Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
File:                     65E1DB5984802637A5800225A87C14E97A15601B.mft (raw, json)
Hash identifier:          8a48CsqrNNHT5B+X5ZNYx620vB7yLb/TjvemK25kPDY=
Subject key identifier:   1C:BB:D2:CD:83:22:35:56:3E:D1:9A:0D:91:CD:BE:FB:76:1F:38:BD
Authority key identifier: 65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B
Certificate issuer:       /CN=65E1DB5984802637A5800225A87C14E97A15601B
Certificate serial:       1C0925B650DFB8C020E648957BFB6E0A736FDFCB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft
Manifest number:          01DC
Signing time:             Fri 28 Mar 2025 19:20:51 +0000
Manifest this update:     Fri 28 Mar 2025 19:15:51 +0000
Manifest next update:     Sat 29 Mar 2025 23:07:51 +0000
Files and hashes:         1: 65E1DB5984802637A5800225A87C14E97A15601B.crl (hash: XfiDZhwCzkjKpa9Q5KKlIFWKJ8BCh5J5tXTRgNbsGpw=)
                          2: 3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (hash: ShAk2PRu0Kb2SbPYZuCN7aU2BdYoejKW5JwXhyYwMXY=)
                          3: 323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (hash: bCn9xgpXtcv+qtC13ntqSjSGV3eAZT+HCFzuTiPVVTY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:25:b6:50:df:b8:c0:20:e6:48:95:7b:fb:6e:0a:73:6f:df:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E1DB5984802637A5800225A87C14E97A15601B
        Validity
            Not Before: Mar 28 19:15:51 2025 GMT
            Not After : Mar 29 23:07:51 2025 GMT
        Subject: CN=1CBBD2CD832235563ED19A0D91CDBEFB761F38BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:a2:3d:db:c8:9d:6a:23:5e:0b:a0:1e:0d:
                    44:f6:5b:6f:24:b7:55:49:f2:b2:5a:a3:d3:21:a3:
                    79:4d:4d:2d:dc:88:fd:55:1a:66:2b:0f:aa:f7:10:
                    ef:7d:f7:57:78:32:4b:be:c8:fc:cb:6b:87:13:a5:
                    b2:8e:ec:cd:3b:c4:79:d8:12:3c:58:f9:dd:98:33:
                    a7:71:89:03:55:e7:1a:cc:76:8f:80:92:2a:6c:f6:
                    a3:4b:7b:15:26:a1:38:8d:51:96:93:d6:12:25:e5:
                    d4:a0:11:70:68:7d:2e:b7:8e:6b:2e:d7:21:43:40:
                    5a:12:96:17:a1:05:78:af:fb:a7:32:4c:9a:e7:5a:
                    58:e6:9d:ee:5b:00:77:d2:73:3a:00:e2:ef:47:22:
                    bd:2b:8d:53:39:f7:17:3d:52:dc:e6:21:1b:6e:b5:
                    0a:16:f2:0d:a4:a4:61:f6:bf:3b:e1:bb:97:0f:9a:
                    76:84:f5:68:a6:63:a4:14:c3:c3:a8:3f:6e:01:dc:
                    44:4a:fb:a0:da:e1:52:bb:fd:35:a9:7a:f9:5b:05:
                    ce:ea:28:b4:13:cf:df:9e:c1:00:c8:e6:8b:37:4a:
                    f2:d1:5f:c0:30:6f:41:9a:db:a5:19:04:9c:09:60:
                    fd:3d:55:07:bd:28:d4:8b:f3:59:19:90:f8:8a:a7:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:D2:CD:83:22:35:56:3E:D1:9A:0D:91:CD:BE:FB:76:1F:38:BD
            X509v3 Authority Key Identifier:
                keyid:65:E1:DB:59:84:80:26:37:A5:80:02:25:A8:7C:14:E9:7A:15:60:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65E1DB5984802637A5800225A87C14E97A15601B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/1/65E1DB5984802637A5800225A87C14E97A15601B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:7e:2a:53:5a:f1:f3:73:00:e0:46:ff:1b:33:8e:ac:60:
         7d:55:24:f6:2e:35:3e:0f:78:8b:be:9f:6d:23:99:9b:00:83:
         b1:c7:23:d7:24:89:88:4d:c7:2a:11:cc:38:a9:56:8d:bf:25:
         d4:fc:6c:81:29:39:9a:0e:22:f7:34:0d:ca:54:94:a2:5d:99:
         a4:a1:ed:8e:09:e3:1b:75:79:66:56:a1:a5:b0:10:78:ad:4e:
         eb:bb:e1:3d:33:d7:0f:6e:dc:1f:e2:35:58:21:ad:b7:c4:2c:
         03:51:d0:00:27:41:24:a9:d0:75:c3:53:b7:9f:1f:f4:0b:26:
         02:8c:f4:cb:c3:9b:e5:13:b2:24:51:96:24:92:3d:6e:77:6f:
         87:33:c8:cc:e8:b1:85:7d:74:2a:24:39:3f:cf:86:f8:2d:68:
         b9:e6:2c:6a:b1:8d:97:11:fa:2d:ae:6d:e9:c3:b2:04:6b:b6:
         8d:ae:86:44:6f:5b:e8:7b:5c:e2:7d:f1:4d:04:99:9d:05:d0:
         0e:81:6f:d6:80:c3:0c:04:e9:ff:47:da:6a:3b:a7:9f:86:ef:
         55:68:40:78:85:3b:0e:a1:6a:ea:cc:13:30:f8:cf:86:cd:1d:
         63:e8:07:ae:8d:4d:a0:b0:c6:df:48:0a:66:5c:88:78:a0:e2:
         5e:3f:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:02:12 2025 by rpki-client