Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft
File:                     89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft (raw, json)
Hash identifier:          8Sje5zDcT5Fudw5LWe+eFPvLb/ldBbocRibNyWa9ejI=
Subject key identifier:   7D:99:50:BD:92:80:80:7D:62:18:36:85:46:74:F1:04:5B:CF:37:97
Authority key identifier: 89:D0:EF:B5:A2:15:00:E4:54:E7:48:2B:40:2F:82:71:A8:C5:9A:B2
Certificate issuer:       /CN=89D0EFB5A21500E454E7482B402F8271A8C59AB2
Certificate serial:       0CE49A8BEC574CD545894E68A70D9B00792A27FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89D0EFB5A21500E454E7482B402F8271A8C59AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft
Manifest number:          05
Signing time:             Fri 07 Feb 2025 06:01:21 +0000
Manifest this update:     Fri 07 Feb 2025 05:56:21 +0000
Manifest next update:     Sat 08 Feb 2025 06:23:21 +0000
Files and hashes:         1: 89D0EFB5A21500E454E7482B402F8271A8C59AB2.crl (hash: UaTPsT1+BRSe+9AMeNCvXuhfNwmX/PwYiIaBkkt54Bo=)
                          2: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: ufDr4eqcvWyMbq5VB9Kmt5v3AgBqgaeCy7gdRNnwl7g=)
                          3: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: u+Qk8Xpa7/Deibj2TRdA4jwMyHXxLwKRgFtaJE/l+/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e4:9a:8b:ec:57:4c:d5:45:89:4e:68:a7:0d:9b:00:79:2a:27:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89D0EFB5A21500E454E7482B402F8271A8C59AB2
        Validity
            Not Before: Feb  7 05:56:21 2025 GMT
            Not After : Feb  8 06:23:21 2025 GMT
        Subject: CN=7D9950BD9280807D621836854674F1045BCF3797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:a7:a7:61:2a:04:87:eb:db:c8:e6:af:3c:
                    ec:9f:9c:9d:9b:01:4f:47:dd:63:64:77:0d:b5:7f:
                    40:10:4f:f2:69:c8:f3:44:aa:a7:c4:63:12:72:06:
                    bc:55:3e:50:15:31:b0:34:8f:dd:29:cc:73:ae:50:
                    06:37:fd:c2:3e:d0:f5:e0:75:a2:26:6d:f3:2c:d1:
                    4d:9c:0b:cb:01:91:76:d5:96:80:ec:c4:3a:b5:8c:
                    b7:12:0a:0d:91:18:2d:30:39:b9:21:e1:96:75:6a:
                    ec:e0:46:15:d3:97:52:cc:9f:e3:82:d7:cf:97:45:
                    5f:b0:e4:51:96:5d:bd:ed:9d:86:35:fa:ee:f8:3e:
                    49:2b:67:65:3f:44:b5:89:52:57:23:72:e0:18:d0:
                    fa:4a:b0:37:a8:35:71:d5:79:23:7d:22:08:9f:a3:
                    c8:75:72:a2:26:80:c8:20:86:b0:6c:87:b3:30:62:
                    10:f0:9e:4b:51:f1:60:5e:6a:d5:cf:1d:f8:af:39:
                    36:ac:ce:2c:4e:5d:ca:80:03:92:89:20:65:36:19:
                    47:cb:1c:4b:2e:1a:50:e6:51:1f:25:a4:1d:01:34:
                    fb:97:83:37:e9:a5:90:fa:bc:7b:39:4a:3a:87:03:
                    1f:44:03:6f:37:c3:bf:63:27:25:eb:23:30:8f:fa:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:99:50:BD:92:80:80:7D:62:18:36:85:46:74:F1:04:5B:CF:37:97
            X509v3 Authority Key Identifier:
                keyid:89:D0:EF:B5:A2:15:00:E4:54:E7:48:2B:40:2F:82:71:A8:C5:9A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89D0EFB5A21500E454E7482B402F8271A8C59AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/89D0EFB5A21500E454E7482B402F8271A8C59AB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:52:af:65:b0:f4:23:2b:c2:d5:31:da:6d:06:bd:e0:ef:e5:
         ba:5a:ac:92:0e:27:a8:6b:32:02:1f:1e:35:9e:12:c9:cb:39:
         32:5f:0a:0d:de:6a:d7:9b:25:d4:65:e5:6b:f2:33:38:66:88:
         68:2f:25:9e:41:cc:e6:39:93:91:7f:fc:79:ce:57:c2:a7:3e:
         fa:8a:32:1b:f7:f4:37:86:f3:cc:bc:46:47:cb:7b:91:35:07:
         ea:ab:07:86:a8:14:11:ce:22:12:f2:67:34:ba:b3:3d:f0:48:
         88:79:79:87:32:22:e4:ba:f9:65:33:0d:52:17:b8:e4:dc:ed:
         8a:40:33:f0:b0:03:77:e0:33:43:2b:d6:9e:93:d5:ae:fc:9a:
         d2:1b:62:fe:d5:72:0c:9a:a5:6c:c5:6d:f5:02:2c:3f:b4:c8:
         b7:ca:e5:94:c9:8b:60:fc:5d:7e:09:6f:7a:be:70:cf:0c:c6:
         b2:24:22:f3:51:75:1a:b6:4d:8c:7d:64:99:58:4e:63:5f:b6:
         e4:86:a0:6a:4a:27:ee:01:92:d8:dd:80:3c:8a:53:56:fa:e3:
         3c:e1:96:d7:93:86:c7:bf:68:2b:9f:ca:26:8d:76:2d:48:7e:
         64:0c:e5:94:98:4e:56:a6:09:5a:90:76:db:c0:07:fe:11:c5:
         fb:8b:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:21:57 2025 by rpki-client