Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/1/8944F9FC6A5CC9F1108278B9B0046903531C6F8F.mft
File:                     8944F9FC6A5CC9F1108278B9B0046903531C6F8F.mft (raw, json)
Hash identifier:          TKbOQ4NuvPLE2TvVhJjUitvmQysTbT5LVl02vQ/mtXo=
Subject key identifier:   B1:CD:2F:D5:51:CF:80:F9:E2:28:DB:1D:BE:F5:B1:8D:61:07:D5:7C
Authority key identifier: 89:44:F9:FC:6A:5C:C9:F1:10:82:78:B9:B0:04:69:03:53:1C:6F:8F
Certificate issuer:       /CN=8944F9FC6A5CC9F1108278B9B0046903531C6F8F
Certificate serial:       3876A0306F3057E932BC8287BF6DDB55B8A84423
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8944F9FC6A5CC9F1108278B9B0046903531C6F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/1/8944F9FC6A5CC9F1108278B9B0046903531C6F8F.mft
Manifest number:          01D7
Signing time:             Tue 11 Feb 2025 11:00:00 +0000
Manifest this update:     Tue 11 Feb 2025 10:55:00 +0000
Manifest next update:     Wed 12 Feb 2025 11:00:00 +0000
Files and hashes:         1: 8944F9FC6A5CC9F1108278B9B0046903531C6F8F.crl (hash: hpI/sxmMYbwpkIn1M/XUcuMrEF98npNuVV0bPWD8aTA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:76:a0:30:6f:30:57:e9:32:bc:82:87:bf:6d:db:55:b8:a8:44:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8944F9FC6A5CC9F1108278B9B0046903531C6F8F
        Validity
            Not Before: Feb 11 10:55:00 2025 GMT
            Not After : Feb 18 11:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:23:c8:f0:19:eb:3e:47:20:7a:3e:3e:bd:
                    d9:58:e6:12:ff:e9:9c:bc:12:c8:a6:95:10:ad:fc:
                    28:47:23:43:67:6c:67:c9:ab:48:fd:99:91:86:57:
                    12:87:54:a4:a0:78:9b:7d:21:0b:55:2e:c7:3d:31:
                    be:2e:90:b2:a4:3a:83:7d:14:9d:5d:69:61:07:19:
                    cc:c1:30:b1:d7:7c:6f:bd:27:ba:de:6d:ef:f1:d8:
                    e8:81:80:53:25:7e:d9:0b:ed:b3:62:d6:b0:4f:3f:
                    fb:c4:f1:19:ad:1d:52:2f:61:da:23:43:1b:62:3e:
                    c3:0c:0c:b5:88:db:cf:73:50:f9:c3:c8:b1:b3:9a:
                    aa:0a:bb:41:f6:22:e2:23:a2:05:2a:62:4e:61:eb:
                    7f:60:d4:e7:16:52:2a:2c:b7:0d:3c:83:66:b0:e4:
                    bb:49:67:75:f7:5d:81:cd:7b:61:85:8b:60:57:8f:
                    84:e0:d5:e4:4d:ef:de:64:67:21:f3:86:e0:a6:c6:
                    05:5f:23:01:5e:07:63:b0:bf:4c:ab:69:7d:e8:4b:
                    77:5a:57:81:de:ed:9a:c7:25:c0:49:b9:88:51:f0:
                    aa:94:76:b5:b6:58:85:30:5f:fd:86:73:72:bf:cc:
                    38:85:0f:cc:ca:d2:a2:25:3e:46:4d:12:e6:4f:fc:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CD:2F:D5:51:CF:80:F9:E2:28:DB:1D:BE:F5:B1:8D:61:07:D5:7C
            X509v3 Authority Key Identifier:
                keyid:89:44:F9:FC:6A:5C:C9:F1:10:82:78:B9:B0:04:69:03:53:1C:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/1/8944F9FC6A5CC9F1108278B9B0046903531C6F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8944F9FC6A5CC9F1108278B9B0046903531C6F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/1/8944F9FC6A5CC9F1108278B9B0046903531C6F8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:2e:f1:36:70:53:ff:20:bb:51:89:44:dd:5d:d5:f2:30:
         0e:52:2d:ab:23:7d:91:1b:92:f0:c0:81:76:f2:98:7e:38:a8:
         98:65:11:08:c1:48:d3:18:8c:05:ac:7f:c1:22:df:35:3b:69:
         a0:2b:b5:8c:8e:1a:34:5b:4d:f6:49:4c:64:7e:d7:ec:0a:ee:
         67:7a:66:e5:88:c3:dc:4f:15:d3:16:66:9d:56:dc:1a:02:52:
         38:b2:8c:fb:f2:9a:83:6f:13:f5:f0:3b:9c:72:3d:b3:f5:4a:
         66:53:2d:2e:12:6f:86:fc:07:81:1c:ba:99:2c:a4:08:2b:5e:
         15:ec:bd:fa:b8:82:ec:1a:81:05:c3:ae:ad:09:e7:1a:1f:89:
         46:61:34:1b:3d:d9:46:23:3e:26:f8:0d:07:fa:9d:05:8e:02:
         c6:2c:06:3f:25:b9:e6:24:cd:23:34:26:11:6d:44:f9:90:bf:
         0d:b1:6b:f2:04:14:51:c1:52:31:c5:cb:7b:44:3d:22:d6:b9:
         d3:de:67:d5:a0:5f:29:aa:28:d2:fa:98:4f:71:3f:7c:76:57:
         de:1b:d4:ee:02:ad:2d:0a:d5:ad:1f:49:be:87:aa:20:6b:22:
         7a:37:6d:e1:64:bc:38:4e:5c:3c:c3:41:5a:2f:7b:0c:86:c6:
         0e:4c:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----