Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.mft
File:                     2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.mft (raw, json)
Hash identifier:          Uy46IUBPRXIy9Tih+FyhEZhWEPlI9if0QDoaFdiaenE=
Subject key identifier:   27:C9:1B:D8:BC:D3:66:AD:91:47:56:6E:E9:47:C4:69:F2:58:80:3F
Authority key identifier: 2B:7D:84:C8:70:AF:A4:34:D8:F9:50:E0:A3:52:1C:F2:6C:D0:C7:F7
Certificate issuer:       /CN=2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7
Certificate serial:       11AD7C794E841771BAB66F30D65CB71DAE153C89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.mft
Manifest number:          0C
Signing time:             Wed 25 Jun 2025 21:24:28 +0000
Manifest this update:     Wed 25 Jun 2025 21:19:28 +0000
Manifest next update:     Thu 26 Jun 2025 21:37:28 +0000
Files and hashes:         1: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: rHUZ84FOxT3DR8FYd4VWICvioNgnOw12/eB7cnls5JM=)
                          2: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: QkRFz+EJ7Di8wiNcIVxpFYipSkfzyx6GfVfdHh3iGwc=)
                          3: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: HeS/vP/k8O3myjd8c7unQq5+FYRTZTDm5myrFJ3AvyM=)
                          4: 2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.crl (hash: ANjqjbovGQ1FJkASrIYVn6ck495rDiEldpr3uoFTAH4=)
                          5: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: 2Ktknv2M8Cece++XyEudfMQJ/ULC2gdDI5GxcLUugSU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ad:7c:79:4e:84:17:71:ba:b6:6f:30:d6:5c:b7:1d:ae:15:3c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7
        Validity
            Not Before: Jun 25 21:19:28 2025 GMT
            Not After : Jun 26 21:37:28 2025 GMT
        Subject: CN=27C91BD8BCD366AD9147566EE947C469F258803F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:f9:6e:7e:37:47:c3:88:df:25:0b:cf:91:
                    54:0c:6d:68:1d:45:38:d1:07:13:29:54:1b:68:d4:
                    e7:e4:2d:c5:bf:fd:ad:d6:63:1c:b9:3c:df:fa:fe:
                    3a:0b:44:c3:82:73:2b:02:91:81:ef:59:7f:31:2d:
                    4b:6d:6f:c4:a5:41:f3:58:ab:e3:83:c4:bd:22:76:
                    a6:35:d9:be:9c:9f:f9:61:29:6d:b7:ab:57:52:7e:
                    cc:0f:7d:16:f6:9c:74:11:80:dc:4b:12:fe:5d:61:
                    64:f7:78:6a:dc:c1:a9:74:e8:0c:4a:38:15:ce:52:
                    77:76:e1:89:06:26:1b:1a:ad:5a:53:f5:00:ad:87:
                    65:5a:e6:6d:d9:89:dd:a8:01:8b:9a:32:1d:8f:2b:
                    ee:e9:b0:31:c2:53:1c:58:f2:b6:d8:a2:3a:63:81:
                    31:18:b7:0b:7e:75:e3:29:da:5a:d3:5b:2f:99:0c:
                    47:a5:47:90:cc:e6:79:f9:b1:f7:99:88:20:8d:05:
                    b2:74:65:3f:5e:e3:e3:c0:e1:d5:5c:51:11:20:96:
                    dd:dd:33:4b:17:18:f6:a3:4b:35:b3:a3:de:0b:b8:
                    18:e7:1b:11:6e:a9:ab:29:0c:b6:e6:d2:8b:54:48:
