Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.mft
File:                     1CFDA235DDB3686865DF5323375DC9670B22BEBE.mft (raw, json)
Hash identifier:          tADmLLoHQ1YHysvSJG1hxZllInjxiMAzDc4w6GIJgNg=
Subject key identifier:   18:74:1C:BA:FF:3F:5E:73:1F:53:01:F1:41:DB:E7:C3:D8:A1:C3:CD
Authority key identifier: 1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE
Certificate issuer:       /CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
Certificate serial:       3CBD2F0A8579DC05C2F7F24A7C565207DB6972A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.mft
Manifest number:          41
Signing time:             Thu 20 Jul 2023 00:13:55 +0000
Manifest this update:     Thu 20 Jul 2023 00:08:55 +0000
Manifest next update:     Fri 21 Jul 2023 03:38:55 +0000
Files and hashes:         1: 323830343a326432303a3a2f33322d3634203d3e20323635323633.roa (hash: fQRMRVpxeRiLftffAYJZFOZTNxVUGMDzVfdsVSCajpk=)
                          2: 1CFDA235DDB3686865DF5323375DC9670B22BEBE.crl (hash: goOnwqyU0N+lkRTp79T0KUNOluYaGudO90SSII0w748=)
                          3: 3136382e39302e33322e302f32322d3332203d3e20323635323633.roa (hash: 7oIKH42fJFSYduMDNMaTDUyff/wWzNyJwjqkQSoGTZ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bd:2f:0a:85:79:dc:05:c2:f7:f2:4a:7c:56:52:07:db:69:72:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CFDA235DDB3686865DF5323375DC9670B22BEBE
        Validity
            Not Before: Jul 20 00:08:55 2023 GMT
            Not After : Jul 21 03:38:55 2023 GMT
        Subject: CN=18741CBAFF3F5E731F5301F141DBE7C3D8A1C3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:60:dc:92:8e:ef:ed:24:81:aa:de:2e:7a:
                    55:36:d8:79:a0:b9:47:38:e4:b1:de:d4:ab:c6:3b:
                    06:86:c3:20:77:db:e5:7b:9a:a6:15:3b:3c:52:2a:
                    8c:c4:1e:26:30:10:e3:e2:ed:dc:18:52:1d:ff:e6:
                    85:59:d8:85:f6:45:fa:59:b1:5e:e8:29:7a:55:4c:
                    95:7c:58:e3:74:f1:1c:16:76:e8:60:75:17:61:3e:
                    3a:d3:59:29:69:25:dd:78:5d:f3:ab:3f:3e:4d:c7:
                    cf:ce:c3:42:3c:5f:00:ab:35:54:4d:e5:0f:14:c8:
                    52:b8:9c:06:5c:1d:58:5b:d2:ca:85:09:b5:27:eb:
                    b1:ae:9f:9a:06:c2:c7:6b:41:d8:bb:bd:94:19:9b:
                    77:39:c9:bc:1a:c3:4e:0a:0b:a9:22:5e:b2:92:53:
                    71:8a:9c:cb:8d:f2:61:14:da:ba:ae:d8:a0:97:f3:
                    71:10:af:3c:b3:d1:39:95:c9:8b:3f:67:78:b3:21:
                    1b:dd:b1:ce:59:e1:e2:56:a1:ce:f5:ff:4f:25:69:
                    60:cf:9a:5a:f8:8c:0d:f5:21:ec:8b:5d:83:47:20:
                    7a:6e:a6:3a:31:48:fe:07:6a:5e:8a:cd:f0:42:43:
                    e6:2f:47:dc:22:46:87:7c:f0:65:11:3d:c8:86:7e:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:74:1C:BA:FF:3F:5E:73:1F:53:01:F1:41:DB:E7:C3:D8:A1:C3:CD
            X509v3 Authority Key Identifier:
                keyid:1C:FD:A2:35:DD:B3:68:68:65:DF:53:23:37:5D:C9:67:0B:22:BE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFDA235DDB3686865DF5323375DC9670B22BEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/1/1CFDA235DDB3686865DF5323375DC9670B22BEBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:05:81:41:cc:a0:2b:e1:f9:d2:94:d5:f7:40:fd:eb:d2:ca:
         48:00:18:13:f0:5d:48:b9:3a:49:6a:9e:47:ff:e7:6d:8d:30:
         51:e3:bf:ad:14:26:7f:0d:03:3a:16:f6:c7:ce:ae:a7:6e:83:
         e5:d3:e3:bc:6f:42:aa:79:45:97:73:38:cc:4d:73:9c:6d:d0:
         d9:3c:de:da:50:d8:07:75:f6:fc:e1:28:00:15:65:3c:63:f3:
         cf:eb:27:1f:ea:37:62:22:69:b8:c7:8f:1a:52:c9:0d:a2:89:
         d2:07:db:2c:2d:cd:3e:1c:f7:06:6e:b6:3f:f5:d5:cc:34:a0:
         ce:5a:58:ac:39:b5:dc:3b:32:c1:a1:e5:ef:bb:90:29:a0:5a:
         91:68:cb:45:b8:4f:df:ea:e7:96:a2:c2:15:98:a4:23:65:a7:
         cb:f4:f8:ec:0c:ba:f0:ff:1f:f1:e2:20:12:90:0c:a0:16:0b:
         9e:6d:52:57:20:e1:c5:0f:18:6c:60:75:3e:f2:c1:b3:2e:0f:
         e6:0b:24:c7:36:67:97:74:e2:6d:76:5e:43:2b:23:d5:a7:ff:
         fa:a7:c5:98:05:9b:b2:3f:20:6f:a3:4e:ed:ab:78:64:78:db:
         9f:c1:1c:c6:68:20:14:67:9d:72:a6:1e:8c:06:00:7a:9b:22:
         26:6e:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:13:58 2025 by rpki-client