Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft
File:                     AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft (raw, json)
Hash identifier:          dkpP6zlQzTsgcWfrFLQA1Rzgy3idIcmbbf/ZcVTaEpw=
Subject key identifier:   73:5F:20:18:9C:FC:C8:D5:FB:A9:03:FD:A7:E8:CB:66:AA:BE:75:D4
Authority key identifier: AF:2F:E0:67:9E:3D:F8:72:1A:DE:EA:98:24:3A:B2:7A:45:65:F9:F5
Certificate issuer:       /CN=AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5
Certificate serial:       0830FC8DFC242DD3AA4B7C5A09BC0399075E40BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft
Manifest number:          59
Signing time:             Sat 29 Mar 2025 04:39:08 +0000
Manifest this update:     Sat 29 Mar 2025 04:34:08 +0000
Manifest next update:     Sun 30 Mar 2025 08:10:08 +0000
Files and hashes:         1: 323830343a376463303a3a2f33322d3438203d3e20323731353830.roa (hash: hhHC3fyK9OQR54I1vSpWTIzNk5Hly0Qdl/wJaEy5px0=)
                          2: AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.crl (hash: +w5bt/Zd0+KDWopB2VsSHAddtkHwd0zgveyPDA2MKSg=)
                          3: 3137392e36332e36302e302f32322d3234203d3e20323731353830.roa (hash: +UtciwWJPEPmd2VjglsTPpItmTUt1SjnPlUoBRj7I30=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:30:fc:8d:fc:24:2d:d3:aa:4b:7c:5a:09:bc:03:99:07:5e:40:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5
        Validity
            Not Before: Mar 29 04:34:08 2025 GMT
            Not After : Mar 30 08:10:08 2025 GMT
        Subject: CN=735F20189CFCC8D5FBA903FDA7E8CB66AABE75D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:a8:54:51:0e:da:46:a7:c3:89:2b:ac:f8:
                    51:dc:66:05:3f:e4:59:33:f6:7c:f1:58:56:e7:2e:
                    41:1a:23:f5:84:fe:39:b2:63:02:21:4a:03:e5:90:
                    0f:c4:7f:16:98:79:f8:06:94:af:7c:ce:81:ee:b9:
                    82:3a:4b:35:e3:ec:f8:e4:68:b6:5b:4b:4c:11:f0:
                    3b:62:fe:da:65:69:87:08:e8:3a:88:85:e0:12:d1:
                    88:7b:7d:d8:57:49:bd:ae:a8:5d:b7:57:2b:96:de:
                    60:87:17:00:3a:d4:d6:5f:a5:d1:6a:31:76:98:1b:
                    d8:9b:52:f6:0d:e7:4f:e9:a4:6c:b4:a2:e0:0a:2a:
                    3a:c2:cc:73:e1:6a:9e:64:79:d3:4f:3c:7e:b0:eb:
                    71:a3:ae:9a:3e:4e:3b:70:bb:71:78:b7:95:62:4b:
                    19:e6:b4:fe:8a:b3:84:7d:ba:d6:55:1d:05:97:e5:
                    d4:a0:58:10:2b:73:43:cc:06:2f:82:2f:49:eb:c8:
                    c9:99:81:e8:85:80:89:03:08:cc:1c:a6:b7:79:b6:
                    d6:ae:f6:90:d9:cd:fc:21:ac:d4:e7:8c:7a:3d:49:
                    4c:89:61:8d:1a:cd:48:07:b5:bc:97:20:52:65:49:
                    6e:8c:ed:b6:9a:4e:3a:e7:7e:6d:4e:5a:8a:3b:3e:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:20:18:9C:FC:C8:D5:FB:A9:03:FD:A7:E8:CB:66:AA:BE:75:D4
            X509v3 Authority Key Identifier:
                keyid:AF:2F:E0:67:9E:3D:F8:72:1A:DE:EA:98:24:3A:B2:7A:45:65:F9:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:84:6e:16:55:0d:3d:0e:09:7f:47:c0:41:cd:6b:c8:41:
         6a:5e:66:af:52:7d:da:4c:fd:47:62:c1:f1:2b:46:47:b7:a8:
         d2:64:75:ae:a1:33:22:c3:f1:a5:ac:4d:73:b3:e4:d4:f5:a3:
         84:65:dc:41:c9:c3:e0:7b:61:69:ca:74:de:17:64:bf:17:ed:
         6d:23:6c:1f:bb:4d:48:1f:cf:5f:09:7a:cd:6d:a3:05:27:a6:
         ff:a6:a1:fc:d3:ca:b9:ad:46:30:4c:b8:f1:6c:38:e4:1f:20:
         f1:c9:a7:50:fd:5d:e5:45:54:0a:60:c4:b3:44:a1:9c:1d:8b:
         b1:1a:e2:f0:b3:86:14:a0:8a:2c:05:d3:54:d3:74:27:0b:ac:
         51:06:a3:de:db:0a:58:bf:a1:56:17:ee:33:d1:a5:b3:76:97:
         9e:36:91:45:9c:91:ab:bd:13:8f:e4:2a:d1:86:b5:ad:a9:ef:
         ea:85:c1:71:4f:8c:b0:fc:97:b8:98:b4:45:62:e5:c8:53:6f:
         90:17:cb:6e:42:eb:44:f2:06:10:2f:87:71:80:77:24:58:75:
         ef:d5:ef:f4:ed:70:d1:51:f4:49:40:d5:51:fb:0a:37:35:3f:
         cc:ff:e7:73:00:6f:47:82:1b:e9:90:58:c0:77:e7:56:54:db:
         aa:90:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:31:06 2025 by rpki-client