Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
File:                     0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft (raw, json)
Hash identifier:          bFh1Axg30AUzYURMQCXFcQhhukkhfDwK8B7U1l+Pj+4=
Subject key identifier:   A2:D8:C5:F0:E3:D0:D4:53:E2:EC:71:7C:14:DE:AA:03:CB:16:A4:23
Authority key identifier: 0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
Certificate issuer:       /CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
Certificate serial:       2306D3C8ADE544C27024FD35E536E9D277EB3E31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
Manifest number:          01D1
Signing time:             Thu 27 Mar 2025 18:27:01 +0000
Manifest this update:     Thu 27 Mar 2025 18:22:01 +0000
Manifest next update:     Fri 28 Mar 2025 21:47:01 +0000
Files and hashes:         1: 3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (hash: 6uBURlMrdus0mkp1IuAZceoy3FyFOWBmQVhn7VL0dls=)
                          2: 0BFDC3A598A7E4C26811166F6E8FA25023A020F3.crl (hash: XTIDE68MWc1C6grrAXfzR/UvWENz6mtPTmgrAk/Wups=)
                          3: 323830313a61343a3a2f33322d3335203d3e20323632373432.roa (hash: r+jqCzp6hpubJr2YuUfHoic46U41xT5X5YHloJjjn7I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:06:d3:c8:ad:e5:44:c2:70:24:fd:35:e5:36:e9:d2:77:eb:3e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
        Validity
            Not Before: Mar 27 18:22:01 2025 GMT
            Not After : Mar 28 21:47:01 2025 GMT
        Subject: CN=A2D8C5F0E3D0D453E2EC717C14DEAA03CB16A423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:5a:18:c1:30:de:ee:2f:4d:d6:e9:29:be:
                    6a:78:2b:34:a2:7e:6f:d1:7c:7e:9b:2a:0a:8d:6d:
                    57:1c:01:02:71:aa:62:70:7c:1b:b0:19:a0:93:46:
                    7a:fe:f9:c4:54:a6:b2:46:0c:32:2a:6d:93:a3:d8:
                    4b:2d:5a:c4:ba:be:10:d8:cc:28:b7:21:52:86:fc:
                    17:6b:32:22:7b:8f:b5:69:8b:a8:3b:a8:03:b5:3b:
                    8f:b8:d3:fd:9f:24:a6:94:87:e6:4d:6d:54:9a:be:
                    6b:47:0a:ed:ff:4e:37:fc:58:d3:00:71:7d:70:93:
                    85:bd:49:5d:11:82:73:ce:03:02:55:08:48:25:5a:
                    56:2d:e5:4c:c0:68:b7:02:f7:0d:58:a8:85:52:8d:
                    e0:04:a2:63:1d:81:7a:a5:7d:82:7e:6a:c7:b3:c8:
                    dd:b2:51:59:13:81:c1:2d:76:e1:54:32:b5:98:31:
                    a6:e3:ea:4e:fb:bf:be:2a:d1:11:32:bd:f4:19:48:
                    6a:09:b1:38:25:9c:7d:85:41:1a:a6:81:ac:f7:c4:
                    2b:0b:0b:bb:25:d5:21:00:7f:5d:9f:6b:9f:31:81:
                    bf:f6:35:10:89:8b:9d:2e:8d:4a:b3:d5:c5:64:cd:
                    a0:60:0c:f3:51:f0:66:86:24:fb:b6:55:4d:a4:52:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D8:C5:F0:E3:D0:D4:53:E2:EC:71:7C:14:DE:AA:03:CB:16:A4:23
            X509v3 Authority Key Identifier:
                keyid:0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:63:2f:49:a3:bc:72:cf:41:9f:1a:f5:eb:88:9d:8e:c5:
         25:65:6a:c7:2c:55:25:d5:68:44:93:44:26:11:a9:53:84:6c:
         e4:50:40:b3:d5:a8:52:b9:dd:9f:97:cb:eb:41:83:5f:40:d8:
         b9:15:c3:30:62:19:2d:72:98:54:2d:12:5f:94:d0:ff:00:47:
         87:2d:76:3c:6a:ef:3c:8c:b3:06:3a:ff:b7:a4:0d:33:b1:c3:
         1a:0b:f2:69:f5:57:c2:5e:cc:19:ce:a5:93:3c:8d:79:9c:50:
         5c:a4:dc:5b:6e:d4:ec:ad:02:ce:02:77:7a:e0:16:46:49:76:
         19:04:5e:08:c8:93:9b:53:7e:82:a4:56:88:f4:f0:1a:8d:00:
         69:6f:10:33:5a:50:79:d5:4c:b4:5b:69:c2:9e:42:54:aa:e9:
         4b:87:01:08:e3:77:b6:26:96:4b:c5:dc:80:de:17:5b:53:11:
         ac:95:e1:8d:4a:73:67:03:75:8b:84:f0:8e:07:b1:48:54:4e:
         29:53:cb:ca:2e:0b:87:60:43:7c:ee:0b:12:e1:50:87:23:88:
         e4:01:86:f1:25:6e:48:8e:02:85:df:8f:39:2e:8f:28:72:a5:
         36:e5:ba:17:9e:e3:71:af:92:d1:17:75:0b:6e:3a:13:28:37:
         a7:4f:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:55:25 2025 by rpki-client