Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.mft
File:                     A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.mft (raw, json)
Hash identifier:          3CkB7pjoK7KdXoJT9WRrqCXQ1PzNpFbHc4r8M39xJPM=
Subject key identifier:   DD:C4:C3:87:04:51:3E:3E:A9:D4:37:58:32:78:B2:35:FC:F4:83:1F
Authority key identifier: A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50
Certificate issuer:       /CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
Certificate serial:       3A287EF0CDE579CF1EC9C7EABE031F0C89267980
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.mft
Manifest number:          0175
Signing time:             Mon 20 Jan 2025 10:42:47 +0000
Manifest this update:     Mon 20 Jan 2025 10:37:47 +0000
Manifest next update:     Tue 21 Jan 2025 12:20:47 +0000
Files and hashes:         1: 3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa (hash: UUwqHz8aP4J45S1HstaQBRZYJ8Xbp4V1qVjmuo0651g=)
                          2: 3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa (hash: 8OAuee6tosojg4a9DEK+XHwzUbayFiSrxzkd2zM0T0s=)
                          3: 323830343a316266633a3a2f33322d313238203d3e203631363332.roa (hash: 4vpKP/EcN+2sIGHP5nwOOGBZpXgr+X4vMfjVUfO7NSE=)
                          4: 3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa (hash: DiF+BIQ2fYYxsCi/WVWXKLiNkJHDOLfa4c5HszAjPfs=)
                          5: A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl (hash: +PaY3nIjcat6aRiQeg9dHvu2+5egcpQcwKQhAac2lxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:28:7e:f0:cd:e5:79:cf:1e:c9:c7:ea:be:03:1f:0c:89:26:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
        Validity
            Not Before: Jan 20 10:37:47 2025 GMT
            Not After : Jan 21 12:20:47 2025 GMT
        Subject: CN=DDC4C38704513E3EA9D437583278B235FCF4831F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:f7:63:fb:6c:23:91:0b:94:18:40:d4:dd:
                    7f:7c:d1:1d:1f:b4:77:39:89:5c:e1:c9:b7:43:ed:
                    f9:e4:03:b7:11:6b:19:4d:14:a6:e7:d3:64:8c:28:
                    3d:c0:0a:3c:c1:fd:14:a0:fd:d5:5c:42:55:c5:0c:
                    bf:02:cf:14:d6:13:67:39:ff:be:75:99:32:6a:02:
                    dc:ad:70:6c:9d:53:eb:ec:96:4c:61:fa:21:ff:de:
                    01:9c:d4:03:a3:a8:26:6c:4c:c8:8c:9b:f5:ef:97:
                    ec:a8:68:1c:cc:64:10:bd:7c:d6:9f:ee:da:01:db:
                    c2:0f:fe:c5:60:ae:e0:6c:ab:33:73:f1:f0:7c:8c:
                    59:98:03:56:a2:cc:71:86:39:42:af:2b:90:2a:d8:
                    43:d3:4e:b8:55:0a:4f:ce:e2:f7:98:0c:d5:f2:c0:
                    75:86:96:c4:e9:ef:af:98:09:32:9b:52:4c:a5:a7:
                    0e:36:bd:a0:b1:65:2a:28:03:25:59:dc:67:ea:ba:
                    17:f5:4a:9e:ec:52:16:0e:00:ea:95:1f:5a:94:e2:
                    b6:c4:69:eb:04:6a:12:ae:06:4c:ef:df:0f:e8:fc:
                    3e:62:a5:eb:01:ee:5a:40:19:f9:4d:0b:1d:b8:ad:
                    23:be:2c:00:a3:13:e8:3f:49:81:18:84:9e:df:80:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C4:C3:87:04:51:3E:3E:A9:D4:37:58:32:78:B2:35:FC:F4:83:1F
            X509v3 Authority Key Identifier:
                keyid:A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:bd:d3:d4:ab:ad:0c:c2:a6:5d:b3:85:b1:c1:eb:10:ed:
         2b:52:a8:f6:4b:0d:95:8b:89:dc:dd:5c:92:0b:79:11:a4:7c:
         11:a4:a3:08:8b:ed:cd:82:55:da:8b:a9:8f:22:db:64:69:15:
         1d:78:06:e2:cf:1d:2e:b5:57:08:c8:19:f1:3a:9c:21:32:62:
         2f:60:0b:7e:07:9d:ef:bc:dc:e8:eb:db:5f:58:ad:5c:e2:a8:
         b1:32:c8:4e:a8:67:ac:5b:95:7b:4e:1a:2c:24:d9:5f:7c:54:
         b5:35:97:9c:97:fc:91:c7:70:a8:70:ed:0e:f3:14:f5:8f:1b:
         04:f0:51:71:30:53:d8:3f:4e:d2:3a:65:3b:3e:4f:4d:c7:eb:
         04:2f:8f:02:e7:49:bb:a9:1d:52:72:15:7f:9e:e4:83:57:1a:
         5e:7f:59:24:6d:f0:e1:f2:a5:27:ac:13:3c:f0:75:82:0b:e0:
         33:28:2b:c4:ba:36:ba:fc:88:22:09:2e:f8:09:a6:06:c8:f1:
         6a:35:8f:d6:3d:62:ee:99:09:90:ef:c7:7b:80:56:a4:30:cd:
         a9:87:de:d7:8c:65:e0:a1:9e:d7:c7:4c:7d:32:ba:e1:9b:36:
         ff:8f:21:b4:de:53:51:f1:18:bd:08:dd:8e:cd:5c:af:9d:11:
         a4:fe:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 26 16:03:47 2025 by rpki-client on console.sobornost.net