Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.mft
File:                     96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.mft (raw, json)
Hash identifier:          NiDtqwYs1sVUneZT04lj49xLiumbAQdyQfsBl/PwMMg=
Subject key identifier:   74:5E:50:C7:3A:0F:B3:BC:64:E1:6B:02:BE:9A:1D:DD:DD:17:9F:A3
Authority key identifier: 96:A1:36:EE:6B:67:D4:BA:C2:6D:97:F4:62:E9:8E:A2:6B:74:AC:B2
Certificate issuer:       /CN=96A136EE6B67D4BAC26D97F462E98EA26B74ACB2
Certificate serial:       34BF2E4EF48A76A55DBC2BCDAC6259A2518047FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.mft
Manifest number:          03
Signing time:             Fri 17 Jan 2025 13:51:58 +0000
Manifest this update:     Fri 17 Jan 2025 13:46:58 +0000
Manifest next update:     Sat 18 Jan 2025 17:46:58 +0000
Files and hashes:         1: 3138372e38372e3132382e302f32302d3234203d3e203238353835.roa (hash: HkPcam54ClLij/SQr0EnrPF4o8+JWhvfkH/hgMFHhQQ=)
                          2: 323830343a37633a3a2f33322d3438203d3e203238353835.roa (hash: wL5X6nIOGpqQCYX1di9nLKgrSioraQO3uNfSjbxTF7o=)
                          3: 96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.crl (hash: FAI4KNCbOVu+PnjiGzOSeRCauTHqPEi9HDv2d3rXe/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bf:2e:4e:f4:8a:76:a5:5d:bc:2b:cd:ac:62:59:a2:51:80:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A136EE6B67D4BAC26D97F462E98EA26B74ACB2
        Validity
            Not Before: Jan 17 13:46:58 2025 GMT
            Not After : Jan 18 17:46:58 2025 GMT
        Subject: CN=745E50C73A0FB3BC64E16B02BE9A1DDDDD179FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:35:29:07:f0:22:67:a3:46:68:66:19:ca:
                    1e:2b:b6:da:e0:2b:12:69:85:0f:89:b1:15:ba:64:
                    99:b6:12:24:72:a2:ee:fb:80:89:f8:6c:e5:49:b4:
                    b8:b2:98:92:ac:67:1d:33:e9:1f:25:be:bd:be:c4:
                    5d:88:cf:19:c3:33:de:07:1f:68:d0:fb:9e:4e:3c:
                    47:11:16:d1:c5:66:79:8d:b8:51:be:c8:41:0d:0e:
                    4d:2e:27:44:7e:80:c6:53:6c:d1:cf:6b:fc:1d:58:
                    7e:60:e3:7a:2c:55:ab:28:92:ef:83:e8:b6:25:a8:
                    01:ab:9f:a8:9e:41:4f:d2:51:d8:84:02:fb:26:ad:
                    dd:bc:d4:a1:f8:55:2a:3b:7a:5b:56:3b:aa:2d:97:
                    8c:c3:d6:9e:93:4c:85:19:85:15:74:e2:ed:52:b0:
                    3a:7c:f3:95:82:47:09:c1:30:b7:54:ba:27:3d:21:
                    86:1f:2f:20:29:78:a7:f9:8b:5b:f0:8d:27:30:91:
                    5d:84:41:0b:86:03:3e:5f:1d:44:0c:c6:78:da:52:
                    77:a3:49:f4:40:42:67:bf:c0:8e:21:9e:58:ec:a6:
                    57:1c:61:36:ff:6e:6d:45:d7:2c:f0:16:5a:da:31:
                    fa:e2:ec:d7:7c:94:1d:e2:92:dc:3c:43:1b:a8:7b:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:50:C7:3A:0F:B3:BC:64:E1:6B:02:BE:9A:1D:DD:DD:17:9F:A3
            X509v3 Authority Key Identifier:
                keyid:96:A1:36:EE:6B:67:D4:BA:C2:6D:97:F4:62:E9:8E:A2:6B:74:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/96A136EE6B67D4BAC26D97F462E98EA26B74ACB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:53:c4:cd:25:b5:19:ae:dd:f5:d2:19:ec:df:5d:80:4f:d6:
         af:b3:f8:65:32:98:cc:c9:d4:eb:45:75:e4:84:29:43:93:92:
         f2:a9:76:e2:bb:5d:4c:43:84:8c:91:4d:fd:79:22:aa:cc:23:
         83:96:1c:27:6e:c2:1f:4f:39:37:e9:21:c3:4d:5b:07:ee:d3:
         f1:5c:eb:7f:4f:36:b3:5d:ba:b3:14:9c:2f:45:0c:92:5f:41:
         20:56:c8:5a:2f:b0:91:39:85:ed:46:fa:68:67:49:ea:49:0c:
         77:17:6d:83:99:e9:6b:3f:9b:5b:63:4c:a6:db:b5:dc:03:7a:
         e7:12:c6:cf:4a:81:0a:b5:e9:33:42:52:d7:94:d3:1c:94:ba:
         f3:74:c4:f4:04:11:33:0b:d7:1d:88:a4:35:9a:b7:fa:0e:c2:
         e7:bb:bd:66:8f:f7:b8:a6:d9:19:6a:3a:17:36:0d:92:6d:ca:
         03:eb:a3:ba:47:3a:1a:c2:04:28:06:39:c5:a7:b4:4a:bb:7b:
         4b:21:68:90:9e:ec:1e:9e:55:e3:cb:00:48:64:33:c1:3b:6a:
         7d:eb:6a:61:55:8b:ff:6d:cc:04:37:d6:20:35:62:cc:c5:31:
         fe:1c:bc:51:03:83:e9:b0:86:66:5c:51:74:2a:52:6c:2c:c3:
         85:3b:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 17 17:15:54 2025 by rpki-client on console.sobornost.net