                    eb:ec:64:d4:91:f2:2c:f4:90:0e:2c:89:c6:c3:50:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C9:1B:D8:BC:D3:66:AD:91:47:56:6E:E9:47:C4:69:F2:58:80:3F
            X509v3 Authority Key Identifier:
                keyid:2B:7D:84:C8:70:AF:A4:34:D8:F9:50:E0:A3:52:1C:F2:6C:D0:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:3c:52:ff:32:9a:0a:84:28:99:ea:ee:ef:49:f4:47:6c:
         db:0c:6a:4c:19:2b:f0:4c:4f:00:13:f4:a9:ee:8e:66:71:dd:
         03:49:2c:b4:ca:3c:c2:93:84:df:70:f4:c0:8d:88:ef:4f:80:
         7d:4f:c5:c3:86:5e:11:63:61:88:88:ba:65:65:a4:ca:ca:5b:
         71:3b:81:89:e1:84:f7:ff:89:e8:d8:ef:d3:ec:d5:2f:03:1b:
         97:e3:57:e1:a9:fe:93:fd:65:d1:cb:04:85:59:40:fb:1c:b6:
         2b:3c:df:d4:f1:bc:3a:fe:89:d8:00:75:9b:49:46:35:4e:90:
         3d:f8:84:ff:76:77:16:ea:6e:e0:f0:67:71:c2:33:f3:e6:5f:
         9c:be:7e:85:a6:bd:85:2d:bd:8c:04:59:f4:13:56:6d:a1:a9:
         9d:46:df:fb:9e:45:e7:18:99:85:36:53:43:2c:a9:cd:30:06:
         42:58:99:3e:b4:1e:7f:cb:0c:29:47:2c:34:19:82:87:d0:18:
         39:08:d8:8b:29:20:b3:51:67:60:7f:d3:69:cd:76:9f:9c:53:
         89:fb:47:a1:94:89:2d:13:0a:97:57:93:a4:08:06:20:c3:d1:
         ca:c0:eb:ee:38:17:ce:68:19:96:43:64:44:03:80:9b:8e:40:
         0d:e9:d5:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEa18eU6EF3G6tm8w1ly3Ha4VPIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3RDg0Qzg3MEFGQTQzNEQ4Rjk1MEUwQTM1MjFDRjI2
Q0QwQzdGNzAeFw0yNTA2MjUyMTE5MjhaFw0yNTA2MjYyMTM3MjhaMDMxMTAvBgNV
BAMTKDI3QzkxQkQ4QkNEMzY2QUQ5MTQ3NTY2RUU5NDdDNDY5RjI1ODgwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcz/lufjdHw4jfJQvPkVQMbWgd
RTjRBxMpVBto1OfkLcW//a3WYxy5PN/6/joLRMOCcysCkYHvWX8xLUttb8SlQfNY
q+ODxL0idqY12b6cn/lhKW23q1dSfswPfRb2nHQRgNxLEv5dYWT3eGrcwal06AxK
OBXOUnd24YkGJhsarVpT9QCth2Va5m3Zid2oAYuaMh2PK+7psDHCUxxY8rbYojpj
gTEYtwt+deMp2lrTWy+ZDEelR5DM5nn5sfeZiCCNBbJ0ZT9e4+PA4dVcUREglt3d
M0sXGPajSzWzo94LuBjnGxFuqaspDLbm0otUSOvsZNSR8iz0kA4sicbDUOyzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJ8kb2LzTZq2RR1Zu6UfEafJYgD8wHwYDVR0j
BBgwFoAUK32EyHCvpDTY+VDgo1Ic8mzQx/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZpa0s2S0V6UzdWbldQQUpuVXBqb0RycmJXZjRrOWdKTlI5VDFUbndu
SnkvMC8yQjdEODRDODcwQUZBNDM0RDhGOTUwRTBBMzUyMUNGMjZDRDBDN0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCN0Q4NEM4NzBBRkE0MzRE
OEY5NTBFMEEzNTIxQ0YyNkNEMEM3RjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWZpa0s2S0V6UzdWbldQQUpuVXBqb0RycmJXZjRrOWdKTlI5VDFUbnduSnkvMC8y
QjdEODRDODcwQUZBNDM0RDhGOTUwRTBBMzUyMUNGMjZDRDBDN0Y3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWqg8Uv8ymgqEKJnq7u9J9Eds2wxqTBkr8ExPABP0qe6OZnHdA0kstMo8wpOE
33D0wI2I70+AfU/Fw4ZeEWNhiIi6ZWWkyspbcTuBieGE9/+J6Njv0+zVLwMbl+NX
4an+k/1l0csEhVlA+xy2Kzzf1PG8Ov6J2AB1m0lGNU6QPfiE/3Z3Fupu4PBnccIz
8+ZfnL5+haa9hS29jARZ9BNWbaGpnUbf+55F5xiZhTZTQyypzTAGQliZPrQef8sM
KUcsNBmCh9AYOQjYiykgs1FnYH/Tac12n5xTiftHoZSJLRMKl1eTpAgGIMPRysDr
7jgXzmgZlkNkRAOAm45ADenVPw==
-----END CERTIFICATE-----