3b:db:32:03:60:05:d6:c0:7f:60:
                    1a:50:5d:08:62:3b:a5:33:d4:ea:02:76:04:16:b8:
                    57:1c:3c:a3:04:96:86:44:a4:fc:f4:69:3a:2f:0b:
                    7d:d9:55:f6:18:1f:d0:73:2f:e6:91:9e:78:32:8b:
                    f7:66:6f:b0:64:ca:64:23:2b:de:f9:7c:52:0c:1e:
                    c3:59:26:dd:26:00:bf:6a:30:df:49:9a:8d:53:0f:
                    c2:91:ff:85:05:4e:62:d2:4a:a0:95:43:a3:9c:0f:
                    1b:eb:99:96:6b:a1:c0:c9:53:8e:53:ab:dc:a6:7b:
                    b9:6d:37:b3:59:1a:98:dc:15:d0:e8:47:34:17:4c:
                    a5:3e:d7:b6:8f:c6:92:e3:5e:dd:52:6a:42:fe:05:
                    54:47:fb:c8:f9:d0:fc:c0:56:86:b7:17:38:96:5e:
                    3c:ec:55:7e:31:a2:ec:85:ad:48:38:7b:ec:2d:08:
                    4d:5e:3a:79:b2:78:ac:7c:91:17:c3:3c:b7:b3:75:
                    86:47:73:82:90:81:80:9a:db:ea:68:18:d6:44:2b:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:E4:27:CB:09:C9:6C:87:10:AA:5C:7D:FB:B1:1E:0A:B8:F7:4D
            X509v3 Authority Key Identifier:
                keyid:15:14:47:AC:A4:E0:92:09:C5:3F:72:16:E3:E9:10:24:4F:F0:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/151447ACA4E09209C53F7216E3E910244FF0C5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:58:c1:f2:79:72:f8:48:bd:98:1c:4c:12:d5:df:9d:17:22:
         1c:fa:45:53:32:68:3c:ca:1c:56:87:e9:0c:a9:80:43:47:3e:
         92:32:f7:56:88:2e:c5:b8:97:3c:ee:fa:f4:18:1f:fd:ed:ef:
         51:fe:ab:84:8d:ef:96:8f:0d:17:50:6c:56:fc:54:f1:3b:3a:
         95:ea:d1:9d:7b:26:8a:6c:3a:76:4f:1c:ef:21:90:78:23:5a:
         b4:da:38:73:5e:9f:6f:dd:1c:9a:72:d3:66:08:a9:53:2b:76:
         93:3f:aa:67:3b:be:b4:42:71:e0:2f:18:dd:46:c1:ee:0c:59:
         4a:e7:8b:39:18:b4:fe:5c:92:1d:ed:c3:e1:c3:dc:c6:d3:e1:
         d9:70:38:63:44:25:3b:e8:c8:22:6c:b0:6e:0a:1c:95:53:42:
         01:6b:70:7c:69:97:d2:77:3b:aa:9f:cd:ed:d4:3d:c5:69:d2:
         65:ff:5b:bd:a7:2c:90:70:61:2d:5b:c3:ca:50:1b:96:6c:45:
         80:e1:6d:2c:6e:d6:a5:70:76:b6:4a:2e:ea:52:47:54:77:7f:
         0e:73:7d:c4:3d:ac:d6:4a:eb:c7:af:d0:e8:85:0a:0a:3f:80:
         5d:18:05:de:bc:0b:e1:8d:9b:0c:51:4e:ee:8d:f9:35:85:5d:
         0c:af:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----