Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft
File:                     A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft (raw, json)
Hash identifier:          BiHyaF9Si1HFLIaZUeGJYiX/JqYa/ZfmNMtfmj5bGcs=
Subject key identifier:   9A:C4:AD:68:6D:6C:11:6D:31:25:CC:60:73:C4:BC:69:D8:10:35:A4
Authority key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D
Certificate issuer:       /CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
Certificate serial:       30C92428A80D3CC4882CE864C42DDFF5F6DA0771
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft
Manifest number:          F7
Signing time:             Fri 28 Mar 2025 20:47:58 +0000
Manifest this update:     Fri 28 Mar 2025 20:42:58 +0000
Manifest next update:     Sun 30 Mar 2025 00:01:58 +0000
Files and hashes:         1: A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl (hash: /nXS1HJkmIV9oCI6xw2pwGmPRxP5JMWjPjh/WWkFo6k=)
                          2: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: qP53uLcUi8/lpPda1LFzdKBLMIoAo8Sn+EO7nc2hXIE=)
                          3: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: WHHYl4WkCr9Dy7/p8D5SuvrsA2+YubqT77pimz+z1PQ=)
                          4: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: O2PvaX8MStIPfCaUBD+VMkNIQYW2aayK5GId4ojGLwc=)
                          5: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: GjGIxQODll55fM7GGEt2OKOT8KlqYOsgqROs+76lfrw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c9:24:28:a8:0d:3c:c4:88:2c:e8:64:c4:2d:df:f5:f6:da:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
        Validity
            Not Before: Mar 28 20:42:58 2025 GMT
            Not After : Mar 30 00:01:58 2025 GMT
        Subject: CN=9AC4AD686D6C116D3125CC6073C4BC69D81035A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:76:36:87:0a:2b:68:20:fa:9e:30:1b:98:
                    07:b9:53:14:97:ae:6c:09:1c:2c:5d:9d:8b:f3:d7:
                    e2:cb:8a:46:c7:3b:e4:cc:4e:66:6c:be:f0:df:2c:
                    87:6d:5c:8a:b8:df:59:54:cf:27:a0:3d:d7:67:be:
                    47:1b:05:eb:3a:70:22:77:27:1c:ff:d5:22:31:7a:
                    12:5d:e7:5d:5b:89:db:64:74:3a:b8:ce:ab:7d:8c:
                    6d:36:57:40:31:f3:d2:a9:b1:53:89:1b:57:05:cf:
                    48:0a:ee:3d:bb:38:5c:84:58:5f:36:fd:81:56:03:
                    be:15:08:29:0e:62:5c:e9:18:67:0f:71:be:10:3d:
                    0d:9d:81:73:04:f4:8a:42:7a:bb:d5:15:bc:19:c2:
                    91:ef:b2:05:b3:db:da:10:9b:34:89:da:e6:28:db:
                    14:b0:2e:b4:d7:23:f4:fd:74:37:6b:44:b2:86:87:
                    0f:18:86:ba:9b:6f:23:68:2f:da:52:b8:af:c3:7e:
                    a9:33:29:81:a9:48:f4:2e:71:2e:09:25:42:5d:97:
                    9a:07:c1:3a:98:2e:26:bf:da:21:21:84:70:38:da:
                    85:82:a6:b5:9d:81:9f:23:86:f1:87:a0:77:d8:b1:
                    aa:78:d7:54:cd:f9:65:d7:43:a1:30:55:37:40:c5:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C4:AD:68:6D:6C:11:6D:31:25:CC:60:73:C4:BC:69:D8:10:35:A4
            X509v3 Authority Key Identifier:
                keyid:A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:80:2e:b1:6e:1b:75:9f:e8:15:27:14:8d:6c:09:f4:8d:5c:
         21:2e:24:f7:a0:0c:3c:ff:a2:5c:66:a7:47:83:9c:5b:46:d6:
         5e:80:32:c2:7a:d6:3e:00:52:53:95:98:76:4f:90:8c:f4:29:
         ea:6f:c2:0a:63:b8:bf:2f:43:5c:e7:8c:ad:97:7c:fb:49:e4:
         88:3e:43:0c:eb:39:7c:33:26:54:8e:45:10:36:bd:28:4b:74:
         a9:f8:d9:90:9c:95:12:4e:8e:1a:33:cf:08:65:2d:dd:3a:17:
         5a:e3:f2:e7:54:67:27:2d:38:4e:3b:19:76:cb:ab:9e:9e:99:
         c3:c2:ca:21:66:4e:8e:78:6b:20:8d:5e:dc:19:19:85:be:e6:
         5a:5e:6b:47:02:e5:e5:65:09:25:10:50:0f:f6:c7:c1:dd:73:
         48:e0:8f:99:1a:09:99:7c:9b:6f:c8:df:c2:14:f5:d1:1d:8f:
         c1:89:90:80:5a:75:04:c9:96:03:3a:e5:c2:a0:29:4d:42:72:
         51:d6:e4:6c:73:f6:73:0a:ff:83:84:d7:98:80:b0:6a:0e:72:
         1c:20:df:d0:40:73:3e:9c:76:a0:75:20:01:68:0d:61:37:ae:
         6d:6c:94:39:33:a2:7d:33:2b:6e:76:75:1f:2d:d3:ae:f6:94:
         d0:b1:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:33:47 2025 by rpki-client