Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
File:                     0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft (raw, json)
Hash identifier:          lhyWM8hdGl+KEqXWR+YUq9wzlzjYR5UoKngvKOeAqIk=
Subject key identifier:   40:DD:CF:C1:64:CC:35:16:84:A0:8A:13:64:13:F9:FE:57:77:CF:2D
Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Certificate issuer:       /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Certificate serial:       5DFE08A7CF6144D33EB793C128468EDDB5E80898
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
Manifest number:          01E1
Signing time:             Sat 29 Mar 2025 02:10:00 +0000
Manifest this update:     Sat 29 Mar 2025 02:05:00 +0000
Manifest next update:     Sun 30 Mar 2025 04:22:00 +0000
Files and hashes:         1: 323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (hash: 167TAhQ7lnokCwZJ17z+elqNb77//spNjl5BM+cfjNE=)
                          2: 3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (hash: l2/Sv84SLBOQbVtP6hTCl4W6EbhRtHHLXjQeVhOAW8U=)
                          3: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl (hash: 5EVT5f0f6RS5Nd76oqMh268aRANgqpe+fZdJ6hG+vu0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fe:08:a7:cf:61:44:d3:3e:b7:93:c1:28:46:8e:dd:b5:e8:08:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
        Validity
            Not Before: Mar 29 02:05:00 2025 GMT
            Not After : Mar 30 04:22:00 2025 GMT
        Subject: CN=40DDCFC164CC351684A08A136413F9FE5777CF2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:8f:57:a6:05:1f:62:45:1d:3a:97:ee:4f:
                    04:0e:89:6b:f7:88:4c:4e:e8:27:34:37:09:ca:18:
                    c1:5c:5a:a3:e5:de:74:04:5f:29:2c:ee:c3:1a:03:
                    33:3d:c3:68:df:54:8c:1e:60:89:b4:5c:12:b4:b5:
                    8e:68:e1:4c:55:d3:63:f2:b4:f2:13:18:64:d2:6d:
                    1d:a1:ec:02:9d:6e:d1:aa:48:3b:54:de:19:50:90:
                    50:03:19:67:be:e2:a7:ff:62:54:d6:2f:99:92:86:
                    36:27:1e:e4:58:4f:7b:3a:ff:3f:a2:1f:6f:00:c8:
                    25:f4:4c:2c:38:85:4e:2a:a3:93:65:01:b9:33:a4:
                    66:a9:17:59:25:23:fd:a3:c8:16:95:52:c0:29:1e:
                    73:9e:71:ec:8d:ed:a9:d6:04:29:ed:29:e8:6d:7b:
                    2d:4c:b2:f6:93:2d:60:0a:2e:db:35:d5:1e:4c:9e:
                    c1:5b:ff:13:ba:c1:b4:57:a2:7f:7e:7d:f1:69:79:
                    03:a8:3b:58:52:c6:e4:2b:81:d7:d2:1b:5b:42:5c:
                    4d:db:a5:df:fd:46:2c:22:39:32:bb:f4:ec:51:b4:
                    1c:a3:56:89:b6:92:0d:34:4d:9a:05:c0:70:03:56:
                    6e:bf:21:20:5e:3c:d7:fa:74:21:f5:cb:84:f5:c3:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DD:CF:C1:64:CC:35:16:84:A0:8A:13:64:13:F9:FE:57:77:CF:2D
            X509v3 Authority Key Identifier:
                keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:89:44:df:44:41:85:80:ef:22:00:5e:37:9d:45:98:f7:
         0d:c9:c9:6f:54:c0:85:7c:e3:f2:b5:69:49:8a:69:b3:a4:22:
         72:78:27:bc:c9:fe:15:bb:9d:cf:d8:0d:c8:bb:b6:4c:e7:e8:
         01:b8:f8:4c:82:06:29:d8:b1:f0:ff:51:f1:6c:86:c5:16:4e:
         b0:19:d4:52:24:35:c4:0b:50:71:80:a8:eb:f8:ca:ee:a6:16:
         8c:49:23:ba:71:95:45:8b:68:99:0d:0b:24:13:fe:53:6a:2c:
         07:d5:89:4d:8b:e5:04:72:0d:09:40:51:f4:77:89:ce:ce:f7:
         00:84:c1:eb:9e:09:2f:16:b5:6b:37:e5:34:f9:a6:2f:b7:44:
         75:96:1d:bf:90:1f:fb:d9:bd:94:db:97:7a:3a:f7:13:cf:1e:
         a0:49:26:3a:32:02:a3:33:7b:0f:05:8c:18:94:5d:04:eb:a9:
         26:dc:45:ae:15:f7:69:e5:69:c6:50:23:a6:71:cd:5d:a4:46:
         5b:11:96:ef:96:ed:c9:d2:1d:67:e2:4d:a6:ae:4c:a6:00:4c:
         73:3f:33:bc:aa:0b:c5:c4:4a:6d:2b:c7:62:11:32:53:2c:47:
         a8:4f:5f:1b:b4:61:69:56:e4:7d:3b:04:46:6d:54:0e:9a:56:
         fa:d3:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----