Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.mft
File:                     933D25103B9996B3949AF7607EDF6BC993402B70.mft (raw, json)
Hash identifier:          sXymVtztZgw3J+8dd2uPn3+bx4qhh9YJr4Z9jLITQXc=
Subject key identifier:   45:6E:AD:3A:E5:86:C3:66:C2:47:39:9F:48:37:27:49:3A:1E:26:E6
Authority key identifier: 93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70
Certificate issuer:       /CN=933D25103B9996B3949AF7607EDF6BC993402B70
Certificate serial:       1C5A9D5B749D431003A71403740A21A71EA76F7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.mft
Manifest number:          01E1
Signing time:             Fri 28 Mar 2025 21:08:04 +0000
Manifest this update:     Fri 28 Mar 2025 21:03:04 +0000
Manifest next update:     Sat 29 Mar 2025 22:56:04 +0000
Files and hashes:         1: 933D25103B9996B3949AF7607EDF6BC993402B70.crl (hash: YrCCy4Z4Vz7Xj063Hbr+ZAVOXpTlUo3dh3IMYYhk2W4=)
                          2: 323830343a366431343a3a2f33322d3438203d3e20323730353131.roa (hash: 1AyXqsbNrxCpHeJLdATGLFdpcoAggh6t0n3NiuIaWuo=)
                          3: 3138372e34392e3138302e302f32322d3234203d3e20323730353131.roa (hash: mgjF0e2/BvExQu5x8IkWl57VQG5ClpqruzIeQK/jMMc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5a:9d:5b:74:9d:43:10:03:a7:14:03:74:0a:21:a7:1e:a7:6f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933D25103B9996B3949AF7607EDF6BC993402B70
        Validity
            Not Before: Mar 28 21:03:04 2025 GMT
            Not After : Mar 29 22:56:04 2025 GMT
        Subject: CN=456EAD3AE586C366C247399F483727493A1E26E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:bb:3a:cc:33:7a:4a:98:ad:30:dd:1d:ac:
                    07:98:a7:2d:5f:90:1d:bc:e2:59:46:6c:03:1e:bb:
                    fd:e9:93:a1:3d:53:7c:1a:7b:3e:5f:b2:43:11:b3:
                    7f:c1:27:ae:5e:a5:37:c6:8a:08:60:d7:4b:3f:08:
                    25:f7:2e:44:b2:c4:3a:d8:38:92:36:ea:c1:92:57:
                    f2:21:3f:65:43:a4:55:95:c6:57:92:02:41:fd:1b:
                    61:8f:79:8f:0f:60:34:0e:f5:1a:97:fb:d5:0a:1c:
                    45:85:7f:5f:1d:51:5d:07:6a:df:11:a1:51:4b:38:
                    b1:12:bc:be:83:b0:9e:e2:b2:cf:07:c6:56:11:fb:
                    fa:6f:a7:98:6d:41:f7:29:0e:ee:36:b2:48:6e:6e:
                    8a:85:7e:ee:94:eb:7a:33:c3:9f:bf:ef:33:83:cf:
                    34:15:99:8c:80:03:19:d6:8d:02:5f:04:6d:6f:e0:
                    d9:0b:46:98:2b:0a:d3:64:d2:2b:49:8f:91:9b:10:
                    17:5c:a4:6e:e0:43:d9:ef:5f:9d:52:76:ba:3d:a7:
                    0d:81:7f:96:b7:ac:8d:ec:a7:9d:ab:0e:6a:dd:60:
                    6e:b0:38:74:0e:f6:0a:0a:f9:fd:0b:4a:c3:27:69:
                    6b:10:7b:5a:49:cc:44:ca:7b:7f:6a:4b:55:f6:30:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6E:AD:3A:E5:86:C3:66:C2:47:39:9F:48:37:27:49:3A:1E:26:E6
            X509v3 Authority Key Identifier:
                keyid:93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:21:47:b9:7b:15:9e:0b:67:44:46:af:93:d8:cc:ed:2d:
         79:80:94:ce:f2:f2:e3:19:0f:9c:2e:00:5e:77:d1:00:7b:2a:
         b0:ac:73:47:91:27:48:5f:aa:c2:75:4e:8d:ed:3c:67:2b:b5:
         fe:07:74:84:d2:54:33:f6:90:0b:a5:93:81:8b:69:1e:0d:05:
         24:37:2d:27:99:d9:96:ec:b8:b3:5a:59:50:06:18:22:10:8e:
         dd:e8:99:0a:29:9f:6e:35:13:f0:7f:3d:54:2f:76:e5:b3:3d:
         fe:73:fe:e8:57:57:74:d7:bb:0e:be:c8:19:0c:f6:8c:b4:da:
         27:9e:85:c1:a0:50:f6:bd:2f:63:c1:83:08:52:03:40:fc:c8:
         90:db:51:e3:d6:d0:c8:65:8c:d5:79:f0:d4:28:05:4c:f9:02:
         e1:8f:c1:74:c4:f8:28:31:bb:75:b1:97:16:96:99:71:45:bd:
         10:a8:fc:fe:bb:32:e8:2a:41:e3:81:9d:2a:42:5c:74:f9:9c:
         57:4b:85:42:cb:da:c1:07:d5:82:21:bf:06:c3:b3:a0:f1:bd:
         91:78:10:a8:41:a6:43:15:8f:13:6c:fe:80:77:fc:b5:c7:29:
         70:55:8f:d9:28:74:ab:04:a8:60:2c:84:52:e2:f0:12:e8:a1:
         83:38:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----