Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft
File:                     DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft (raw, json)
Hash identifier:          6keyFK7c3Wc4wlvdRWT5GM7pdTccJ46z70HznjKqAaM=
Subject key identifier:   22:05:F8:FE:1A:BD:CD:3E:C4:19:D7:8A:9F:03:EE:FA:EB:35:98:19
Authority key identifier: DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1
Certificate issuer:       /CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
Certificate serial:       49FB0073F1D374D3B0AC2412C61ED832D385B1BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft
Manifest number:          01E2
Signing time:             Fri 28 Mar 2025 17:31:27 +0000
Manifest this update:     Fri 28 Mar 2025 17:26:27 +0000
Manifest next update:     Sat 29 Mar 2025 19:28:27 +0000
Files and hashes:         1: DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl (hash: i/n0qSMMt1Mo9AKfjsFJf0MwOydZw3NsI9Qv9cX1dGc=)
                          2: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: Ca0ATQBtu2wwlGdbVP249fdllMV78XDACR45JyepW1s=)
                          3: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: UrUr7rbe9wkQziBoOWgeil4dIzI7nybGvMG7GrySm0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fb:00:73:f1:d3:74:d3:b0:ac:24:12:c6:1e:d8:32:d3:85:b1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
        Validity
            Not Before: Mar 28 17:26:27 2025 GMT
            Not After : Mar 29 19:28:27 2025 GMT
        Subject: CN=2205F8FE1ABDCD3EC419D78A9F03EEFAEB359819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:63:22:0f:a2:45:44:62:35:19:47:fc:b6:
                    c9:d5:9e:73:bc:8e:60:16:6e:ea:25:27:1a:e7:10:
                    02:1a:1f:79:92:4e:13:a1:7c:f0:56:91:f4:e2:3b:
                    0d:8a:f2:24:84:f9:00:71:9a:41:3d:f8:15:59:6d:
                    80:cb:64:38:c7:ad:cd:5b:79:ca:a2:71:7b:9d:dc:
                    7d:cd:20:78:f4:7d:5b:08:1f:ea:67:83:cb:cb:58:
                    45:01:c1:ca:e7:45:46:b1:9c:a1:d2:84:19:96:08:
                    c1:9b:98:19:a4:dc:ab:1f:bc:1a:61:cc:b2:8d:3c:
                    45:3d:ba:db:53:f8:64:94:d6:43:56:6a:33:9a:14:
                    d7:16:c2:1d:2e:8e:bc:59:1e:e8:80:77:b4:1f:26:
                    c2:31:f2:24:13:56:1a:9c:b8:dd:a0:87:b7:a0:1f:
                    8e:3c:43:12:da:61:fe:bd:0e:24:64:c8:7c:20:7d:
                    9e:3c:95:e9:99:f0:eb:2e:b2:0a:8b:1f:16:26:6b:
                    bc:de:3b:ad:5d:8c:86:da:cb:dd:03:ec:9f:76:b9:
                    f0:4e:67:e1:34:0a:61:90:a3:77:63:42:f7:8a:ff:
                    14:18:b2:2c:56:72:50:c7:04:62:6e:15:62:b2:39:
                    f3:b1:78:dd:f6:2d:f1:dd:fc:28:14:d1:4f:a4:8c:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:F8:FE:1A:BD:CD:3E:C4:19:D7:8A:9F:03:EE:FA:EB:35:98:19
            X509v3 Authority Key Identifier:
                keyid:DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:fc:6b:37:72:62:93:c9:0a:f6:cc:3e:0d:06:d1:dd:b1:
         a5:29:01:2f:ca:ae:77:2d:7e:27:4d:c0:89:a5:73:4c:80:82:
         f3:89:58:a8:88:f8:b0:25:9c:0c:86:aa:71:c0:47:bb:4b:61:
         2d:95:6f:b4:1b:f0:5b:51:dc:1f:9c:ba:bf:9c:f3:88:cc:c9:
         b3:49:6c:83:e5:aa:f0:d6:57:f4:3e:d2:3e:5e:77:61:f6:2d:
         52:68:da:ba:4f:ee:66:79:dc:a0:ed:e9:be:ef:30:85:60:37:
         8f:91:3f:7c:e0:41:35:f1:50:fe:37:d8:14:96:e4:62:62:02:
         22:6c:05:c7:13:96:b1:80:14:1a:da:ad:a4:3c:f2:89:c9:ba:
         1a:be:f8:c6:a7:c6:f9:72:0e:ed:ca:53:bd:36:0d:2d:84:00:
         f7:de:68:d8:03:cd:e6:5b:98:63:21:0d:70:0d:0a:58:c9:2e:
         e3:9a:dd:91:4f:3f:f7:39:e4:7c:9f:91:ad:6f:be:26:c4:b4:
         91:91:38:03:1d:8e:c0:6d:af:26:ec:fd:75:bf:22:17:c4:cd:
         91:c1:27:6e:ad:f1:57:b0:29:21:67:aa:5e:44:7a:55:5b:40:
         2d:af:00:fc:93:e8:b2:ff:b0:a1:7f:84:1b:cb:aa:00:62:a5:
         30:06:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:35:15 2025 by rpki-client