Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft
File:                     B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft (raw, json)
Hash identifier:          MKgBHnxJs5xwo9sJFxaDSH7hFL1XIQeMWdhggTBSQBU=
Subject key identifier:   E1:01:36:4B:FC:DA:D9:43:75:8D:10:78:F8:1D:E0:01:D1:C9:23:EC
Authority key identifier: B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD
Certificate issuer:       /CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD
Certificate serial:       637AD1320F76007E0AC7EA6056E9330E02F8A50F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft
Manifest number:          91
Signing time:             Fri 28 Mar 2025 20:39:10 +0000
Manifest this update:     Fri 28 Mar 2025 20:34:10 +0000
Manifest next update:     Sat 29 Mar 2025 21:00:10 +0000
Files and hashes:         1: 3137372e3130352e36342e302f32302d3234203d3e20323632363337.roa (hash: CQB0pMvjsu0JQejxzWyA7AFkchjQbY+9fm2Gzu5OSuw=)
                          2: 323830343a3735633a3a2f33322d3438203d3e20323632363337.roa (hash: Ftk5zUW9PGUhuWcjjpH1k9AK4GPuJKDm/gU//7U8NGw=)
                          3: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl (hash: kA25bIb3kY7Q0a2KmhFVh/yXwbMMJ4OCZ7F62uMDA0k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7a:d1:32:0f:76:00:7e:0a:c7:ea:60:56:e9:33:0e:02:f8:a5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD
        Validity
            Not Before: Mar 28 20:34:10 2025 GMT
            Not After : Mar 29 21:00:10 2025 GMT
        Subject: CN=E101364BFCDAD943758D1078F81DE001D1C923EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:71:a9:f4:5c:05:26:42:d7:df:7a:7d:a6:
                    69:af:8d:4c:c3:53:89:ba:bb:01:6e:8c:8e:94:51:
                    9e:ca:50:f7:18:ad:3d:6a:ac:c0:aa:ee:db:68:87:
                    fc:2c:16:45:82:50:66:a6:83:7e:b9:ab:ed:fc:b6:
                    7e:c4:b1:64:4b:b2:38:d9:2b:4b:46:3b:b2:55:d7:
                    86:da:2d:cf:dd:55:98:2b:5f:b9:07:96:66:9b:57:
                    e8:ec:e2:27:2a:1d:b6:80:b4:1c:20:50:d4:e8:04:
                    bc:ec:c1:dd:b7:61:ca:f4:23:34:9e:57:1e:68:3a:
                    15:14:ce:02:4d:dc:01:3d:46:14:40:fd:a4:65:41:
                    6d:01:d3:5b:46:68:32:7a:94:49:c1:70:99:ca:d5:
                    e3:34:68:71:b7:07:d4:cb:5f:d2:1c:7e:2c:2d:88:
                    8e:c6:23:cd:48:f1:f1:26:da:78:e8:f4:d4:e2:c5:
                    f7:65:27:75:e2:e2:22:da:fd:d4:34:b3:4d:12:90:
                    ab:34:af:11:67:77:8b:96:dd:d7:d2:9b:e5:52:93:
                    49:4b:83:80:1b:7d:ba:ee:af:ad:3e:86:61:08:ea:
                    20:b8:e3:a9:c5:c4:8f:92:61:97:6e:8d:8f:34:eb:
                    a1:fe:33:90:cf:e0:89:26:c8:02:11:96:80:64:11:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:36:4B:FC:DA:D9:43:75:8D:10:78:F8:1D:E0:01:D1:C9:23:EC
            X509v3 Authority Key Identifier:
                keyid:B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:67:23:f7:38:b0:3d:12:f0:36:bc:93:8f:ca:9e:31:ea:c2:
         4c:63:ae:a8:80:36:57:6e:77:9b:dd:ab:d9:99:0d:5e:99:c1:
         14:fa:78:22:52:b2:fb:ce:b3:d0:53:4a:dc:88:bc:ac:82:13:
         49:85:d9:82:c2:af:c5:c9:41:e3:9f:e0:1a:e7:12:61:9c:9d:
         f7:91:52:d4:4e:f3:be:63:a7:de:b9:14:92:6e:23:cd:4e:68:
         32:37:10:1d:78:05:53:f2:cb:93:05:22:e6:da:de:ff:c6:7c:
         2d:83:3e:e3:c0:27:fa:3d:a4:5d:aa:94:81:77:4a:d2:d4:50:
         78:b1:01:d0:c2:a8:e7:94:92:c9:07:0c:92:b8:92:e0:00:40:
         a0:a6:27:e3:0f:4c:9a:91:95:46:52:63:09:ab:e6:9d:b9:e9:
         12:e7:56:a5:2f:ce:0a:e1:bd:48:92:88:16:10:e5:c8:71:a0:
         f7:2a:b3:ce:be:ac:2a:a2:36:9e:3c:8b:6f:54:15:7b:54:b1:
         5c:a1:d6:92:5b:e9:d0:ad:30:91:95:3d:87:f0:f7:80:3f:43:
         ab:f0:cc:de:52:87:3b:ff:e0:24:f2:93:f3:d3:d6:92:9b:2a:
         44:4c:4f:e3:a5:9e:29:43:96:ef:a8:d3:31:d6:32:1d:09:df:
         9a:c5:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:59 2025 by rpki-client