Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/1/43E9877AB1340A514C1042D56269C61EA9E7A261.mft
File:                     43E9877AB1340A514C1042D56269C61EA9E7A261.mft (raw, json)
Hash identifier:          ayzhKs0QD3pxyFSPBCw1zznCbfA+Lk8GPI9k9tpRs5s=
Subject key identifier:   04:62:01:AC:A0:CD:2C:73:38:4C:09:BA:F1:2D:83:70:F6:1B:C9:98
Authority key identifier: 43:E9:87:7A:B1:34:0A:51:4C:10:42:D5:62:69:C6:1E:A9:E7:A2:61
Certificate issuer:       /CN=43E9877AB1340A514C1042D56269C61EA9E7A261
Certificate serial:       741B3D7B42EE1A4679E8D67600F64C8ECDA08C2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43E9877AB1340A514C1042D56269C61EA9E7A261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/1/43E9877AB1340A514C1042D56269C61EA9E7A261.mft
Manifest number:          0F
Signing time:             Sun 14 Apr 2024 11:01:22 +0000
Manifest this update:     Sun 14 Apr 2024 10:56:22 +0000
Manifest next update:     Mon 15 Apr 2024 13:54:22 +0000
Files and hashes:         1: 34352e3138322e37362e302f32322d3332203d3e20323639323334.roa (hash: 0XOgCNRZtz5mQNhn7J6EgsPpTowO1s06QgATr3os6xA=)
                          2: 323830343a363137303a3a2f33322d313238203d3e20323639323334.roa (hash: eKIncQ7VJhvmVLseKtQMyobGkZ7Z0eyn/1luzZCIftM=)
                          3: 43E9877AB1340A514C1042D56269C61EA9E7A261.crl (hash: TR+jjhJPm2Alj8uVcsuvDUkRa3YrW7zltMxvaz7xI40=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1b:3d:7b:42:ee:1a:46:79:e8:d6:76:00:f6:4c:8e:cd:a0:8c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43E9877AB1340A514C1042D56269C61EA9E7A261
        Validity
            Not Before: Apr 14 10:56:22 2024 GMT
            Not After : Apr 15 13:54:22 2024 GMT
        Subject: CN=046201ACA0CD2C73384C09BAF12D8370F61BC998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:b4:d9:09:8d:c1:c5:f1:24:dd:b5:f7:58:
                    fd:ca:b2:86:21:cb:fa:ee:61:a2:92:f5:f6:ee:1d:
                    bd:41:72:58:00:31:96:3d:30:a3:7d:b2:6e:a8:f1:
                    2b:7f:ea:40:59:a7:18:1e:97:cc:f8:70:d1:fa:1b:
                    2a:3e:1d:05:37:ed:e8:ab:5e:ce:b6:c0:52:b0:f6:
                    e6:1b:9c:09:ee:28:04:e2:5b:14:67:f2:3c:15:c3:
                    28:19:db:e8:b6:cc:a3:6d:c9:ea:a8:bb:12:b3:7a:
                    2a:6c:63:79:3c:dc:76:a6:de:8d:c0:bc:8f:54:35:
                    5d:10:b1:50:0c:94:d2:ee:a9:19:5c:33:29:7c:29:
                    52:c6:35:bb:16:cc:f7:f6:f8:9e:63:f0:85:80:85:
                    9a:47:81:c7:87:0b:18:eb:fe:41:08:5b:0b:7b:5a:
                    0e:be:49:c8:e0:d3:52:cc:fc:fd:99:1d:bd:38:66:
                    7e:c3:39:96:fb:01:b7:96:2b:02:1a:e5:6c:67:70:
                    53:e7:42:24:0d:cc:fc:86:13:3d:6a:83:5d:77:76:
                    0f:45:22:bd:b4:52:c9:a0:03:e3:ac:7a:fe:6a:08:
                    0d:ca:07:c9:5f:ff:55:69:72:54:90:43:f0:0c:9e:
                    92:1c:03:03:36:5a:0f:a3:2d:2c:7e:c5:9f:61:a1:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:62:01:AC:A0:CD:2C:73:38:4C:09:BA:F1:2D:83:70:F6:1B:C9:98
            X509v3 Authority Key Identifier:
                keyid:43:E9:87:7A:B1:34:0A:51:4C:10:42:D5:62:69:C6:1E:A9:E7:A2:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/1/43E9877AB1340A514C1042D56269C61EA9E7A261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43E9877AB1340A514C1042D56269C61EA9E7A261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/1/43E9877AB1340A514C1042D56269C61EA9E7A261.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:59:28:b5:95:57:cf:e0:32:94:3e:05:df:c7:da:92:04:
         aa:44:5b:22:70:66:11:00:71:65:75:43:f3:94:5e:e6:98:9c:
         c8:48:dd:f1:79:a5:67:7c:50:8f:39:dc:35:07:dd:7d:1b:dc:
         a3:d3:de:e7:79:ec:99:2a:80:fa:a5:b9:2c:0a:d3:50:5e:b8:
         5b:1c:22:9c:61:f2:d2:67:b1:9f:f3:45:ec:26:ef:3c:b9:7e:
         fa:ba:4f:8d:9a:79:ee:bb:70:cc:29:9c:a6:31:14:f7:c8:97:
         ec:06:f5:65:5a:d5:c0:ee:68:98:fd:52:2b:b9:17:d4:62:62:
         38:79:86:63:f5:eb:c0:9c:39:f6:c9:cf:e6:60:b1:8d:c8:3b:
         af:53:f6:85:b1:26:5a:c1:92:82:8f:01:4a:85:4e:27:6c:7f:
         ac:1a:1c:3b:89:a5:e8:54:2f:5b:61:48:04:89:c1:c1:ee:d9:
         46:a8:8a:8b:85:24:82:fa:5b:e5:4f:0a:2f:8f:ae:36:73:f1:
         42:48:eb:71:e4:a5:a9:94:94:0c:40:0e:09:f0:88:7f:d2:aa:
         32:16:3a:4a:51:13:40:42:74:a8:04:d8:3e:c9:39:86:7f:52:
         66:94:6a:c1:ad:c1:95:e3:5c:15:24:d5:b0:65:87:83:e0:c0:
         54:d7:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:35:28 2025 by rpki-client