Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft
File:                     0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft (raw, json)
Hash identifier:          h92rc9Koj/4Pg45PJA2O0oMj2+af5OQeOQ5E4PZw4iU=
Subject key identifier:   31:0A:A5:0F:AF:F1:5E:A1:71:13:A3:D4:36:F2:F8:C9:4B:57:39:89
Authority key identifier: 0C:97:1C:51:E8:3D:2A:1D:AD:7F:20:CB:F7:08:84:CA:50:8D:AA:B6
Certificate issuer:       /CN=0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6
Certificate serial:       19538C51ADD65323A1B8812F73FFD88FAABD58EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft
Manifest number:          0124
Signing time:             Tue 11 Feb 2025 18:31:20 +0000
Manifest this update:     Tue 11 Feb 2025 18:26:20 +0000
Manifest next update:     Wed 12 Feb 2025 22:06:20 +0000
Files and hashes:         1: 34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa (hash: rYqvnjm9W4l+3MRK9xePKhddcpFpn55WfKdeiIGNhN4=)
                          2: 323830343a356337303a3a2f33322d313238203d3e20323638393039.roa (hash: E+4tFhdzdiBHPxW/qesx43yDxqasTs3F2qQzAkV5Ymo=)
                          3: 0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.crl (hash: opOTW79u6DHNWxBn7jYS3hRUOzqD4wAc/8jU4a7EM8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:53:8c:51:ad:d6:53:23:a1:b8:81:2f:73:ff:d8:8f:aa:bd:58:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6
        Validity
            Not Before: Feb 11 18:26:20 2025 GMT
            Not After : Feb 12 22:06:20 2025 GMT
        Subject: CN=310AA50FAFF15EA17113A3D436F2F8C94B573989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:f4:27:17:ff:ce:a5:6d:30:be:0b:89:e1:
                    f6:f3:d0:9a:e3:10:7c:c0:0f:83:79:c3:aa:5b:9d:
                    c6:fd:59:7a:cf:07:48:f5:1f:85:5c:e9:a8:67:25:
                    ac:84:64:bc:31:ab:71:49:71:37:55:ec:dc:d5:48:
                    9a:63:57:1f:0b:5b:6c:ce:24:ea:a6:b3:e1:27:ea:
                    a0:06:8c:d2:01:0c:1a:ed:47:d6:35:8c:0b:7d:69:
                    6d:dc:b0:58:5a:73:1d:c1:2b:98:88:d7:37:bb:d1:
                    3e:2e:c5:f1:c6:f1:d5:12:1d:43:41:ac:ef:75:84:
                    4f:dc:f2:ae:56:e1:86:a2:ac:7f:dd:9e:11:6f:bb:
                    9c:ea:e6:bf:cc:1f:6f:20:72:23:d0:35:77:7b:d9:
                    c2:d3:17:cc:ea:1e:3a:32:40:bb:32:7b:98:e2:c0:
                    b6:99:7e:0b:0f:cf:f7:4d:74:c8:79:0c:67:4e:9c:
                    4c:59:d5:4f:3c:b4:05:e0:77:d0:2a:68:cf:0b:71:
                    16:11:e1:61:ad:e7:0c:b8:db:41:61:8d:dc:40:13:
                    b5:2d:47:2a:ae:28:b9:28:85:56:62:80:07:25:dd:
                    28:11:f1:8e:04:c4:89:90:28:04:a3:65:15:1e:16:
                    55:52:8a:09:37:98:08:51:6f:80:08:2b:d8:4c:bc:
                    c2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0A:A5:0F:AF:F1:5E:A1:71:13:A3:D4:36:F2:F8:C9:4B:57:39:89
            X509v3 Authority Key Identifier:
                keyid:0C:97:1C:51:E8:3D:2A:1D:AD:7F:20:CB:F7:08:84:CA:50:8D:AA:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/0C971C51E83D2A1DAD7F20CBF70884CA508DAAB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9d:d9:9d:eb:14:bb:fc:33:34:93:c5:32:66:2d:eb:ff:39:
         52:53:1e:e5:70:1b:05:4b:ca:3d:8e:36:52:9c:b2:8d:71:e5:
         1f:1b:30:40:9c:77:56:5f:92:fd:9b:9e:ce:08:b6:bf:f2:34:
         ba:5c:27:22:50:3c:73:88:1f:1d:eb:ce:e2:32:5a:31:d2:bc:
         69:75:b1:06:ad:31:31:31:08:4b:15:f5:73:21:9e:91:68:8a:
         68:a0:dd:21:7d:fa:73:79:38:67:66:36:1e:a2:f3:d5:6e:19:
         bf:ac:57:41:3f:7a:8b:5a:23:0c:cd:97:16:97:fd:36:4b:32:
         33:41:c6:de:ac:50:9b:b2:51:91:9a:1c:f5:a3:42:65:52:7b:
         92:8e:91:fc:90:13:d8:a6:7b:0b:d6:fb:0e:83:6a:94:76:dc:
         80:04:94:48:76:e3:12:a4:19:71:ff:53:2b:44:6c:87:eb:28:
         49:a8:c4:14:e4:a0:ea:ce:8d:07:e0:db:4b:4d:37:f0:3d:1e:
         81:fd:17:6f:50:77:d5:a4:95:db:a7:6a:92:7c:23:f9:5a:e1:
         29:18:ac:c0:5d:02:b3:b4:30:5e:b1:e4:75:fa:85:64:6d:5d:
         2b:0b:f7:da:8b:49:d7:34:88:6b:8a:98:fc:41:e5:5f:3a:6f:
         a8:ba:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:53 2025 by rpki-client on console.sobornost.net