Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
File:                     DB87B78475D3067687137BE8069FFB8CBC613CAF.mft (raw, json)
Hash identifier:          nQa4C992IEQNVHN2X/0qFHO3rWdsHnjHS5SmgimQiiI=
Subject key identifier:   44:6C:09:D4:86:18:DB:88:D2:CA:99:10:D2:35:3A:16:65:42:71:26
Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
Certificate issuer:       /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Certificate serial:       33AB4DA2B31001EA1622E2A4FE50930F29D97438
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
Manifest number:          01E0
Signing time:             Fri 28 Mar 2025 20:09:02 +0000
Manifest this update:     Fri 28 Mar 2025 20:04:02 +0000
Manifest next update:     Sat 29 Mar 2025 22:29:02 +0000
Files and hashes:         1: DB87B78475D3067687137BE8069FFB8CBC613CAF.crl (hash: KZEHeJgT9RCSANGntjs51j80tPCIoQpcfeB8mfdJZ9E=)
                          2: 3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (hash: 4Jqjhfm8UELWTGuiuZ4hZgYSLa1cKWN0n4f8z7pkohI=)
                          3: 323830343a376663383a3a2f33322d3332203d3e20323731373039.roa (hash: zsQhMCE2rF1VO32MT/KDA+4cVlXckYhvlXLp+ghtzdc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ab:4d:a2:b3:10:01:ea:16:22:e2:a4:fe:50:93:0f:29:d9:74:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
        Validity
            Not Before: Mar 28 20:04:02 2025 GMT
            Not After : Mar 29 22:29:02 2025 GMT
        Subject: CN=446C09D48618DB88D2CA9910D2353A1665427126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:b2:22:4b:22:6f:99:6f:f5:70:f6:7e:64:
                    7d:14:f1:cd:f8:2d:15:f6:f3:a3:13:1d:5d:12:af:
                    90:f5:21:9b:76:77:cb:b4:37:2e:3e:36:59:06:a9:
                    80:83:d1:f3:35:7b:91:a8:9e:7b:df:64:8c:e1:1b:
                    c9:e7:86:7e:9d:cb:23:0f:15:36:9a:60:84:5c:57:
                    74:b0:f5:ff:ea:b0:1d:62:39:36:e3:df:1f:c2:57:
                    07:5e:3d:ef:c2:9f:f4:75:92:e6:56:d0:e7:81:92:
                    85:05:f4:48:8c:c4:b5:a2:98:c1:fc:0a:49:e9:89:
                    52:57:67:ac:62:46:7f:a7:57:c8:51:80:f9:fc:0c:
                    7f:8d:1c:00:f4:66:d2:26:c3:83:38:49:55:86:fe:
                    3b:0c:7e:93:c9:6a:d1:e8:30:19:80:e8:50:b7:3e:
                    0c:1b:64:fc:d3:ba:3e:82:a3:24:cf:73:15:17:fa:
                    94:fc:1f:cb:d7:97:8c:53:be:86:04:2f:66:0a:cd:
                    40:e1:92:ea:0a:16:0c:32:9e:f4:3d:5b:26:01:ae:
                    81:43:d7:ea:ea:9f:0b:57:8e:5d:ef:4b:77:d0:6f:
                    01:1b:d6:26:19:08:c9:e1:ca:19:af:91:84:f2:a1:
                    07:23:23:e0:69:79:20:9d:f8:35:e2:a8:91:52:35:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6C:09:D4:86:18:DB:88:D2:CA:99:10:D2:35:3A:16:65:42:71:26
            X509v3 Authority Key Identifier:
                keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b5:9f:d7:fd:59:4f:5b:21:98:da:85:96:f9:36:68:c0:ec:
         82:1d:be:63:f3:8a:e9:a7:82:cd:6c:63:47:5a:b2:7f:e6:cc:
         b6:48:65:b0:02:10:8e:6f:68:8a:4e:cb:d2:d0:07:84:ef:a0:
         74:c9:ad:f8:05:ce:cb:46:d0:e4:79:17:e7:70:8c:a3:32:62:
         6a:b5:ff:06:18:dc:9f:66:7c:6f:01:48:05:1a:da:f7:cf:ce:
         4d:0a:e3:8f:39:24:e3:29:5d:db:26:8e:b3:e4:6b:72:5f:46:
         b9:9e:4e:3a:6f:75:d1:fe:be:b4:c2:17:96:11:8a:9c:aa:1e:
         83:88:48:75:e7:24:c1:b5:91:7e:c4:02:0c:d6:1f:4b:7a:23:
         47:4e:dc:31:7f:9e:c0:18:fd:e5:51:48:a3:1e:45:9a:1c:0c:
         e7:ff:3b:19:03:79:44:4c:45:8b:66:f5:80:16:32:26:d1:57:
         f6:5e:bd:3a:bd:c4:57:5a:80:e1:c2:5f:17:7d:b5:a9:80:36:
         56:48:26:72:3a:52:4f:5d:ed:0e:19:0f:72:1f:25:4e:70:81:
         6e:28:a4:12:b2:f9:47:e8:80:25:55:cf:0f:f5:09:04:cb:53:
         1b:2e:e1:76:75:9d:e0:4c:30:fe:fa:ee:8d:d3:ab:68:d3:d4:
         51:b6:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:16 2025 by rpki-client