Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
File:                     BE068B06DE5C783A9921447A392452ED53F22837.mft (raw, json)
Hash identifier:          A+q/8lkpcg15Ga1PvZ90jN/EbJzW8wDy9QmLXn0+8PA=
Subject key identifier:   21:BD:4B:62:D6:10:1E:55:97:95:E0:AC:26:D1:70:F4:00:38:53:30
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       3DCEFFEC1EBD7D94079AB18A202F7DC21D0BCC04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
Manifest number:          01DF
Signing time:             Fri 28 Mar 2025 18:22:07 +0000
Manifest this update:     Fri 28 Mar 2025 18:17:07 +0000
Manifest next update:     Sat 29 Mar 2025 19:16:07 +0000
Files and hashes:         1: BE068B06DE5C783A9921447A392452ED53F22837.crl (hash: voCwGtImAbCF6R7L49H2SxrTFDNucBbStU7pk0uYW+4=)
                          2: 323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa (hash: Ie4OZm93/K9ULQ1FWrL9qUOVYg7X4qFltmZD3+T6LJc=)
                          3: 3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa (hash: eiCBi8VqHNpC/9iGRGjG8ESWLMNop386uvSRuMGYccQ=)
                          4: 3137392e3139302e36342e302f31392d3234203d3e20323632343431.roa (hash: zsxR9VgQqwy55CrZQrl/xVkvXP5AfrQp+bxdufKz3ao=)
                          5: 3137372e34342e3234302e302f32302d3234203d3e20323632343431.roa (hash: Gl6stIAf12ZE3t2sT420tJzIfvBwK7//8pAhtza4gKI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ce:ff:ec:1e:bd:7d:94:07:9a:b1:8a:20:2f:7d:c2:1d:0b:cc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Mar 28 18:17:07 2025 GMT
            Not After : Mar 29 19:16:07 2025 GMT
        Subject: CN=21BD4B62D6101E559795E0AC26D170F400385330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:a9:56:f8:16:cb:06:bd:c8:49:7a:d5:9b:
                    5e:38:8e:7a:d5:59:7d:eb:dc:97:70:97:f1:cc:c4:
                    82:f7:21:b3:69:0e:13:ac:32:41:5f:76:f9:a0:c5:
                    19:76:68:91:49:0e:b2:a1:1b:46:81:68:b5:ce:67:
                    d3:cc:07:36:cb:7a:7c:e8:6c:48:6e:7f:4c:9b:2e:
                    47:69:29:6b:57:2f:f2:d1:d7:d6:ae:4f:cc:e7:3c:
                    4e:b2:84:60:55:62:a6:b4:ba:2a:fe:59:a8:8b:7f:
                    dc:18:e8:0b:94:9e:0d:10:39:bd:b4:67:c5:5b:a7:
                    bd:36:15:0f:01:f6:0c:d7:2e:3c:e4:44:17:02:ff:
                    90:98:bd:92:18:2f:e3:07:f0:6d:59:41:a4:8f:55:
                    f7:b1:97:1a:7e:cd:f4:22:67:d9:a9:51:2f:f9:ab:
                    b1:e5:d3:7c:4c:68:97:77:08:71:0d:88:22:53:92:
                    80:fb:5a:f9:ab:2e:84:3f:d3:5f:f7:d5:e0:17:1d:
                    e6:36:62:6a:94:30:77:3d:fe:a0:91:29:fb:9f:00:
                    ad:63:05:90:3a:2c:d8:6e:14:c3:51:4b:42:89:ad:
                    eb:b2:f3:15:b8:75:a3:e7:4f:8b:bb:e5:43:dd:f1:
                    9c:70:3e:61:0c:f8:68:01:3e:1b:e3:1d:aa:d8:2f:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BD:4B:62:D6:10:1E:55:97:95:E0:AC:26:D1:70:F4:00:38:53:30
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ba:e7:3d:ca:6c:48:3e:71:8b:02:0a:1c:3e:ce:fa:fb:89:
         bf:d3:85:35:f0:3c:fd:4a:f3:f8:22:a5:eb:d4:cd:6c:fc:87:
         b6:65:11:f4:98:ff:13:72:68:f2:18:eb:ae:2d:cf:ad:7c:38:
         86:05:80:e5:5c:e1:0e:69:cc:dc:73:21:95:56:9d:a6:19:8e:
         c2:c4:7b:07:11:11:df:be:e6:1e:c2:02:62:18:04:cb:0f:a6:
         82:94:b3:c9:2d:80:73:69:b9:25:e7:4e:c2:eb:1b:e6:2c:92:
         7e:e4:bd:71:a3:ab:a7:43:a9:a5:06:da:a0:b2:79:68:67:08:
         fe:40:af:e5:a2:8a:51:7e:d2:fc:03:50:4d:7c:2b:6f:b9:82:
         03:72:9b:03:ae:9e:ef:2a:db:2a:b3:90:9e:df:07:ac:f8:58:
         ca:0b:c5:20:18:82:e5:ae:8c:2c:cd:c8:37:21:1a:4c:79:49:
         dc:b1:63:be:9d:9d:db:e5:43:60:bb:3f:b1:06:b2:28:cd:8c:
         70:4b:18:2b:54:9f:26:df:e5:88:06:7e:e1:fa:69:cc:6d:ee:
         97:c3:13:80:f6:e7:e0:97:84:91:6d:fa:8c:b5:a7:90:d6:83:
         d0:8f:cb:0b:07:48:ce:fe:51:f9:71:7d:c7:90:11:e7:79:f9:
         c2:07:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:51 2025 by rpki-client